AI Incident Reporting and Security Enhancement Act

HR 9720, the AI Incident Reporting and Security Enhancement Act, creates a voluntary framework for tracking AI security and safety incidents. It directs the National Institute of Standards and Technology (NIST) to develop common definitions for AI security incidents (exploitable weaknesses) and AI safety incidents (accidental system failures), and to convene industry, government, and civil society to design standardized reporting processes. The bill requires NIST to submit a report to Congress within three years detailing recommendations for voluntary incident sharing, including automated tools and public disclosure norms. It does not impose mandatory reporting or enforcement authority, focusing instead on collaborative development of best practices for AI incident tracking. This affects AI developers, security teams, and federal agencies involved in AI systems.