Generative AI Terrorism Risk Assessment Act

The bill would require the Secretary of Homeland Security, in consultation with the Director of National Intelligence, to submit annual terrorism threat assessments to Congress for five years. Each assessment would have to analyze incidents in which foreign terrorist organizations or individuals used, or attempted to use, generative AI to spread violent extremist messaging, recruit individuals to violence, or enhance their ability to develop or deploy chemical, biological, radiological, or nuclear weapons. Each assessment would also include recommendations to counter these threats. The unclassified portion of each assessment would have to be posted publicly on the DHS website, with a classified annex permitted.

The bill would also establish information-sharing requirements: DHS would be directed to review generative AI–related threat information gathered by state and major urban area fusion centers and incorporate it into DHS's own holdings, then disseminate relevant information back to those centers. The Office of the Director of National Intelligence, the FBI, and other intelligence community members would be required to share relevant information with DHS. A congressional briefing would be due within 30 days of each annual assessment.

The Department of Homeland Security, the Office of the Director of National Intelligence, the FBI, and broader intelligence community members — all of whom would face new reporting or sharing obligations. State and major urban area fusion centers would receive and contribute threat information. Congressional homeland security, intelligence, and commerce committees would receive annual briefings and written assessments.

If enacted, DHS would be required to systematically track and report how terrorist actors exploit generative AI tools — a threat category with no existing dedicated assessment framework. Fusion centers nationwide would gain access to consolidated federal intelligence on this threat, and Congress would receive regular, public-facing analysis to inform oversight and potential countermeasures.

DHS would have one year from enactment to deliver the first assessment and would repeat the process annually for five years. Each assessment must be coordinated to protect privacy, civil rights, and civil liberties. The Secretary would brief the relevant congressional committees within 30 days of each submission, with heads of other relevant agencies joining if the committees request it. DHS would also run a parallel information-sharing loop with fusion centers — collecting threat data from them and disseminating consolidated intelligence back. No rulemaking requirement is specified; the obligations are self-executing statutory mandates.