Proposed AI and cybersecurity legislation: November 16, 2025 - November 30, 2025

NOTE: STATUS OF LEGISLATION AS OF JULY 16, 2026.

November 12, 2025 alert. November 18, 2025 meeting announcement. 2:00PM(EST) | 2123 Rayburn House Office Building, Washington, D.C. Innovation with Integrity: Examining the Risks and Benefits of AI Chatbots.

S.3193 - Algorithm Accountability Act. To amend section 230 of the Communications Act of 1934 to limit liability protection under that section for certain social media platforms.
Introduced November 18, 2025 by John Curtis (R-UT). Cosponsored by Mark Kelly (D-AZ). referred to the Committee on Commerce, Science, and Transportation the same day. Still in committee.
From the bill: A provider of a social media platform shall exercise reasonable care in the design, training, testing, deployment, operation, and maintenance of a recommendation-based algorithm on the social media platform to prevent bodily injury or death described in subparagraph (B) that a reasonable and prudent person would agree was—(i) reasonably foreseeable by the provider; and, (ii) attributable, in whole or in part, to the design characteristics or performance of the recommendation-based algorithm.
Comment: In other words, if Facebook’s or LinkedIn’s or Twitter’s algorithm causes foreseeable harm, there will be consequences. The proposed legislation details enforcement mechanisms.

H.R.6077 - HEAL-AI Act (Healthcare Education in AI Literacy Act). To amend the Public Health Service Act to ensure that medical students, medical residents, and medical faculty receive education and training in the deployment of artificial intelligence in the medical profession.
Introduced November 18, 2025 by Nanette Diaz Barragán (D-CA). Cosponsored by Ted Lieu (D-CA) and Josh Gottheimer (D-NJ). Referred to the House Committee on Energy and Commerce the same day. Still in committee.
Comment: This sounds like a more comprehensive bill than it is. “AI” is limited to the following: The use of data and data analysis; (ii) training such as virtual simulation and case studies; and, (iii) student assessment to provide—(I) feedback and personalize learning; and (II) the latest updates to health care.
The bill does not propose that AI should replace or even supplement diagnostic activities.

H.R.6104 - Dark Web Interdiction Act of 2025. To prohibit the delivery of opioids by means of the dark web.
Introduced November 18, 2025 by Chris Pappas (D-NH). Cosponsored by Tony Gonzales (R-TX) and Brian Kirkpatrick (R-PA). Referred to the Committee on the Judiciary, and Energy and Commerce, and Financial Services the same day. Still in committee.
Comment: If you constantly hear about the “dark web” and vaguely know what that means, you may want to read the “findings” section of this bill. Pappas was specific in his definitions.
If Republicans in Congress really believed Trump’s war on Venezuela had anything to do with drugs, they would be all over this legislation. Because Pappas et al wish to stop international drug trafficking. In the “findings” section, they point to the success of the Biden administration’s efforts to slow drug trafficking by various executive agencies working together with international counterparts to put a halt to the source of the commerce, namely, the dark web.

H.R.1736 - Generative AI Terrorism Risk Assessment Act. To require the Secretary of Homeland Security to conduct annual assessments on threats to the United States posed by the use of generative artificial intelligence for terrorism.
Introduced February 27, 2025 by August Pfluger (R-TX). Cosponsored by Michael Guest (R-MS), Gabe Evans (R-CO), and Res. Comm. Pablo Hernández (D-PR). Referred to the House Committee on Homeland Security the same day. Referred to the Subcommittee on Counterterrorism and Intelligence the same day. Subcommittee held markup session on March 25, 2025 and discharged to full committee the same day. Full committee held a markup session on September 3, 2025.
Sent to the full House for a vote on November 12, 2025. Passed House on November 19, 2025 with amended title: Generative AI Terrorism Risk Assessment Act the same day. On November 20, 2025, received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. Still in committee.
Congress.gov summary: This bill requires the Department of Homeland Security (DHS) to periodically provide Congress with an assessment of threats to the United States posed by the use of generative artificial intelligence (AI) for terrorism. Generative AI is defined as the class of AI models that emulate the structure and characteristics of input data to generate derived synthetic content, including images, videos, audio, text, and other digital content.
The bill also (1) requires DHS to review and disseminate related information gathered by state and major urban area fusion centers and the National Network of Fusion Centers, and (2) requires other federal agencies to share related information with DHS. (A fusion center is a collaborative effort of two or more federal, state, local, or tribal government agencies that combines resources, expertise, or information with the goal of maximizing the ability of such agencies to detect, prevent, investigate, apprehend, and respond to criminal or terrorist activity.)
Odd note: The congressional record shows that they amended the title when they passed it to the Senate. But they didn’t. Introduced with that same short title. Was there a glitch in the House? If so, color me shocked.
Comment: This is what bothers me about the current approach to AI. Here’s the beginning of the bill:
It is the sense of Congress that—
(1) the heightened terrorism threat landscape and the increasing utilization of generative artificial intelligence by foreign terrorist organizations represent a national security threat, and the challenges posed by such threat are not well understood; and
(2) the Department of Homeland Security, in consultation with the Office of the Director of National Intelligence, must take steps to recognize, assess, and address such threat, thereby reducing risks to the people of the United States.
Well and good. But they’ve got blinders on. They’re not looking at the threat that US AI companies pose to US citizens.

