Sponsor
Donald J. Bacon
Representative · R-NE
Representative · R-NE
The bill standardizes and accelerates DoD action to remove high‑risk third‑party AI—improving operational security and predictability—but risks near‑term capability gaps, increased replacement and compliance costs, and rushed policies that may overlook technical nuances.
Military personnel and DoD systems get clearer, standardized rules to identify and remove risky third‑party AI, improving operational security and reducing exposure to high‑risk tools.
DoD units, contractors, and federal IT staff gain faster and more predictable timelines (a 30‑day action deadline and a 90‑day post‑trigger applicability date), enabling quicker mitigation and more reliable planning.
Military units and federal employees that depend on third‑party AI may face short‑term capability gaps and costs to replace excluded tools, reducing readiness and creating near‑term expenses.
DoD IT and program offices may be forced to produce rushed or overly broad guidance to meet tight deadlines, risking technically inadequate policies and increased administrative burden.
Broad authority to designate "covered" AI companies can create compliance uncertainty for contractors and suppliers, raising procurement, compliance, and legal costs.
Based on analysis of 2 sections of legislative text.
Requires DoD guidance within 30 days to identify "covered AI" companies and to exclude/remove their AI from DoD systems; delays a related provision by 90 days after a trigger.
Requires the Secretary of Defense to issue Department-wide guidance, within 30 days after enactment of the FY2027 NDAA, for identifying “covered artificial intelligence companies” and for excluding or removing AI developed by those companies from Department systems and devices. Also changes an applicability clause so that a referenced provision takes effect 90 days after a specified date, rather than immediately upon that triggering event. The bill adds a firm deadline for DoD guidance and makes the timing of an existing exclusion provision explicitly tied to a date 90 days after a triggering event. The changes affect how the Department will identify certain AI vendors and when exclusion rules apply to DoD systems and devices.
Official title: To require the Secretary of Defense to issue Department of Defense-wide guidance for identifying certain artificial intelligence products and excluding and removing those products from systems and devices of the Department, and for other purposes.
Introduced September 17, 2026 by Donald J. Bacon · Last progress September 17, 2026