[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[S. 2502 Introduced in Senate (IS)]

<DOC>






118th CONGRESS
  1st Session
                                S. 2502

 To require the Chief Data and Artificial Intelligence Officer of the 
Department of Defense to develop a bug bounty program relating to dual-
            use foundational artificial intelligence models.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                             July 26, 2023

  Mr. Rounds introduced the following bill; which was read twice and 
              referred to the Committee on Armed Services

_______________________________________________________________________

                                 A BILL


 
 To require the Chief Data and Artificial Intelligence Officer of the 
Department of Defense to develop a bug bounty program relating to dual-
            use foundational artificial intelligence models.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Artificial Intelligence Bug Bounty 
Act of 2023''.

SEC. 2. ARTIFICIAL INTELLIGENCE BUG BOUNTY PROGRAMS.

    (a) Program for Foundational Artificial Intelligence Products Being 
Incorporated by Department of Defense.--
            (1) Development required.--Not later than 180 days after 
        the date of the enactment of this Act, the Chief Data and 
        Artificial Intelligence Officer of the Department of Defense 
        shall develop a bug bounty program for foundational artificial 
        intelligence products being incorporated by the Department of 
        Defense.
            (2) Collaboration.--In developing the program required by 
        paragraph (1), the Chief may collaborate with the heads of 
        other government agencies that have expertise in cybersecurity 
        and artificial intelligence.
            (3) Implementation authorized.--The Chief may carry out the 
        program developed pursuant to subsection (a).
            (4) Contracts.--The Secretary of Defense shall ensure that 
        whenever the Department of Defense enters into any contract, 
        the contract allows for participation in the bug bounty program 
        developed pursuant to paragraph (1).
            (5) Rule of construction.--Nothing in this subsection shall 
        be construed to require--
                    (A) the use of any foundational artificial 
                intelligence product; or
                    (B) the implementation of the program developed 
                pursuant to paragraph (1) in order for the Department 
                to incorporate a foundational artificial intelligence 
                product.
    (b) Briefing.--Not later than one year after the date of the 
enactment of this Act, the Chief shall provide the congressional 
defense committees (as defined in section 101(a) of title 10, United 
States Code) a briefing on--
            (1) the development and implementation of bug bounty 
        programs the Chief considers relevant to the matters covered by 
        this section; and
            (2) long-term plans of the Chief with respect to such bug 
        bounty programs.
                                 <all>