S.3251 - State and Local Cybersecurity Grant Program Reauthorization Act. To amend the Homeland Security Act of 2002 to authorize State and local cybersecurity grants for fiscal year 2026.
Introduced November 20, 2025 by Margaret Wood Hassan (D-NH). Cosponsored by John Cornyn (R-TX). Referred to the Committee on Homeland Security and Governmental Affairs the same day. Still in committee.
Comment: I hope someone is telling Joe Biden about these bits of legislation. He is being vindicated.
Note: This bill is nothing new. It merely extends existing legislation through 12/31/2026. Congress is so dysfunctional it cannot even extend legislation it once thought good and proper.
Postscript: Poignant seeing Cornyn’s name on this bill. He managed to do something bipartisan!

S.3269 - Liquid Cooling for AI Act of 2025. To direct the Comptroller General of the United States to conduct a technology assessment focused on liquid cooling systems for artificial intelligence compute clusters and high-performance computing facilities.
Introduced November 20, 2025 by DAVE McCORMICK (R-PA). Cosponsored by Chris Coons (D-DE), Ted Budd (R-NC), and Adam Schiff (D-CA). Referred to the Committee on Energy and Natural Resources the same day. Hearing held April 15, 2026. Still in committee.
Comment: Despite McCormick’s involvement in the initial phases of this bill, it’s really quite good. Facts and figures put on the table about water and electric consumption of data centers, with requirements to submit a report based on real data, analyzing the issues and recommending solutions.
Snarky comment: Wonder if the fact that McCormick’s wife was appointed as president and vice chair of Meta in December 2025 has anything to do with the sudden slow-walking of an otherwise excellent bill?

S.3278 - SMART Infrastructure Act of 2025 (Streamlining Modeling for Advanced, Rapid Transportation Infrastructure Act of 2025). To require the Secretary of Transportation to develop a centralized, web-based platform for managing, submitting, and tracking documents and processes relating to compliance with the National Environmental Policy Act of 1969.
Introduced November 20, 2025 by Cynthia Lummis (R-WY). Cosponsored by Mark Kelly (D-AZ). Referred to the Committee on Commerce, Science, and Transportation the same day. Still in committee.
Comment: Simply recommends establishing an e-Portal for engineering projects that require federal approval. Instead of submitting plans and documents by snail mail or by attaching PDFs to emails, create a portal similar to that used by most other agencies.
Snarky comment: I thought doge was supposed to have handled this sort of project? Eighteen months in, and no? I guess it wouldn’t contain enough personal data, which seems to have been the primary target of Trump and Musk’s efforts. Should be a no-brainer.

H.R.1736 - Generative AI Terrorism Risk Assessment Act. To require the Secretary of Homeland Security to conduct annual assessments on threats to the United States posed by the use of generative artificial intelligence for terrorism.
Introduced February 27, 2025 by August Pfluger (R-TX). Cosponsored by Michael Guest (R-MS), Gabe Evans (R-CO), and Res. Comm. Pablo Hernández (D-PR). Referred to the House Committee on Homeland Security the same day. Referred to the Subcommittee on Counterterrorism and Intelligence the same day. Subcommittee held markup session on March 25, 2025 and discharged to full committee the same day. Full committee held a markup session on September 3, 2025. Sent to the full House for a vote on November 12, 2025.
On November 19, 2025, considered under suspension of rules. Passed the House the same day, by voice vote only. On November 20, 2025 received in the Senate and referred to the Committee on Homeland Security and Governmental Affairs. Still in committee in the Senate.
Congress.gov summary: This bill requires the Department of Homeland Security (DHS) to periodically provide Congress with an assessment of threats to the United States posed by the use of generative artificial intelligence (AI) for terrorism. Generative AI is defined as the class of AI models that emulate the structure and characteristics of input data to generate derived synthetic content, including images, videos, audio, text, and other digital content.
The bill also (1) requires DHS to review and disseminate related information gathered by state and major urban area fusion centers and the National Network of Fusion Centers, and (2) requires other federal agencies to share related information with DHS. (A fusion center is a collaborative effort of two or more federal, state, local, or tribal government agencies that combines resources, expertise, or information with the goal of maximizing the ability of such agencies to detect, prevent, investigate, apprehend, and respond to criminal or terrorist activity.)
Comment: As with other legislation related to AI and cybersecurity, House Republicans are taking actions that Pres. Joe Biden was working on and that Pres. Trump nullified by executive order. I guess it must always be their idea.

