Congressman Pat Harrigan Introduces Legislation to Protect American Innovation and Strengthen Cyber Defenses

Contact: Lexi Kranich (814) 380-4408

WASHINGTON, D.C.-Today, Congressman Pat Harrigan (NC-10), alongside Congressman George Whitesides (CA-27), introduced the bipartisanAI Cyber Defense Act, legislation to protect American innovation from foreign exploitation and strengthen cybersecurity defenses for critical infrastructure, including power grids, hospitals, and financial systems.

"Some of the greatest advances in artificial intelligence are happening right here in America, and we have a responsibility to make sure that technology is secure," said Congressman Harrigan. "Our adversaries are already looking for ways to exploit these systems, and as AI becomes more powerful, the risks to our critical infrastructure will only grow. We need to get the companies developing this technology working directly with the people responsible for defending our power grids, hospitals, and financial systems. That's how we stay ahead of the threats and protect the Americans who depend on these systems every day."

"AI is advancing at a breakneck pace, and every month we keep China and other adversaries from stealing our progress is a month we gain to build the safeguards this technology needs," said Congressman Whitesides. "This bill helps stop the theft of American AI models and makes sure the operators of our power grids, water systems, and other critical infrastructure are protected as AI makes cyberattacks faster, cheaper, and harder to stop. I'm proud to join Rep. Harrigan on this bipartisan effort."

The AI Cyber Defense Act directs the National Institute of Standards and Technology (NIST) to work with private-sector AI developers to establish voluntary standards for detecting and preventing AI distillation attacks, which can allow outside actors to extract valuable capabilities from advanced AI models. The legislation also establishes an AI Cybersecurity Roundtable bringing together technology companies and critical infrastructure operators to develop best practices for using artificial intelligence to strengthen cybersecurity defenses. Entities tied to China, Russia, Iran, North Korea, and Cuba would be excluded from the eligible private-sector stakeholders involved in developing these standards.

Under the legislation, NIST would have 180 days following enactment to begin engaging industry stakeholders and establish the roundtable. The resulting voluntary standards and best practices would be made publicly available to help American businesses and critical infrastructure operators better protect their systems against emerging cyber threats.