Pandemic Preparedness and Response Act, Sec. 407 ("AI Threats to Health Security")

Summary

Requires the Secretary of Health and Human Services to seek a contract with the National Academies of Sciences, Engineering, and Medicine to conduct a study on AI-related health security vulnerabilities within 45 days of enactment.

Mandates the study to assess risks posed by AI advancements, including those related to chemical, biological, radiological, and nuclear (CBRN) threats, and the ways AI may enable, enhance, or protect against such threats.

Describes roles and capabilities of HHS agencies and other Federal entities in identifying, preparing for, and mitigating these vulnerabilities.

Summarizes ongoing Federal activities related to the identification, understanding, and mitigation of these risks.

Identifies current or anticipated gaps in roles, responsibilities, and capabilities regarding AI-related health security.

Provides recommendations for improving Federal efforts to identify, prepare for, and mitigate these vulnerabilities.

Requires the National Academies to submit a report on the study to the Senate HELP Committee and the House Energy and Commerce Committee within 2 years.

Mandates the Secretary of HHS to submit a follow-up report on actions taken to mitigate AI-related health security risks within 1 year after the National Academies’ report.

Requires the Secretary of Health and Human Services to contract the National Academies within 45 days to study how the use or misuse of artificial intelligence, including open-source models such as large language models, may create vulnerabilities to health security, and to report findings and recommendations to Congress.

SEC. 407. ASSESSMENT OF ARTIFICIAL INTELLIGENCE THREATS TO HEALTH SECURITY.

(a) In General.—Not later than 45 days after the date of enactment of this Act, the Secretary of Health and Human Services (referred to in this section as the “Secretary”) shall seek to enter into a contract with the National Academies of Sciences, Engineering, and Medicine (referred to in this section as the “National Academies”) to conduct a study assessing the potential vulnerabilities to health security presented by the current or prospective use or misuse of artificial intelligence, including with respect to open-source artificial intelligence models, such as large language models.

Includes an assessment of AI-related vulnerabilities to health security, a review of Federal roles and activities, the identification of gaps, and recommendations to strengthen Federal efforts to identify and mitigate these risks.

(b) Inclusions.—The study conducted pursuant to the contract under subsection (a) shall include—

(1) an assessment of the potential vulnerabilities posed by technical advancements in artificial intelligence to health security, including any risks related to the development of, enhancement of, or protection from, chemical, biological, radiological, or nuclear threats;

(2) a description of roles, responsibilities, and capabilities of agencies and offices of the Department of Health and Human Services, and, as applicable and appropriate, other Federal departments and agencies, with respect to the identification and mitigation of such potential vulnerabilities;

(3) a summary of any ongoing Federal activities related to the identification, understanding, and mitigation of such potential risks;

(4) the identification of any potential gaps, whether current or anticipated, related to such roles, responsibilities, and capabilities; and

(5) recommendations to improve Federal efforts to identify, prepare for, and mitigate such potential vulnerabilities.

Requires the National Academies to submit the study report to Congress within 2 years and requires HHS to submit a follow-up report within 1 year detailing actions taken to address AI-related health security risks.

(c) Reports.—

(1) NATIONAL ACADEMIES REPORT.—Not later than 2 years after the date of the contract under subsection (a), the National Academies shall submit to the Committee on Health, Education, Labor, and Pensions of the Senate and the Committee on Energy and Commerce of the House of Representatives a report on the study conducted pursuant to subsection (a).

(2) HHS REPORT.—Not later than 1 year after the issuance of the report required under paragraph (1), the Secretary shall submit to the Committee on Health, Education, Labor, and Pensions of the Senate and the Committee on Energy and Commerce of the House of Representatives a report detailing actions taken to mitigate and monitor risks to health security posed by misuse of artificial intelligence, as detailed in the report under paragraph (1).