Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

US HB8283: Deterring American AI Model Theft Act of 2026

In Committee United States (Federal) · 2025–2026 session

Last verified Oct 8, 2026 · official bill text

HB8283 · where it stands

1 of 5 steps complete
  1. Introduced In committee
  2. Passed first chamber
  3. Passed both chambers
  4. Enacted
  5. Effective
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

The federal H.R. 8283 (Deterring American AI Model Theft Act of 2026) would direct the Secretary of State to assess model extraction attacks on closed-source American AI models by entities of concern and to keep a public attackers list, and would direct Commerce to consider Entity List additions. It would authorize IEEPA sanctions. Referred to the House Foreign Affairs Committee April 15, 2026; ordered reported as amended 43-0 April 22, 2026; no reported text yet; it has not passed the House.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

No duties for U.S. AI model owners; sharing information with Commerce would be voluntary. Foreign entities found to extract models or sell access accounts could face Entity List review and sanctions.

Key provisions

  1. Defines model extraction attacks as unauthorized extraction of a closed-source AI model's capabilities to replicate or improve another model, such as by circumventing access controls or using fraudulent credentials (Sec. 3)
  2. Secretary of State, with export-policy agencies, must assess within 180 days of enactment which entities of concern conduct such attacks or are fraudulent account network providers (Sec. 4)
  3. Commerce must report findings within 210 days, with annual updates for 3 years, publish best practices, and set up voluntary confidential information sharing with model owners
  4. State must keep a public 'AI Model Extraction Attackers List' for up to 5 years
  5. Within 210 days Commerce's Under Secretary for Industry and Security must decide whether identified entities should be added to the Entity List (Sec. 5(a))
  6. The President may block property of identified entities of concern under IEEPA, with the IEEPA penalties applying (Sec. 5(b))

Latest legislative action

Apr 22, 2026. Ordered to be Reported (Amended) by the Yeas and Nays: 43 - 0.

Sponsors (showing 5 of 13)

NameRoleDistrict
R Sponsor HD-AL-2
R Sponsor HD-VA-6
R Sponsor HD-MI-4
R Sponsor HD-IL-16
R Sponsor HD-AR-1

Topics and industries

Affected industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error