<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Introduced-in-House" dms-id="HAC0CEF1C493847B7AAA0EE43DE2BA20D" public-private="public" key="H" bill-type="olc"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>119 HR 9546 IH: Cloud Security Act</dc:title>
<dc:publisher>U.S. House of Representatives</dc:publisher>
<dc:date>2026-06-30</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">I</distribution-code><congress display="yes">119th CONGRESS</congress><session display="yes">2d Session</session><legis-num display="yes">H. R. 9546</legis-num><current-chamber>IN THE HOUSE OF REPRESENTATIVES</current-chamber><action display="yes"><action-date date="20260630">June 30, 2026</action-date><action-desc><sponsor name-id="G000583">Mr. Gottheimer</sponsor> (for himself and <cosponsor name-id="M001194">Mr. Moolenaar</cosponsor>) introduced the following bill; which was referred to the <committee-name committee-id="HJU00">Committee on the Judiciary</committee-name></action-desc></action><legis-type>A BILL</legis-type><official-title display="yes">To provide for exceptions for notifications to the United States Government relating to specified foreign entities.</official-title></form><legis-body id="HCF7960A27992468EBAA230FE011E8040" style="OLC"> 
<section id="H6A4B3689492D4876B14AE7D757F6838E" section-type="section-one"><enum>1.</enum><header>Short title</header>
 <text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Cloud Security Act</short-title></quote>.</text></section>
<section id="H80D2287747C44E6BAB28F97C5FD43F4E"><enum>2.</enum><header>Exceptions for notifications to the United States Government relating to specified foreign entities</header> 
<subsection id="HA9996BA1F43548FEB7C4004E4BF10D58"><enum>(a)</enum><header>Communications</header><text>Section 2702(b) of title 18, United States Code, is amended—</text> <paragraph id="H94C73E6DC3D7433A82BBE476F1229E35"><enum>(1)</enum><text>in paragraph (8), by striking <quote>; or</quote> and inserting a semicolon;</text></paragraph> 
<paragraph id="H1C6930407B6841CC9A24D369B30568E9"><enum>(2)</enum><text>in paragraph (9), by striking the period at the end and inserting <quote>; or</quote>; and</text></paragraph> <paragraph id="HC91C08021B8D4CAFA7A93EC72DAE5995"><enum>(3)</enum><text>by adding at the end the following:</text> 
<quoted-block id="H700D8E255D2145ACB2D841FC19304A59" style="USC"> 
<paragraph id="HD81B188DD165438FA99E72FCCD17D14B"><enum>(10)</enum><text>to the Secretary of Commerce, or an officer, employee, or agent of the United States Government designated by the Secretary of Commerce, if—</text> <subparagraph id="HC88989EF81A248B78D444ED8CA03483A"><enum>(A)</enum><text>the disclosure is made for the purpose of providing a verification, notification, referral, report, or other information required to comply with regulations issued pursuant to the Export Control Reform Act of 2018 (<external-xref legal-doc="usc" parsable-cite="usc/50/4801">50 U.S.C. 4801 et seq.</external-xref>);</text></subparagraph> 
<subparagraph id="H8703AE0F82E147DD844EBC156F84A1D5"><enum>(B)</enum><text>the provider, in good faith, believes that the communication relates to use of a covered cloud product by a specified foreign entity, or by an entity acting on behalf of, at the direction of, or for the benefit of a specified foreign entity; and</text></subparagraph> <subparagraph id="H33C8BBDC90B545D690552B1F3602CD79"><enum>(C)</enum><text>the disclosure is limited to the contents reasonably necessary to make or substantiate the verification, notification, referral, report, or other information described in subparagraph (A).</text></subparagraph></paragraph><after-quoted-block>.</after-quoted-block></quoted-block></paragraph></subsection> 
