Since January 2025, the White House has issued nine executive orders on artificial intelligence, a faster drumbeat than any prior technology domain. For enterprise and federal security leaders, the throughline is consistent: accelerate AI adoption, remove regulatory friction, and treat AI as both a strategic asset and an attack surface. Here is the full list.

EO 14179: Removing Barriers to American Leadership in AI (Jan. 23, 2025)

The reset. It revoked the Biden administration’s 2023 AI safety order (EO 14110) and its agency implementations, and directed development of a national AI Action Plan. Everything since flows from this order.

EO 14277: Advancing AI Education for American Youth (Apr. 23, 2025)

A workforce-pipeline order: K-12 AI literacy, teacher training, and standards-aligned curricula, coordinated through OSTP and the Department of Education.

The July 23, 2025 trio, signed alongside the AI Action Plan

• EO 14318: Accelerating Federal Permitting of Data Center Infrastructure. Fast-tracked environmental and permitting review for AI data centers and revoked Biden’s EO 14141 on AI infrastructure.
• EO 14319: Preventing Woke AI in the Federal Government. Restricted federal procurement to large language models the administration deems “truth-seeking” and ideologically neutral, with OMB guidance to follow.
• EO 14320: Promoting the Export of the American AI Technology Stack. Directed agencies to package and promote full-stack American AI (chips, models, applications) for export to allies.

EO 14355: Unlocking Cures for Pediatric Cancer with AI (Sept. 30, 2025)

Directed HHS and NIH to apply AI and federal health datasets to pediatric cancer research. It was the administration’s first applied-science AI order.

EO 14363: Launching the Genesis Mission (Nov. 24, 2025)

A Manhattan Project-style mobilization tasking the Department of Energy to unify the 17 national labs’ supercomputers and datasets into a closed-loop AI experimentation platform for science, with fusion, semiconductors, and critical materials as priority targets.

EO 14365: Ensuring a National Policy Framework for AI (Dec. 11, 2025)

The preemption order. It mobilized federal agencies to challenge state AI laws, established a DOJ task force to identify conflicting statutes, conditioned some discretionary grants on state non-enforcement, and ordered legislative recommendations to Congress, delivered as the National Policy Framework for Artificial Intelligence on March 20, 2026.

EO 14409: Promoting Advanced AI Innovation and Security (June 2, 2026)

The most security-relevant order to date, and the one worth reading in full. Section 2 set a 30-day clock: CISA was directed to issue Binding Operational Directives covering civilian federal systems, and Treasury, with NSA and CISA, to form an AI cybersecurity clearinghouse that deconflicts vulnerability scanning and coordinates patch distribution in voluntary collaboration with the AI industry and critical-infrastructure operators. Section 3 set a 60-day clock for a classified benchmarking process that defines the threshold for a “covered frontier model,” plus a voluntary framework under which developers can give the government up to 30 days of pre-release model access (we covered that window when it opened). Section 4 directs the Attorney General to prioritize enforcement of 18 U.S.C. 1028, 1030, and 1343 against anyone using AI to break into or damage a computer. Notably, Section 3(c) explicitly disclaims any mandatory licensing, preclearance, or permitting requirement for developing or releasing new models.

What’s next?

Reading the gaps suggests three candidates for a future order. First, privacy: EO 14409 says nothing about privacy, consumer protection, or data governance, which the administration appears content to leave to Congress, where the SECURE Data Act (H.R. 8413) drew an Energy and Commerce subcommittee hearing on June 3, 2026 but no floor action. Second, a follow-on preemption order if Congress stalls on the national framework, since EO 14365’s grant-conditioning approach faces litigation risk and the states have not slowed down (California ordered an AI cybersecurity officer into every state agency this month). Third, AI in critical infrastructure: NSPM-11, the national security presidential memorandum issued June 5, 2026, points toward sector-specific security direction for energy, healthcare, and finance as the logical next step.

What this means for your program

EO 14409’s clock has already run. Its 30-day actions came due on July 2, 2026 and its 60-day actions on August 1; the order contains no 90-day tranche. The question is no longer what the order asks for, it is what CISA actually directed, whether your agency or your vendors sit inside the scope of those directives, and whether the new clearinghouse changes how you receive vulnerability and patch intelligence. For enterprises outside the federal perimeter, the live compliance pressure still comes from the states, which is precisely the friction EO 14365 set out to remove (and why the missing federal rulebook keeps complicating compliance planning).

Primary sources: White House: EO 14409 · White House fact sheet: EO 14365 · White House: Genesis Mission · CRS: EO 14409 explained