S. 2528

119th CONGRESS 1st Session

To establish AI Innovation Labs that permit certain persons to experiment with artificial intelligence without expectation of enforcement actions.

IN THE SENATE OF THE UNITED STATES · July 29, 2025 · Sponsor: Mr. Rounds · Committee: Committee on Banking, Housing, and Urban Affairs

Table of contents

• S. 2528
  • SEC. 1. Short title
  • SEC. 2. Definitions
  • SEC. 3. Use of artificial intelligence by regulated financial entities

SEC. 1. Short title

• This Act may be cited as the Unleashing AI Innovation in Financial Services Act.

SEC. 2. Definitions

• The term AI test project means a financial product or service that—
• The term appropriate financial regulatory agency means—
• The terms and have the meaning given the term in section 5002 of the National Artificial Intelligence Initiative Act of 2020 (). artificial intelligence AI artificial intelligence 15 U.S.C. 9401
• The term Commission means the Securities and Exchange Commission.
• The term Federal securities laws means—
• The term — financial product or service
• The term financial regulatory agency means—
• The term regulated entity means an entity regulated by any financial regulatory agency.

SEC. 3. Use of artificial intelligence by regulated financial entities

• (a) AI innovation labs
  • (1) Establishment
    • Each financial regulatory agency shall establish, or identify an office, division, or department of the agency that shall serve as, an AI Innovation Lab to enable regulated entities to experiment with AI test projects without unnecessary or unduly burdensome regulation or expectation of enforcement actions, pursuant to the approval of an application under paragraph (2).
  • (2) Applications
    • (A) Submission
      • (i) A regulated entity may submit to the appropriate financial regulatory agency an application, on a form determined by the appropriate financial regulatory agency, to engage in an AI test project through the AI Innovation Lab established or identified under paragraph (1).
      • (ii) An application submitted under clause (i) shall include—
      • a description of the AI test project proposed to be carried out by the regulated entity;
      • an alternative compliance strategy that—
      • identifies a regulation issued by the appropriate financial regulatory agency that the regulated entity requests to be waived or modified; and
      • proposes an alternative method for the regulated entity to comply with the regulation, including an explanation as to why the alternative method is essential to the operation of the entity and how the regulated entity would effectively manage risks associated with the AI test project;
      • an explanation of how under the strategy described in subclause (II), the AI test project—
      • would serve the public interest, improve consumer or investor access to a financial product or service, or promote consumer or investor protection;
      • would enhance efficiency or operations, foster innovation or competitiveness, improve risk management and security, or enhance regulatory compliance;
      • would not present a systemic risk to the financial system of the United States;
      • is consistent with the purposes of the anti-money laundering and countering the financing of terrorism obligations under subchapter II of of title 31, United States Code; and chapter 53
      • would not present a national security risk to the United States;
      • a proposed date on which the AI test project would terminate and an explanation why such termination date would be appropriate;
      • proposed limitations on the size, scope, and growth of the AI test project;
      • a detailed business plan; and
      • an estimate of the economic impact of the AI test project if approved.
      • (iii) Two or more regulated entities may submit a joint application to the same financial regulatory agency under clause (i).
      • (iv) Regulations of other agencies
        • A regulated entity may submit an application under this subparagraph that includes an alternative compliance strategy for a regulation issued or enforced by a financial regulatory agency that is not the appropriate financial regulatory agency for the regulated entity.
        • An application described in subclause (I) shall be subject to the same requirements as an application described in clause (ii), except that—
        • the regulated entity shall submit the application to the appropriate financial regulatory agency and the financial regulatory agency that issued or enforces the regulation that is the subject of the alternative compliance strategy; and
        • the AI test project may not take effect unless the appropriate financial regulatory agency and any other financial regulatory agency that issued or enforces the regulation that is the subject of the alternative compliance strategy jointly approve the application using the process described in subparagraph (B).
        • (v) A regulated entity that is regulated or supervised by more than 1 financial regulatory agency shall provide notice of any application submitted to the appropriate financial regulatory agency under this section to each financial regulatory agency by which it is regulated or supervised not later than 5 business days after the entity submits the application to the appropriate financial regulatory agency.
    • (B) Agency review
      • (i) Except as provided in clause (iv), not later than 120 days after the date on which an application is submitted to the appropriate financial regulatory agency under subparagraph (A), the appropriate financial regulatory agency shall—
      • review the application; and
      • submit to the applicant in writing a determination of the agency.
      • (ii) Approval