<subsection id="H6E1623E942A943639FAC5AE4BF3879DF"><enum>(b)</enum><header>Customer records</header><text>Section 2702(c) of title 18, United States Code, is amended—</text> <paragraph id="HACBB769631E24961AD9B99F661319FD2"><enum>(1)</enum><text>in paragraph (6), by striking <quote>; or</quote> and inserting a semicolon;</text></paragraph> 
<paragraph id="H3BE367ADEBF84221B92923B48A6888D9"><enum>(2)</enum><text>in paragraph (7), by striking the period at the end and inserting <quote>; or</quote>; and</text></paragraph> <paragraph id="HDC8F97B41C1A4C2380D650FD58859D2D"><enum>(3)</enum><text>by adding at the end the following:</text> 
<quoted-block id="HA882F24F2C614899B519E99540C13AB6" style="USC"> 
<paragraph id="HCA714774F44742F0BDCD5BF71F059D68"><enum>(8)</enum><text>to the Secretary of Commerce, or an officer, employee, or agent of the United States Government designated by the Secretary of Commerce, if—</text> <subparagraph id="H466B1187F3504F72A6FB1E1E05F5FE52"><enum>(A)</enum><text>the disclosure is made for the purpose of providing a verification, notification, referral, report, or other information required or authorized under the Act that enacted this paragraph, or to comply with regulations issued pursuant to the Export Control Reform Act of 2018 (<external-xref legal-doc="usc" parsable-cite="usc/50/4801">50 U.S.C. 4801 et seq.</external-xref>);</text></subparagraph> 
<subparagraph id="HC8112517BC544F84B585DFB333E5ED61"><enum>(B)</enum><text>the provider, in good faith, believes that the record or other information relates to use of a covered cloud product by a specified foreign entity, or by an entity acting on behalf of, at the direction of, or for the benefit of a specified foreign entity; and</text></subparagraph> <subparagraph id="H94335D53CA164E4BA3DD1EA948A1F6CC"><enum>(C)</enum><text>the disclosure is limited to the record or other information reasonably necessary to make or substantiate the verification, notification, referral, report, or other information described in subparagraph (A).</text></subparagraph></paragraph><after-quoted-block>.</after-quoted-block></quoted-block></paragraph></subsection> 
<subsection id="H43D4586971224F7DBA94D634981FB145"><enum>(c)</enum><header>Definitions</header><text>Section 2711 of title 18, United States Code, is amended—</text> <paragraph id="H9BE133CA84DF4CD78540C3AA3372315E"><enum>(1)</enum><text>in paragraph (3)(C), by striking <quote>and</quote> at the end;</text></paragraph> 
<paragraph id="HBC451C1F237D4BF393A7DF2AE2E792E8"><enum>(2)</enum><text>in paragraph (4), by striking the period at the end and inserting <quote>; and</quote>; and</text></paragraph> <paragraph id="HE2B99244FDA1483DACCB4F46D383F9C3"><enum>(3)</enum><text>by adding at the end the following:</text> 
<quoted-block style="USC" id="H819F26166F15408FA21818DF63242B3C" display-inline="no-display-inline"> 
<paragraph id="H8D352193883743459714DFC44E4FB7E0"><enum>(5)</enum><text display-inline="yes-display-inline">the term <quote>AI model</quote> means an artificial intelligence model that is trained on broad data, generally uses self-supervision, contains at least 1,000,000,000 parameters, and is applicable across a wide range of contexts;</text></paragraph> <paragraph id="H2273DF450B424EFDA1A0CC4AF3C3E5B8"><enum>(6)</enum><text>the term <quote>covered cloud product</quote> means—</text> 
<subparagraph id="H26DF2DF37BF7420CA5BA85C911ED5955"><enum>(A)</enum><text display-inline="yes-display-inline">an infrastructure as a service product used to develop or deploy an advanced AI model using a covered integrated circuit; or</text></subparagraph> <subparagraph id="H2FFDE3DCD31742BCA1E352EC2061275B"><enum>(B)</enum><text display-inline="yes-display-inline">a platform as a service or software as a service product that provides a customer with computational resources, access, or functionality substantially equivalent to those available through an infrastructure as a service product described in subparagraph (A), regardless of how the product is marketed, packaged, or characterized;</text></subparagraph></paragraph> 
