This bill creates new rules to control when foreign adversaries can access sensitive U.S. technology through the internet. Right now, the U.S. government controls the export of certain advanced items like computer chips and software, but there's a gap: foreign governments or companies can sometimes access these same items remotely through cloud services without triggering export controls. This bill closes that loophole.

Specifically, the bill targets three dangerous uses: (1) using cloud computing to train artificial intelligence systems that could help bad actors build weapons of mass destruction or conduct cyberattacks, (2) accessing tools designed for offensive hacking operations, and (3) using surveillance technology like spyware or facial recognition to violate human rights. The bill applies to "foreign persons of concern"—essentially the governments and companies of countries the U.S. considers security threats, particularly China, Russia, Iran, and North Korea, plus any companies based in or controlled by those countries.

The Secretary of Commerce gets the power to require licenses (permission) before anyone provides remote access to controlled items to these foreign actors. Companies that violate the rules face penalties. The bill also requires the Commerce Department to report to Congress within a year on how the rules are working and whether they need adjustments. Importantly, this new authority automatically expires after 10 years unless Congress extends it.