US Advances First Comprehensive Federal AI Governance Frameworks
The US federal government has advanced two major AI governance frameworks—a White House Executive Order and a bipartisan congressional draft—aimed at regulating frontier models and preempting state laws. The dual push signals a definitive shift toward a national security-focused AI policy.
By Factlen Editorial Team
- Frontier AI Developers
- Favor federal preemption to avoid a patchwork of state laws, but are wary of mandatory preclearance or overly broad definitions of catastrophic risk.
- State Regulators
- Argue that federal efforts are too narrow and that states must retain the authority to protect consumers from localized AI harms like algorithmic bias and deepfakes.
- National Security Advocates
- View advanced AI primarily as a cybersecurity and geopolitical asset that requires federal oversight to prevent catastrophic misuse by hostile actors.
- Enterprise Deployers
- Desperate for regulatory clarity and unified standards as they navigate conflicting international, federal, and state compliance frameworks.
What's not represented
- · Open-source AI researchers who fear compute thresholds will criminalize academic development
- · Labor unions concerned about the workforce displacement impacts omitted from the frontier-focused regulations
Why this matters
After years of leaving AI regulation to individual states and the EU, the US is finally establishing its own federal rules. This framework will dictate how the world's most powerful AI models are developed, tested, and secured, directly impacting the tools businesses use and the safeguards protecting consumers from catastrophic risks.
Key points
- The US federal government advanced two major AI governance frameworks in June 2026: an Executive Order and a bipartisan congressional draft.
- The proposed Great American AI Act targets 'large frontier developers' with over $500 million in revenue, exempting smaller startups.
- The White House Executive Order establishes a voluntary framework for the government to review advanced AI models for cybersecurity risks.
- The federal push aims to preempt a fractured landscape of over 1,500 state-level AI bills currently under consideration.
- Unlike the EU AI Act's broad risk tiers, the US approach focuses narrowly on national security and the capabilities of frontier models.
After years of deferring AI governance to state legislatures and decentralized agency enforcement, the United States federal government has initiated its most aggressive push to regulate artificial intelligence. In the first week of June 2026, Washington advanced two major, parallel frameworks aimed at reigning in the most powerful AI systems. This dual approach—a targeted Executive Order from the White House and a comprehensive bipartisan draft bill in the House of Representatives—signals a definitive shift in US policy. Rather than adopting the broad, use-case-based risk tiers of the European Union, the emerging US consensus is laser-focused on national security, cybersecurity, and the handful of tech giants capable of training frontier models.[1][2][3][6]
The catalyst for this shift arrived on June 2, 2026, when President Trump signed the executive order 'Promoting Advanced Artificial Intelligence Innovation and Security.' The directive establishes a formal, albeit voluntary, framework for the federal government to review advanced covered frontier AI models before they are released to the public. The primary objective is to assess these models for cybersecurity vulnerabilities and potential national security threats. This represents a notable pivot for an administration that had previously prioritized a strictly deregulatory, hands-off approach to AI development.[2][3]
Crucially, the Executive Order explicitly avoids mandating licensing, permitting, or preclearance requirements for AI model development or distribution. This language was deliberately included to address intense industry lobbying, ensuring that federal security reviews do not become a de facto regulatory bottleneck that slows American innovation. However, the order elevates the National Security Agency and the Department of the Treasury into central oversight roles, directing federal agencies to strengthen cyber defenses within 30 days and prioritizing the enforcement of criminal statutes against AI-enabled cyberattacks.[2]
Two days later, on June 4, Representatives Jay Obernolte (R-Calif.) and Lori Trahan (D-Mass.) released a 269-page bipartisan discussion draft titled the 'Great American Artificial Intelligence Act of 2026.' If passed, it would establish the first comprehensive federal AI governance regime in the United States. The legislation is explicitly designed to target the top of the AI food chain, creating binding federal development obligations exclusively for large frontier developers.[1]

The bill defines these developers as companies generating over $500 million in annual revenue that have trained a frontier model. This precise threshold is engineered to capture industry heavyweights like OpenAI, Anthropic, Google, Meta, and xAI, while intentionally exempting smaller startups, open-source researchers, and downstream businesses that merely deploy existing models. The draft mandates transparency reports, critical safety incident reporting, and robust whistleblower protections for these large-scale developers.[1][3]
The urgency behind these federal maneuvers is driven largely by a rapidly fracturing domestic landscape. In the absence of congressional action, state legislatures have rushed to fill the void. By mid-2026, more than 1,500 AI-related bills were under consideration in statehouses across the country, creating a complex and often contradictory compliance environment for tech companies. California, Colorado, and Texas have already enacted stringent laws governing AI transparency, automated decision-making, and training data disclosures.[3][4][5]

California has proven particularly aggressive, implementing the Transparency in Frontier AI Act (SB 53), which imposes penalties of up to $1 million per violation on large developers who fail to publish risk frameworks. Meanwhile, the state's AI Training Data Transparency Act (AB 2013) mandates detailed public summaries of the datasets used to train generative AI systems. For multinational corporations, navigating this state-by-state patchwork has become a logistical nightmare, prompting intense industry pressure for a unified federal standard.[3][4]
Meanwhile, the state's AI Training Data Transparency Act (AB 2013) mandates detailed public summaries of the datasets used to train generative AI systems.