<paragraph id="H2503BA893754452AA2A01CF0ABF7025D"><enum>(7)</enum><text>the term <quote>covered integrated circuit</quote>—</text> <subparagraph id="HBFC4A4BACD394AB48B07CB76DAAE5464"><enum>(A)</enum><text>means, subject subparagraph (B)—</text> 
<clause id="HF7D6F467A92446A3870BB75AA9B84511"><enum>(i)</enum><text display-inline="yes-display-inline">an integrated circuit, computer, or other product—</text> <subclause id="HF9D490DDB60D45949122117040D7D0EE"><enum>(I)</enum><text display-inline="yes-display-inline">classified under Export Control Classification Number 3A090 or 4A090 or related Export Control Classification Numbers; or</text></subclause> 
<subclause id="H882053479D82497898335A5CDA1900F6"><enum>(II)</enum><text display-inline="yes-display-inline">that is functionally equivalent or substantially similar to a circuit, computer, or product described in subclause (I), including certain similar products listed under Export Control Classification Number 5A002.z; or</text></subclause></clause> <clause id="H83160CCB701A40879E81E6ADECA67B8B"><enum>(ii)</enum><text display-inline="yes-display-inline">an integrated circuit that has 1 or more digital processing units with—</text> 
<subclause id="HB6FCCD9A1F7F49A9A8719A0F549DEA80"><enum>(I)</enum><text display-inline="yes-display-inline">a total processing performance of 4,800 or more;</text></subclause> <subclause id="HF0701D1C06304A0E8DCDB61686C42FA2"><enum>(II)</enum><text display-inline="yes-display-inline">a total processing performance of 2,400 or more and a performance density of 1.6 or more;</text></subclause> 
<subclause id="H14883F9F4E4C4257A9E31B267397F694"><enum>(III)</enum><text display-inline="yes-display-inline">a total processing performance of 1,600 or more and a performance density of 3.2 or more; or</text></subclause> <subclause id="H62164108676F4A758AB935B169BAF338"><enum>(IV)</enum><text display-inline="yes-display-inline">a total DRAM bandwidth of 1,400 gigabytes per second or more, interconnect bandwidth of 1,100 gigabytes per second or more, or a sum of DRAM bandwidth and interconnect bandwidth of 1,700 gigabytes per second or more;</text></subclause></clause></subparagraph> 
<subparagraph id="H32374D59912348BDB25306C246D89391"><enum>(B)</enum><text display-inline="yes-display-inline">has the meaning given such term in subparagraph (A), as modified by the Secretary of Commerce beginning 24 months after the date of enactment of this paragraph;</text></subparagraph> <subparagraph id="H5A293FB74745483FA86B620B2E5138DE"><enum>(C)</enum><text display-inline="yes-display-inline">includes a product containing such a covered integrated circuit;</text></subparagraph> 
<subparagraph id="H3C358C415E1444EBBB67D81172C46E04"><enum>(D)</enum><text display-inline="yes-display-inline">does not include a covered integrated circuit or a product containing such a covered integrated circuit that is not designed or marketed for use in data centers; and</text></subparagraph></paragraph> <paragraph id="HF63C3B5A130346B4A8C5059D43945472"><enum>(8)</enum><text display-inline="yes-display-inline">the term <quote>specified foreign entity</quote> has the meaning given that term in <external-xref legal-doc="usc" parsable-cite="usc/26/7701">section 7701(a)(51)(B)</external-xref> of the Internal Revenue Code of 1986.</text></paragraph><after-quoted-block>.</after-quoted-block></quoted-block></paragraph></subsection></section> 
</legis-body></bill>

