S. 5601, Defense AI Contractor Oversight. Quorum's AI analysis reads it as a trade-off: gains for some, costs for others.
S. 5601 · Mixed
What it does
This bill requires the Department of Defense to establish mandatory reporting rules for large AI contractors (those with $100M+ DoD contracts and $1B+ in AI R&D spending) to disclose their security practices, insider threats, and AI model vulnerabilities within 180 days. Contractors must report acute national security incidents within 72 hours and certify their security information every 90 days. The bill also directs DoD to issue voluntary (non-binding) security guidance to help these contractors reduce espionage and insider-threat risks. Congress receives briefings on major incidents within 7 days.
The analysis names Large AI contractors (OpenAI, Google DeepMind, Anthropic, Meta, Microsoft, etc.) — compliance costs — and 1 more group — among the beneficiaries.
The trade-off
The $100M contract + $1B R&D threshold creates a de facto oligopoly effect: only the largest AI firms (OpenAI, Google DeepMind, Anthropic, Meta, Microsoft, etc.) will be covered, potentially locking smaller AI startups out of major DoD contracts and consolidating defense AI work among tech giants.
Transparency scores 82%, with a medium warning level and no provisions unrelated to the bill's subject.
Who is behind it
Filed by Jim Banks. Cosponsored by Kirsten Gillibrand.
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.