H.R.6179 - Clean Cloud Act of 2025. To amend the Clean Air Act to establish requirements on the collection of electricity consumption data and emissions standards for servers and other computing equipment used for cryptocurrency mining.
Introduced November 20, 2025 by Steve Cohen (D-TN). Cosponsored by nine Democrats and no Republicans. Still in committee.
Congress.gov summary: This bill establishes an emissions standard and fee system regarding the electricity used by data centers or cryptomining facilities that exceed a specified size. Additionally, the bill appropriates collected fees for various purposes, including to fund zero-carbon electricity generation, long-duration energy storage, and grants to lower residential electricity consumer costs.
The bill requires the Environmental Protection Agency (EPA) and the Energy Information Administration to annually determine the greenhouse gas emission intensity of the total annual electricity consumed by (1) covered facilities from the electric grid, and (2) covered facilities from electricity generation assets located behind the power meter of the facilities.
The EPA must determine and publish the greenhouse gas emissions intensities of the electric grid of each region to establish a baseline for the assessment of fees. Each calendar year from 2027 through 2034, the baseline for each region is reduced by 11% of the original baseline. For 2035 and after, the baseline is set to zero emissions.
The EPA must assess a fee on (1) owners of any electric utility providing power to a covered facility that exceeds the baseline emissions in that region for that year, and (2) covered facilities with respect to the greenhouse gas emissions from electricity generation assets located behind the power meter of the facility above the baseline of the region for that year. The electric utilities may not recoup the cost of the fee by raising rates or assessing fees on customers that are not covered facilities.

H.R.6197 - Health Tech Investment Act. To amend title XVIII of the Social Security Act to ensure appropriate payment of certain algorithm-based healthcare services under the Medicare program.
Introduced November 20, 2025 by JOHN JOYCE (R-PA). Cosponsored by five Democrats and two Republicans. Referred to the Committee on Energy and Commerce, and Ways and Means the same day. Still in committee.
Comment: Unlike H.R.6077 above, this bill would indeed insert AI into the diagnostic side of medicine. I am baffled by Democrats who think this would be a good idea. I am even more baffled John Joyce, who claims to be an M.D., would introduce this legislation.

H.R.6253 - Algorithmic Transparency and Choice Act. To require online platforms to disclose policies and provide options relating to personalized recommendations systems to minors.
Introduced November 21, 2025 by Kat Cammack (R-FL). No cosponsors. Referred to the House Committee on Energy and Commerce the same day. Referred to the Subcommittee on Commerce, Manufacturing, and Trade the same day.

H.R.6257 - SMK Act of 2025 (Safe Messaging for Kids Act of 2025). To protect minors from harms associated with ephemeral messaging features and unsolicited direct contact on social media platforms by prohibiting certain ephemeral messaging features for minors and mandating the provision of parental direct messaging controls.
Introduced November 21, 2025 by Neal Dunn (R-FL). Cosponsored by Donald Davis (D-NC). Referred to the House Committee on Energy and Commerce, and the Subcommittee on Commerce, Manufacturing, and Trade the same day.
Comment: This specifically targets apps like Snapchat, Signal, or Telegram that allow users to have messages deleted after a specific time. It does not address regular messaging systems, nor does it affect normal posting on social media.

H.R.6259 - No Fentanyl on Social Media Act. To require the Federal Trade Commission to submit to Congress a report on the ability of minors to access fentanyl through social media platforms.
Introduced November 21, 2025 by Gabe Evans (R-CO). Cosponsored by seven Democrats and one Republican (Craig Goldman-TX). Referred to the Committee on Energy and Commerce, and Judiciary and the Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.

H.R.6265 - Safer GAMING Act (Safer Guarding of Adolescents from Malicious Interactions on Network Games Act). To require online video game providers to provide certain safeguards for minors.
Introduced November 21, 2025 by Thomas Kean (R-NJ). Cosponsored by Christopher Smith (R-NJ) and Darren Soto (D-FL). Referred to the House Committee on Energy and Commerce, and the Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.

