3 minute read | September.26.2024
The Commerce Department’s Bureau of Industry and Security (BIS) has proposed a rule that would establish reporting requirements to track development of advanced artificial intelligence (AI) models, in accordance with instructions in an October 2023 executive order.
The proposed rule is intended to bolster the government’s understanding of the capabilities and security of dual-use foundational AI models. BIS emphasizes that the U.S. government must be ready to take action to ensure the models are appropriately trained, can operate in a safe and reliable manner, and are not vulnerable to cyberattacks such that they are available to support the U.S. defense industrial base.
BIS is seeking comments on the proposed rule, with all comments due by October 11, 2024. BIS has expressed a particular interest in comments on the quarterly notification schedule, best practices for collecting and storing data submitted pursuant to the reporting requirements, and the technical thresholds that trigger the proposed reporting requirements.
The proposed regulation and underlying executive order demonstrate the seriousness of both (i) the U.S. government’s concerns about misuse of AI models in ways that would, in its view, undermine U.S. security, and (ii) the government’s belief that it is critical to have advanced AI models for use by the U.S. government.
Who Would the Rule Affect?
The proposed rule would require U.S. companies that are developing or have plans to develop dual-use foundational models to file quarterly reports with BIS. The proposed rule would apply to U.S. persons that conduct or plan to conduct an AI training run utilizing more than 1026 computational operations (e.g., integer or floating-point operations).
It would also require U.S. persons who acquire, develop, or possess large-scale computing clusters – defined as clusters having a set of machines transitively connected by networking of over 300 Gbit/s and having a theoretical maximum performance greater than 1020 computational operations per second for AI training, without sparsity – to file such reports.
What Must be Reported?
BIS proposes that companies be required to submit a notification that they engage or plan to engage in covered activities. Upon receipt of such a notification, BIS would send the submitting company a questionnaire for which a response is compulsory.
Covered companies that develop dual-use foundational models would have to report:
The proposal would require that responses to the questionnaire are submitted on a quarterly basis and cover activities that occurred during the preceding quarter or that are planned to occur in the six months following the quarter.