AI Flaw Reporting and Security Enhancement Act

This bill directs the Director of the National Institute of Standards and Technology (NIST), in consultation with the Cybersecurity and Infrastructure Security Agency, to establish a program for the voluntary reporting, collection, and tracking of artificial intelligence (AI) flaws. The program will convene representatives from industry, academia, nonprofit organizations, and government to define and characterize various AI flaws, including vulnerabilities, failures, and incidents. Key activities include supporting the development of technical standards, guidance, and methods for prioritizing remediation of AI flaws, as well as technical approaches to accelerate their detection and monitoring. NIST will also identify best practices and develop standardized reporting and documentation mechanisms, including automated ones, and establish norms for appropriate disclosure of these flaws. A central component of the program is the development of infrastructure for this voluntary reporting, which will include a national database of artificial intelligence flaws . This database may be maintained by NIST or designated eligible entities, with considerations for machine-readability and interoperability with existing systems. Within three years of enactment, NIST must submit a report to Congress detailing the program's implementation, stakeholder findings, and recommendations for reporting and collection mechanisms.