H.R.6266 - Algorithm Accountability Act. To amend section 230 of the Communications Act of 1934 to limit liability protection under that section for certain social media platforms.
Introduced November 21, 2025 by Mike Kennedy (R-UT). Cosponsored by April McClain Delaney (D-MD). Referred to the House Committee on Energy and Commerce the same day. Still in committee.
Comment: This essentially does what S.3193 proposes. House version.
Snarky comment: Kennedy and Delaney should have added “kids” to the bill. Then it would have at least gotten a hearing.

H.R.6273 - SPY Kids Act (Stop Profiling Youth and Kids Act). To prohibit market or product-focused research on children and minors.
Introduced November 21, 2025 by Mariannette Miller-Meeks (R-IA). No cosponsors. Referred to the House Committee on Energy and Commerce and the Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.

November 22, 2025 alert: Transcript available for March 21, 2024 meeting. “Spectrum and National Security.” The meeting began by defining spectrum, pointing out that too often cybersecurity focuses on apps (software) and devices, while ignoring the “spectrum” or networks on which those are built.
From the transcript: The network relies on spectrum, whether it is cell phones in our pockets, connected devices in our homes, critical defense systems in our military, radar, satellites for aviation, weather infrastructure spectrum, all essential components of a modern communication system.
Spectrum is a finite resource, which means policymakers must ensure and manage it effectively to the benefits of all Americans. And last year, after 30 years of consensus that auctions were a key part of spectrum management, the FCC’s spectrum authority expired for the first time.

H.R.6289 - Promoting a Safe Internet for Minors Act. To amend the Children’s Online Privacy Protection Act of 1998 to promote online safety for minors.
Introduced November 25, 2025 by Laurel Lee (R-FL). Cosponsored by Darren Soto (D-FL), Eugene Vindman (D-VA), Lloyd Doggett (D-TX), and Joaquin Castro (D-TX). Referred to the House Committee on Energy and Commerce, as well as Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.
Comment: Not an “action” bill. Rather, asking for report on best-practices report to protect minors from cybercriminals, drugs, and gambling.

H.R.6290 - Safe Social Media Act. To require the Federal Trade Commission to conduct a study regarding social media use by teenagers.
Introduced November 25, 2025 by Cliff Bentz (R-OR). Cosponsored by Kim Schrier (D-WA) and Eugene Vindman (D-VA). Referred to the House Committee on Energy and Commerce, as well as Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.

H.R.6291 - Children and Teens’ Online Privacy Protection Act. To amend the Children’s Online Privacy Protection Act of 1998 to strengthen protections relating to the online collection, use, and disclosure of personal information of children and teens.
Introduced November 25, 2025 by Tim Walberg (R-MI). Cosponsored by Laurel Lee (R-FL). Referred to the House Committee on Energy and Commerce, as well as Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.
Comment: Long, detailed bill. Simply trying to get the USA into the 21st century. For some reason, we were able to pass this sort of legislation in 1998. But not in 2026.

H.R.6292 - Don’t Sell Kids’ Data Act of 2025. To prohibit data brokers from collecting, using, or maintaining the personal data of certain minors.
Introduced November 25, 2025 by Frank Pallone (D-NJ). No cosponsors. Referred to the House Committee on Energy and Commerce, as well as Subcommittee on Commerce, Manufacturing, and Trade the same day.
Subcommittee consideration and mark-up session held December 11, 2025. Forwarded by subcommittee to full committee by voice vote the same day. Still in committee.
Comment: Why must these bills be prefaced with “kids’ data”? Why not ALL data?

H.R.6304 - AI for America Act. To codify a national strategy for artificial intelligence that promotes American leadership, removes regulatory barriers, and ensures data are free from security risks and ideological bias.
Introduced November 25, 2025 by Jennifer Kiggans (R-VA). Cosponsored by Nick LaLota (R-NY) and Nicholas Begich (R-AK). Referred to the Committee on Science, Space, and Technology, and Energy and Commerce the same day. Still in committee.
Comment: This proposes no guardrails. It’s a rah-rah bill for the AI industry. Let’s challenge ourselves to do better, boys and girls!

November 25, 2025 alert. Transcript of May 8, 2024 meeting. Strengthening Data Security to Protect Consumers.

November 26, 2025 alert. Announcement of December 2, 2025 meeting. 10:15AM(EST) | 2123 Rayburn House Office Building, Washington, D.C. Legislative Solutions to Protect Children and Teens Online. Includes video, written documentation, and transcript.

November 27, 2025 alert. Announcement of December 2, 2025 meeting. 2:30PM(EST) | 419 Dirksen Senate Office Building, Washington, D.C. Hearings to examine China's challenge to American AI leadership. Meeting Details. Apparently the meeting did not take place. There is nothing on the linked Web page.

If this post helped you in your research, please consider leaving a tip here: TIP JAR.