Backers of a new bipartisan bill argue that conflicting state AI laws are driving up costs and slowing innovation.
The 'Great American Artificial Intelligence Act' (GAAIA) proposes formally establishing the Center for AI Standards and Innovation (CAISI) within the Department of Commerce. This center would receive $100 million annually to develop voluntary security guidelines and evaluate future AI systems. Additionally, the bill mandates that large frontier developers report critical safety incidents to the federal government and requires the creation of a testbed for public-private AI evaluation. Penalties for using AI to impersonate government officials would also be enforced. This aims to create a more unified approach to AI governance.
The AI industry, particularly frontier companies, often prioritizes rapid deployment and efficiency over safety, systemic security, and catastrophic risk mitigation. While the GAAIA requires large frontier developers to publish an AI framework detailing their approach to risk, cybersecurity, and incident response, some experts like Steven Swift from Suzu Labs view this as potentially low-value compliance overhead, especially if the data is public and conservative. Swift suggests caution against applying the same stringent requirements to smaller organizations, where compliance costs can be disproportionately high. He also argues that the proposed whistleblower protections in the bill are too weak and could be strengthened to materially benefit society.
There is a significant debate regarding whether AI development should be primarily regulated at the federal or state level. Proponents of federal oversight argue it would prevent a chaotic patchwork of conflicting state laws, ensuring consistent national safety standards and consumer protections, and preventing 'regulatory arbitrage' where developers might relocate to less regulated states. However, several states, including California, Colorado, and New York, have already enacted their own AI laws, creating a complex and costly compliance landscape, particularly for smaller startups. Experts propose that federal government should oversee AI model development, while states should focus on regulating how AI-powered software is used, including aspects of consumer protection, privacy, security, and trade. Organizations are advised to prepare for this dual-track regulatory environment by implementing internal risk validation frameworks and auditing deployment pipelines to ensure compliance with both federal and localized usage restrictions.