Introduced September 19, 2025 by Yvette Diane Clarke · Last progress September 19, 2025
The bill strengthens consumer privacy, transparency, fairness, and federal AI‑oversight capacity for high‑impact automated decision systems but does so by imposing substantial compliance, disclosure, and administrative burdens that may disadvantage small firms, create trade‑secret risks, and leave room for regulatory fragmentation and budgetary trade‑offs.
Consumers across the U.S. gain stronger privacy protections because the bill defines key terms (like ‘identifying information’ and biometrics), requires data‑minimization, retention safeguards, and privacy‑enhancing practices.
Consumers (especially those facing high‑stakes automated decisions) get clearer recourse and procedural rights because covered algorithms must undergo pre‑ and post‑deployment impact assessments, provide notice, opt‑out/contest/correction mechanisms, and remediation for likely material harms.
People from historically disadvantaged groups stand to face fewer biased outcomes because the bill requires differential‑performance testing, documentation of mitigation steps, and stakeholder/civil‑rights consultation during assessments.
Businesses (especially small firms) and taxpayers will face substantial new compliance costs because covered entities must perform extensive impact assessments, testing, reporting, record retention, training, and maintain public repositories.
Regulatory uncertainty and fragmentation may persist or worsen because coordination has no firm deadlines or enforcement, state/local rules can differ, and evolving Commission guidance/rulemaking could force repeated adjustments by regulated entities.
Disclosure and interagency sharing requirements risk exposing proprietary models, datasets, testing methods, or trade secrets — raising confidentiality concerns and potential competitive harm for firms.
Based on analysis of 11 sections of legislative text.
Requires FTC-regulated entities that meet revenue, equity, or data thresholds to perform, retain, and report algorithmic impact assessments, and tasks the FTC with rulemaking, a public repository, and enforcement.
Requires companies that meet revenue, equity, or data-volume thresholds to run, document, and report formal algorithmic impact assessments for automated systems that make important decisions affecting people. Directs the Federal Trade Commission to write and enforce rules, build a public, searchable repository of summary reports, create a new Bureau of Technology with technical staff, coordinate with other federal agencies and standards bodies, and give states a role in enforcement. Sets specific definitions and size/data thresholds for covered entities, requires retention of assessment materials, mandates annual and pre-deployment summary reports, and establishes timelines for rulemaking, repository development, and staffing. Enforcement uses the FTC’s existing unfair or deceptive practices authority and allows state attorneys general to bring civil actions on behalf of residents.