The Artificial Intelligence and Innovation Talent Act requires the Secretary of Homeland Security, in coordination with other federal officials, to develop a comprehensive strategy within 180 days to align immigration policies with national goals for attracting and retaining high-skilled talent in artificial intelligence and emerging technologies. The strategy must assess how current laws impact U.S. competitiveness, evaluate options for retaining foreign nationals trained in the United States, and identify specific high-priority occupations where domestic talent may be insufficient. Additionally, the plan must outline measures to protect national security through risk-based vetting and provide recommendations for administrative changes, such as revising the H-1B visa selection process, as well as potential legislative actions like creating a new visa class for entrepreneurs in critical sectors.
The Rural and Municipal Utility Cybersecurity Act establishes a federal program to provide grants and technical assistance to small electric utilities, including rural cooperatives, municipally owned systems, and smaller investor-owned companies. The program aims to help these entities deploy advanced cybersecurity technologies and participate in threat information sharing networks to better protect against cyberattacks. Funding is prioritized for utilities with limited security resources or those operating critical infrastructure that supports the national power grid. The bill authorizes $250 million in appropriations over five years, from fiscal year 2027 through 2031, and exempts shared cybersecurity information from public disclosure under freedom of information laws.
The BLADE Act directs the Department of Commerce to identify foreign entities, particularly those from China and Russia, that are conducting unauthorized "model extraction attacks" to steal capabilities from U.S. closed-source artificial intelligence models. The bill requires the government to publish a public list of these attackers and mandates their addition to the Entity List, which restricts their access to certain technologies and exports. Additionally, it authorizes the President to impose financial sanctions on identified individuals and entities, with specific exceptions for humanitarian assistance and national security activities.
The INSPIRES Act authorizes the Department of Education to provide funding for the modernization, renovation, or construction of science, technology, engineering, and mathematics (STEM) facilities in public schools and career and technical education institutions. The bill establishes two primary grant programs: one that allocates funds to states to subgrant to local agencies for upgrading rural and Native American-serving schools, and another that offers direct grants, loan guarantees, or interest payments to eligible entities for broader STEM and vocational facility improvements. To receive these federal funds, states must contribute a 25 percent non-federal match, while local agencies receiving subgrants are required to provide a 10 percent match, with priority given to applicants who form public-private partnerships. The legislation authorizes at least $25 million annually for each program starting in fiscal year 2027 and requires the Secretary of Education to report biennially on how these facility upgrades impact student academic achievement.
The Quantum-GUARD Act of 2026 requires the Federal Energy Regulatory Commission to evaluate cybersecurity risks posed by quantum computers and the potential use of post-quantum cryptography when reviewing reliability standards for the bulk-power system. The bill directs the Department of Energy to establish a "PQC sandbox" within one year, bringing together grid operators, technology vendors, and government agencies to test and develop post-quantum security solutions for both information and operational technology systems. Additionally, the Secretary of Energy must conduct a study on the specific vulnerabilities of critical grid infrastructure to quantum threats and submit a report with recommendations to Congress within one year of enactment.
The Small Business Cybersecurity Assistance Evaluation Act of 2026 directs the Government Accountability Office to conduct a comprehensive study of existing federal cybersecurity initiatives, tools, and services designed to support small businesses. The investigation will assess how effectively these resources help owners identify cyber risks, prepare for threats, recover from attacks, and secure funding for security measures. Additionally, the study will evaluate the level of awareness among small business owners regarding these programs and examine how well different federal efforts are coordinated with one another. Upon completion, the findings and recommendations for improving these services will be submitted to the relevant congressional committees without authorizing any new spending.
The RECOVER PII Act expands identity protection coverage for individuals affected by federal agency data breaches, extending the duration of protection for the remainder of their lives and increasing the minimum insurance amount to $5 million. Additionally, the bill allows federal agencies to use appropriated funds to reimburse employees or their contractors for up to 100 percent of the costs associated with privacy-enhancing services, such as software or hardware designed to mitigate data risks. These provisions aim to provide long-term financial support and resources to victims of data breaches while ensuring that reimbursement claims are supported by necessary documentation.
The PROTECT Act of 2026 requires online platforms that host user-generated content to verify the identity and age of anyone uploading pornographic images, ensuring all individuals depicted are at least 18 years old. To comply, platforms must obtain explicit written consent from every person shown in an image for both the specific sexual acts performed and the distribution of that image, using standardized forms approved by the Attorney General. The law imposes civil penalties and criminal prison sentences for users and platforms that fail to meet these verification and consent requirements.
The FRONTIER Act establishes a regulatory framework for the largest artificial intelligence developers to manage and disclose risks associated with their most powerful models, known as "frontier models." It requires companies meeting specific revenue and spending thresholds to create public safety frameworks, undergo independent third-party audits, and report incidents or potential harms to the Department of Commerce. The bill also creates a system where the Secretary of Commerce can issue emergency orders to suspend or restrict model development if an imminent catastrophic risk is identified. Additionally, the legislation preempts state laws that impose new obligations on AI developers regarding risk transparency, auditing, and incident reporting to ensure a uniform national approach.
The Children's Artificial Intelligence Toy Safety Act of 2026 directs the National Academies of Sciences, Engineering, and Medicine to conduct a comprehensive study on the safety, educational impact, and marketing ethics of AI-enabled toys for children under 14. This study will specifically examine risks of physical and psychological harm, the effectiveness of parental controls, and whether a temporary sales ban is necessary. Following the study, the Federal Trade Commission and the Consumer Product Safety Commission must create a joint action plan within two years that includes recommendations for new regulations, disclosure requirements, and public education initiatives. The bill defines AI-enabled toys as products capable of two-way interaction and applies these rules to developers and manufacturers of such items.