Consequently, federal preemption has emerged as the most fiercely contested element of the Great American AI Act. The current draft proposes a three-year sunset period during which federal law would preempt state regulations that specifically target the development of AI models. However, the bill explicitly preserves state authority over laws of general applicability and regulations governing the downstream deployment of AI systems. This compromise attempts to centralize the regulation of core model training while allowing states to continue policing how AI is used in local employment, housing, and healthcare decisions.[1][3]
The US approach stands in stark contrast to the global regulatory environment, most notably the European Union's AI Act. The EU framework, which sees its most significant enforcement mechanisms for high-risk systems activate in August 2026, categorizes AI based on its intended use case. A system used for resume screening or biometric identification in Europe faces intense scrutiny and mandatory compliance audits, regardless of the developer's size. The US framework, conversely, regulates the capability of the model and the size of the developer, largely ignoring the specific downstream applications unless they violate existing civil rights or fraud statutes.[3][5][6]
Despite the momentum, significant uncertainty clouds the federal push. The Great American AI Act is currently a discussion draft, with its authors explicitly calling for feedback from researchers, civil society, and frontier labs. Passing a 269-page technology regulation in a highly polarized election year presents a formidable legislative hurdle. Furthermore, the voluntary nature of the Trump administration's Executive Order raises questions about its ultimate efficacy; if a leading AI lab refuses to submit a model for pre-release national security review, the federal government currently lacks the statutory authority to compel compliance.[1][2]
Until Congress formally acts, the day-to-day governance of AI in the United States remains the domain of federal agencies utilizing decades-old statutes. The Federal Trade Commission continues to aggressively police AI-generated fake reviews and deceptive practices, while the Federal Communications Commission has cracked down on AI voice cloning in robocalls. The Securities and Exchange Commission is actively monitoring AI-related fraud and corporate disclosure requirements, ensuring that markets remain stable even without a comprehensive AI law.[5]

A core evidentiary challenge in the proposed legislation is the technical definition of a frontier model. The draft relies heavily on compute thresholds—specifically models trained using more than 10^26 floating-point operations (FLOPs)—a metric borrowed from earlier California state proposals. However, AI researchers note that algorithmic efficiency is improving so rapidly that highly capable, potentially dangerous models may soon be trained well below this compute threshold. This creates a structural vulnerability in the law: a rigid FLOP-based definition could become obsolete before the legislation is even fully implemented, allowing highly capable models to slip through the regulatory net.[1][4]
Furthermore, the draft legislation wades into highly contested political territory by including a section on free speech. This provision mandates a formal study and legislative recommendations regarding the jawboning of AI firms—instances where government officials might pressure developers to censor specific outputs or alter their content moderation policies. This inclusion reflects deep partisan divides over whether AI models should be restricted from generating harmful content or whether such restrictions constitute ideological bias.[1]

The events of June 2026 represent a critical inflection point. The era of 'move fast and break things' in frontier AI development is facing its first coordinated federal boundaries. Whether through voluntary national security reviews or binding congressional mandates, the US government is signaling that the most powerful artificial intelligence systems are no longer viewed merely as commercial software, but as critical national infrastructure requiring federal oversight.[1][2][3]
Ultimately, the success of the US federal framework will depend on its ability to adapt to an exponentially accelerating technology. The current proposals represent a pragmatic, inherently American compromise: prioritizing national security and innovation at the top of the market while leaving the messy realities of localized AI deployment to the states and the courts. As the 2026 legislative session progresses, the tech industry, international regulators, and civil rights advocates will be watching closely to see if this delicate balance can be codified into law.[1][3][6]
How we got here
August 2024
The European Union officially passes the AI Act, establishing the world's first comprehensive risk-based AI regulatory framework.
December 2025
The Trump Administration issues an initial AI executive order focused on deregulation and preempting state laws.
