AI Incident Reporting Act
Sponsored By: Representative Moran, Nathaniel [R-TX-1]
Introduced
Summary
This bill would create a mandatory incident reporting system for high‑capability AI models by requiring designated developers to notify the Secretary of Commerce about specific dangerous behaviors and security failures.
Show full summary
- Designated developers would have to report incidents within 7 days of learning about them and provide updates as new information appears. Failure to report could trigger civil penalties up to $2.0 million per violation and each continuing day would be a separate offense; reports would be protected from public disclosure and legal waiver while still usable by the Secretary to respond to risks and enforce compliance.
- The Secretary of Commerce would have 180 days to write rules that define which models and developers are covered and to coordinate with other agencies to collect and analyze reports. For imminent or ongoing risks the Secretary would notify specified congressional leaders within 48 hours.
- Reportable incidents would include attempts to evade oversight or deceive evaluators, unauthorized access or theft of model weights, capabilities that enable cyberattacks, unprompted automation of AI research or improvements with serious security implications, and assistance that enables chemical, biological, radiological, nuclear, or explosive weaponization.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
3 provisions identified: 0 benefits, 0 costs, 3 mixed.
Faster AI incident reporting rules
If enacted, covered model developers would have to notify the Secretary within 7 days after they know or reasonably believe a reportable incident happened. The Secretary could require an initial report sooner for urgent cases and would require faster, expedited reporting when there is imminent or ongoing risk. Reports must describe the incident, when it was discovered, likely actors or attack vectors, vulnerabilities or safeguard failures, and mitigation steps. The Secretary would also require follow-up reports with new material information and must notify specified congressional leaders within 48 hours for imminent risks and within 30 days after any supplemental report.
New rules for AI model developers
If enacted, the Secretary of Commerce would have 180 days to write rules saying which AI models and developers are "covered" based on capability thresholds. Covered model developer would include anyone who develops, trains, or substantially modifies a covered model, including fine-tuning model weights. The Secretary would also issue guidance on what categories of incidents to report and how to submit reports securely. This would make some AI products and their creators newly subject to reporting and oversight.
Protections for developer reports and penalties
If enacted, information submitted to the Secretary would be exempt from public disclosure and would not waive trade secret or attorney-client protections. Materials created only to prepare a report could not be used in civil, criminal, or administrative cases against the reporting developer. At the same time, the Secretary would be able to investigate, issue subpoenas, and after notice and a hearing assess civil penalties up to $2,000,000 per violation, with each day of a continuing violation treated as a separate offense. The Secretary would be able to share reports with other agencies to stop threats but must set protection procedures within 180 days.
Sponsors & CoSponsors
Sponsor
Moran, Nathaniel [R-TX-1]
TX • R
Cosponsors
Rep. Whitesides, George [D-CA-27]
CA • D
Sponsored 8/20/2026
Rep. Jacobs, Sara [D-CA-51]
CA • D
Sponsored 8/24/2026
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov