<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Introduced-in-Senate" dms-id="A1" public-private="public" slc-id="S1-BAG23B85-D3V-JF-R55"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>118 S2502 IS: Artificial Intelligence Bug Bounty Act of 2023</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2023-07-26</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code><congress>118th CONGRESS</congress><session>1st Session</session><legis-num>S. 2502</legis-num><current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber><action><action-date date="20230726">July 26, 2023</action-date><action-desc><sponsor name-id="S381">Mr. Rounds</sponsor> introduced the following bill; which was read twice and referred to the <committee-name committee-id="SSAS00">Committee on Armed Services</committee-name></action-desc></action><legis-type>A BILL</legis-type><official-title>To require the Chief Data and Artificial Intelligence Officer of the Department of Defense to develop a bug bounty program relating to dual-use foundational artificial intelligence models.</official-title></form><legis-body><section id="idd27dc497aa01407ba3261769023e7c84" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Artificial Intelligence Bug Bounty Act of 2023</short-title></quote>.</text></section><section id="ide873726eb0e545af8ccb4b04c8ea9e4b"><enum>2.</enum><header>Artificial intelligence bug bounty programs</header><subsection commented="no" display-inline="no-display-inline" id="ideba2e1443b60416eb434fdab97d6cea5"><enum>(a)</enum><header>Program for foundational artificial intelligence products being incorporated by Department of Defense</header><paragraph commented="no" display-inline="no-display-inline" id="id691f1399cf9c435d847c9dde6b6a3d60"><enum>(1)</enum><header>Development required</header><text display-inline="yes-display-inline">Not later than 180 days after the date of the enactment of this Act, the Chief Data and Artificial Intelligence Officer of the Department of Defense shall develop a bug bounty program for foundational artificial intelligence products being incorporated by the Department of Defense.</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id5f04645dc5424fc2b7fa25652db78ef4"><enum>(2)</enum><header>Collaboration</header><text>In developing the program required by paragraph (1), the Chief may collaborate with the heads of other government agencies that have expertise in cybersecurity and artificial intelligence.</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id235225b2cd90458aa268c78c2cd2e117"><enum>(3)</enum><header>Implementation authorized</header><text>The Chief may carry out the program developed pursuant to subsection (a).</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id65bfc23320fc43f2956364e56681ff18"><enum>(4)</enum><header>Contracts</header><text>The Secretary of Defense shall ensure that whenever the Department of Defense enters into any contract, the contract allows for participation in the bug bounty program developed pursuant to paragraph (1).</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="ida1e61838c98f4c36a32f925a2b593af5"><enum>(5)</enum><header>Rule of construction</header><text>Nothing in this subsection shall be construed to require—</text><subparagraph commented="no" display-inline="no-display-inline" id="ida13af7667a78464e8d704ef2967b63ab"><enum>(A)</enum><text display-inline="yes-display-inline">the use of any foundational artificial intelligence product; or</text></subparagraph><subparagraph commented="no" display-inline="no-display-inline" id="idf9391053e5f5435ebd907d4a5eeb9762"><enum>(B)</enum><text>the implementation of the program developed pursuant to paragraph (1) in order for the Department to incorporate a foundational artificial intelligence product.</text></subparagraph></paragraph></subsection><subsection commented="no" display-inline="no-display-inline" id="id2e39caeba8d348708db9b7537aa7d7a2"><enum>(b)</enum><header>Briefing</header><text>Not later than one year after the date of the enactment of this Act, the Chief shall provide the congressional defense committees (as defined in section 101(a) of title 10, United States Code) a briefing on—</text><paragraph commented="no" display-inline="no-display-inline" id="idbbcb65ce0ee1493c90f7f7d998b9d65c"><enum>(1)</enum><text display-inline="yes-display-inline">the development and implementation of bug bounty programs the Chief considers relevant to the matters covered by this section; and</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="id88548843b592424888c71beea41fae0b"><enum>(2)</enum><text display-inline="yes-display-inline">long-term plans of the Chief with respect to such bug bounty programs.</text></paragraph></subsection></section></legis-body></bill> 