January 2026
Major state-level AI laws, including the Texas Responsible AI Governance Act and portions of California's AI transparency laws, take effect.
June 2, 2026
President Trump signs an Executive Order establishing a voluntary framework for national security reviews of frontier AI models.
June 4, 2026
Bipartisan lawmakers release the discussion draft of the Great American Artificial Intelligence Act of 2026.
Viewpoints in depth
Frontier AI Developers' View
Seeking a unified national standard while avoiding pre-release bottlenecks.
For companies training the world's most advanced models, the primary threat is a fragmented domestic market. Developers argue that complying with 50 different state laws regarding model training and transparency is logistically impossible. They broadly support the Great American AI Act's preemption clauses, viewing a single federal standard as essential for maintaining US competitiveness. However, they strongly lobbied against mandatory government preclearance in the Executive Order, arguing that waiting for federal security sign-offs before every model release would cede ground to international rivals.
State Regulators' View
Defending local authority to police immediate consumer harms.
State attorneys general and local lawmakers view the federal push with deep skepticism. Because the proposed federal framework focuses almost exclusively on 'catastrophic' national security risks and frontier models, state regulators argue it completely ignores the everyday harms of AI, such as algorithmic discrimination in housing, biased hiring software, and local deepfake fraud. They argue that federal preemption would strip them of the tools needed to protect their citizens, pointing to laws like Colorado's automated decision-making act as essential consumer safeguards that Washington is failing to replicate.
National Security Apparatus View
Treating frontier AI as critical defense infrastructure.
Defense and intelligence agencies increasingly view highly capable AI models as dual-use technologies, akin to advanced cryptography or nuclear materials. Their primary concern is that an open-source or poorly secured frontier model could be weaponized by hostile nation-states to launch sophisticated cyberattacks or develop biological weapons. From this perspective, the June 2 Executive Order is a necessary first step to ensure the government has visibility into the capabilities of these models before they are deployed globally, prioritizing systemic security over commercial release schedules.
What we don't know
- Whether the Great American AI Act of 2026 can secure enough bipartisan support to pass in a highly polarized election year.
- How the federal government will respond if a major AI developer refuses to participate in the voluntary cybersecurity reviews established by the Executive Order.
- Whether the 10^26 FLOPs compute threshold will remain a viable metric for defining 'frontier models' as algorithmic efficiency rapidly improves.
Key terms
- Frontier Model
- Highly capable foundational AI models that push the boundaries of current technology and could pose novel safety or security risks.
- Federal Preemption
- A legal doctrine where federal law supersedes conflicting state or local laws, establishing a single national standard.
- Jawboning
- Informal pressure exerted by government officials on private companies to influence their actions, particularly regarding content moderation.
- Algorithmic Discrimination
- When an AI system produces biased or unfair outcomes based on protected characteristics like race, gender, or age.
- FLOPs (Floating-Point Operations)
- A measure of computing power used to define the scale and complexity of an AI model's training process.
Frequently asked
Does the US have a comprehensive federal AI law?
Not yet. While the Great American AI Act of 2026 has been introduced as a bipartisan draft, it is currently under negotiation. The US currently relies on executive orders, agency enforcement, and state laws.
What does the June 2026 Executive Order do?
It establishes a voluntary framework for developers of advanced 'frontier' AI models to provide the government with pre-release access to test for cybersecurity and national security vulnerabilities.
Will federal law override state AI regulations?
The proposed congressional bill includes a three-year preemption of state laws that specifically regulate AI model development, but it would leave state laws covering downstream deployment intact.
Who is targeted by the proposed Great American AI Act?
The bill specifically targets 'large frontier developers,' defined as companies with over $500 million in annual revenue that train highly advanced AI models.
Sources
[1]TechPolicy.PressFrontier AI Developers
Great American Artificial Intelligence Act of 2026
Read on TechPolicy.Press →[2]Holland & KnightNational Security Advocates
Promoting Advanced Artificial Intelligence Innovation and Security
Read on Holland & Knight →[3]Goodwin LawState Regulators
Goodwin on AI: State Laws and Federal Preemption
Read on Goodwin Law →[4]VerifyWiseState Regulators
US AI Regulation: State Laws and Compliance
Read on VerifyWise →[5]DrataEnterprise Deployers
Defining Artificial Intelligence Laws and Regulations
Read on Drata →[6]AskAjay.aiEnterprise Deployers
How 8 Countries Regulate AI in 2026: The Executive Comparison Guide
Read on AskAjay.ai →
Every angle. Every day.
Get ai stories with full source coverage and perspective breakdowns delivered to your inbox.








