(a)
Definition of country of concern— In this section, the term country of concern has the meaning given the term “covered nation” in section 4872(f) of title 10, United States Code.
(b)
Report required— Not later than 1 year after the date of the enactment of this Act, the Secretary of Commerce shall, in consultation with the Secretary of Defense, submit to the Committee on Armed Services of the Senate and of the House of Representatives, the Committee on Commerce, Science, and Transportation of the Senate, and the Committee on Energy and Commerce of the House of Representatives a detailed report on the threats to national security posed by artificial intelligence platforms, including large language models and generative artificial intelligence, based in or affiliated with countries of concern.
(c)
Contents— The report submitted pursuant to subsection (b) shall include the following:
(1)
An analysis of censorship laws and capacities by governments described in subsection (a) that could access or influence of artificial intelligence applications.
(2)
An analysis of the potential and current use of artificial intelligence platforms to further state-sponsored propaganda.
(3)
The national security impact of circumvention of United States export controls on graphics processing units contributed to the development of artificial intelligence models of countries of concern.
(4)
An analysis of the privacy and data security threats toward United States data entered or otherwise submitted to an artificial intelligence application, including—
(A)
how and where United States users’ data is stored, including whether such data is stored within on-premise servers or a cloud infrastructure;
(B)
whether United States users’ data can be accessed and used by a government or political entity of a country of concern, including the Chinese Communist Party;
(C)
the extent to which data collected from the United States contributes to the development of artificial intelligence applications described in subsection (b);
(D)
the threat that such access could be an economic espionage risk to intellectual property, trade secrets, proprietary information, or sensitive or confidential information to obtain an unlawful advantage; and
(E)
the threat that such access could be a risk to information, including policy decisions, relating to an office or program under the Federal Government.
(5)
Any other information considered relevant by the Secretary.
(6)
Recommendations for administrative and legislative action to address data security and privacy risks posed to the United States by artificial intelligence applications affiliated with governments of countries of concern.
(d)
Form— The report submitted pursuant to subsection (b) shall be submitted in unclassified form, but may include a classified annex.