The bill substantially strengthens transparency, consumer recourse, and safety oversight for high‑impact automated decision systems, but does so at the cost of new compliance burdens, potential privacy and proprietary‑data risks, and increased legal and administrative complexity that will disproportionately affect small businesses and require careful rulemaking to avoid uneven protections.
Consumers (including historically marginalized groups) gain clearer protections and enforceable rights: defined covered automated decision systems, required notice/explainability/appeal/opt‑out mechanisms, and explicit FTC/state enforcement paths increase recourse against harmful automated decisions.
Regulators, researchers, and the public get substantially more transparency and documentation about high‑impact ADS through mandatory impact assessments, FTC reporting, and a searchable public repository, improving oversight and enabling policy research.
Users and public safety benefit from stronger safety and bias controls because covered entities must test systems, assess likely harms before/after deployment, evaluate differential performance across protected characteristics, and consult impacted stakeholders.
Small businesses, startups, and some covered entities will face significant new compliance, reporting, and documentation costs that may slow product deployment, disadvantage smaller competitors, and be passed on to consumers.
Preserving parallel state/local enforcement while expanding federal authority risks a patchwork of rules, duplicative or inconsistent litigation, and uneven protections depending on where people live.
Broad statutory definitions and expanded FTC rulemaking authority permit scope creep and regulatory uncertainty as agencies define covered systems and critical‑decision domains over time, increasing planning risk for affected sectors.
Based on analysis of 11 sections of legislative text.
Requires FTC-regulated entities that build or use automated systems for critical decisions to do pre/post impact assessments, report to the FTC, and follow FTC regulations and guidance.
Official title: Direct the Federal Trade Commission to require impact assessments of automated decision systems and augmented critical decision processes, and for other purposes.
Introduced June 25, 2025 by Ronald Lee Wyden · Last progress June 25, 2025
Creates a federal regulatory framework requiring certain companies that develop or deploy automated decision systems (ADS) used to make important, legally or materially consequential decisions to carry out and keep detailed pre- and post-deployment impact assessments, submit summary reports to the Federal Trade Commission (FTC), and follow FTC regulations and guidance. The FTC must write rules (in consultation with NIST, OSTP, and other experts), publish machine-readable annual summaries and a public repository of limited information, and enforce violations under its existing unfair or deceptive acts authority; states may also sue and enforce alongside the FTC. The law defines covered entities by revenue/valuation and user/data thresholds, lists covered critical decision domains (education, employment, healthcare, housing, financial services, utilities, family planning, legal services, and similar areas), establishes requirements for testing, stakeholder consultation, privacy/security evaluation, retention of documentation, and transparency/contest mechanisms, and creates an FTC Bureau of Technology to support technical work and interagency coordination.