        • If the applicant shows that it is more likely than not that the application meets the requirements for establishing an alternative compliance strategy and satisfies the standards described in subclauses (II) and (III) of subparagraph (A)(ii), the agency shall approve the application and notify the applicant in writing of—
        • the regulation that is the subject of the alternative compliance strategy;
        • the terms of the alternative compliance strategy for the AI test project;
        • the date on which the AI test project will terminate;
        • any limitations on the size, scope, or growth of the AI test project; and
        • any additional limitations or conditions on the AI test project, as determined by the appropriate financial regulatory agency.
        • With respect to an AI test project, except as provided in subclause (III), beginning on the date on which an application submitted under subparagraph (A) is approved and ending on the date described in subclause (I)(cc)—
        • the appropriate financial regulatory agency may enforce a regulation described in subclause (I)(aa) only in the manner set out in the alternative compliance strategy described in subclause (I)(bb); and
        • a financial regulatory agency that is not the appropriate financial regulatory agency may not enforce a regulation described in subclause (I)(aa).
        • With respect to an AI test project, a financial regulatory agency other than the appropriate financial regulatory agency that approves an application under subparagraph (A)(iv) may enforce a regulation described in subclause (I)(aa) if the alternative compliance strategy described in subclause (I)(bb) provides for enforcement by such financial regulatory agency.
        • Nothing in this clause may be construed to limit the authority of a financial regulatory agency to take an enforcement action against a regulated entity with respect to fraud or for engaging in an unsafe or unsound practice relating to an AI test project.
      • (iii) Denial
        • If an agency denies an application submitted under subparagraph (A), the agency—
        • shall submit to the applicant a written notice explaining the reason for denial; and
        • may not take an enforcement action related to the proposed AI test project against the applicant earlier than the date that is 30 days after the date on which the agency submits the written notice described in item (aa).
        • Each time an application submitted under subparagraph (A) is denied, the regulated entity—
        • may submit an amended application after receiving feedback from the agency making such denial; and
        • may not resubmit more than 2 applications that are substantially similar to the denied application.
        • A financial regulatory agency, by and through its own attorneys, may file a civil action in an appropriate United States district court to enjoin an AI test project if the agency determines that the AI test project—
        • presents an immediate danger to consumers or investors; or
        • presents a risk—
        • to financial markets;
        • in the case of an AI test project engaged in by an insured depository institution or an insured credit union, of loss to a Federal deposit or share insurance fund;
        • of a violation of anti-money laundering and countering the financing of terrorism obligations under subchapter II of of title 31, United States Code; or chapter 53
        • to the national security of the United States.
        • (iv) If the financial regulatory agency needs additional time, the agency may extend the approval deadline by 120 days. After the expiration of the 120-day extension period, if the agency has not made a determination on the application, the application will automatically be deemed approved and effective.
    • (C) Data security
      • All data supplied by sponsors of AI test projects to a financial regulatory agency submitted under this section shall be stored and maintained in a secure manner by the financial regulatory agency, consistent with applicable data security standards.
    • (D) Regulations
      • Not later than 180 days after the date of enactment of this Act, each financial regulatory agency shall promulgate regulations that—
        • (i) shall be published in the Federal Register and provide a 60-day period for public notice and comment; and
        • (ii) include—
        • procedures for modifying the AI test projects that are approved by the agency;
        • consequences for failure to comply with the terms of an alternative compliance strategy;
        • a requirement that an AI test project will terminate not earlier than 1 year after the AI test project is approved;
        • procedures to extend the termination date described in subclause (III);
        • procedures for confidentiality; and
        • procedures for coordinating decisions relating to applications submitted jointly by multiple regulated entities or applications submitted to more than one financial regulatory agency.
• (b) Report
  • Not later than 2 years after the date of enactment of this Act, and each year for 7 years thereafter, each financial regulatory agency shall submit to the Committee on Banking, Housing, and Urban Affairs of the Senate and the Committee on Financial Services of the House of Representatives an annual report on the outcomes of AI test projects. A report under this subsection may not include the names of participating entities or any proprietary or confidential business information. A report under this subsection shall include aggregated findings, trends, and lessons learned from the AI test projects.
• (c) Rule of construction
  • Nothing in this section may be construed to limit the authority of a financial regulatory agency to take an enforcement action against a regulated entity with respect to fraud relating to an AI test project.