Congress released the Great American AI Act on June 4, 2026, a bipartisan 269-page discussion draft that would require major AI developers to submit to semi-annual third-party audits by federally licensed Independent Verification Organizations, with civil penalties of up to $1 million per day for non-compliance. For Fortune 500 boards, this draft draws the boundary between voluntary AI governance postures and legally mandated ones. Boards deploying or procuring frontier AI systems should treat this draft as a credible compliance horizon, not a distant legislative possibility.
PRIORITY 9 | SILO: Legislative
The Great American AI Act (June 4, 2026) requires frontier AI developers to undergo semi-annual third-party audits by NIST-licensed Independent Verification Organizations and preempts state AI development laws for three years.
The Signal
On June 4, 2026, Representatives Jay Obernolte (R-CA) and Lori Trahan (D-MA) released a 269-page discussion draft of the Great American AI Act (GAAIA) alongside a joint op-ed in Bloomberg Law. The bill establishes a federal framework for frontier AI governance built on three enforcement pillars: mandatory transparency reporting, semi-annual third-party audits, and whistleblower protections.
The most consequential provision is Section 112. Large frontier AI model developers would be required to retain a federally licensed Independent Verification Organization (IVO) every six months. IVOs would verify compliance with the law, assess the adequacy of the developer's risk governance framework, and report findings directly to the Center for Artificial Intelligence Standards and Innovation (CAISI), a NIST-housed federal body. IVOs may also refer violations to the U.S. Attorney General and state AGs, with mandatory referral when imminent catastrophic risk is detected.
The Evidence
The bill was introduced by Representatives Obernolte and Trahan, both members of the House Energy and Commerce Committee, the committee of jurisdiction for AI and tech matters. Obernolte co-chaired the House Bipartisan AI Task Force. The draft incorporates provisions from 12 existing bipartisan bills, including the Future of Artificial Intelligence Innovation Act of 2026 (S. 3952, Sen. Todd Young, R-IN) and the AI Whistleblower Protection Act (H.R. 3460).
Penalties are consequential: developers that violate audit requirements or make material misrepresentations face civil liability of up to $1 million per violation, per day while the violation continues. The IVO framework sunsets in three years unless Congress reauthorizes it. The preemption provision bars state governments from regulating the development (though not deployment) of AI models for the same three-year window, displacing frontier AI laws already enacted in California, New York, and Illinois.
The DLA Piper analysis (June 5, 2026) confirmed the draft is actively soliciting stakeholder and public comment ahead of formal introduction. The Congressional sponsors are seeking feedback from industry, state governments, and the public before formally introducing the bill.
The Strategic Implication
Defensive Risk. Audit committee chairs and technology committee directors at companies that develop or procure frontier AI systems face a rapidly narrowing window. When the GAAIA becomes law, the audit committee will own the question of whether the company's AI governance framework meets IVO standards. Directors who cannot demonstrate they understood the bill's requirements, required their management to assess exposure, and documented board-level oversight before enactment face Caremark liability on AI oversight failures, specifically on whether the board exercised meaningful oversight of an evolving, material legal risk. The obligation to act does not begin at enactment. It begins when the signal is credible, and Congress has now made it credible. The responsible defense move: direct the general counsel to map current AI procurement contracts, AI governance policies, and board committee charters against the GAAIA's framework requirements before the next audit committee meeting.
Offensive Advantage. Boards that move now treat the GAAIA as a competitive positioning event, not a compliance deadline. Companies that build IVO-ready governance frameworks ahead of enactment control the audit narrative rather than respond to it. Their audit committee charters will already define AI oversight authority and escalation standards. Their AI procurement contracts will already include the disclosure and risk-monitoring clauses that IVOs will require. When shareholders, proxy advisors, or institutional investors ask what the board did to prepare for federal AI accountability, the answer will be verifiable rather than aspirational. First-movers on AI board governance set the governance standard that latecomers will be measured against.
Touch Stone Publishers