Sponsors (14)
Official title: Prohibit employment discrimination against whistleblowers reporting AI security vulnerabilities or AI violations, and for other purposes.
Introduced May 15, 2025 by Charles Ernest Grassley · Last progress May 15, 2025
The bill strengthens AI‑security disclosure and whistleblower protections and clarifies AI-related definitions to improve safety and worker rights, but it raises compliance, liability, and potential export/collaboration frictions that increase costs and legal risk for developers and employers.
Tech workers and contractors can report AI security flaws without fear of retaliation and have stronger remedies (reinstatement, double back pay, fee shifting), barred contractual waivers, and a DOL complaint route with a court fallback, increasing job and financial protection for whistleblowers.
Federal agencies, contractors, and the public benefit from statutory tools and disclosure incentives that help identify and address AI security vulnerabilities and reduce the risk that advanced AI capabilities are acquired or exploited by adversaries.
Tech workers and organizations receive clearer, more uniform definitions for 'AI' and 'artificial system', reducing regulatory uncertainty for R&D and deployment decisions.
Developers, small businesses, and employers face substantially higher regulatory and legal costs and uncertainty because broad AI definitions, strong remedies (double back pay, jury trials), an absolute 10-year limitation period, and an expansive 'AI violation' standard increase compliance burdens and litigation exposure.
Government contractors and exporters could face export‑like restrictions or impediments to international collaboration and sales because the security‑vulnerability definition includes acquisition by 'a foreign entity', potentially complicating global partnerships.
Broader reporting protections (reasonable‑belief standards and coworker reporting) and the shift toward court/jury enforcement may lead to more workplace disputes, defensive firings, and administrative burden on employers responding to allegations.
Based on analysis of 3 sections of legislative text.
Bars employer retaliation against employees and contractors who report AI security vulnerabilities or AI-related legal violations and establishes DOL/court enforcement with robust remedies.
Prohibits employers from retaliating against employees and independent contractors who report AI security vulnerabilities or other violations of federal law related to AI, and who participate in related investigations. It establishes an enforcement process modeled on existing whistleblower law: complaints to the Department of Labor (with a fallback to federal court if DOL does not decide within 180 days), a 10-year statute of limitations for court actions, and remedies including reinstatement, double back pay, compensatory damages, and attorneys’ fees. Waivers, including arbitration agreements, cannot bar these protections.