Sponsors (2)
The bill increases DoD control, transparency, competition, and system resilience in cloud/AI procurements but does so at the cost of higher provider compliance burdens and risks of reduced vendor participation, higher prices, and integration complexity.
Taxpayers and national-security stakeholders keep sensitive DoD data under exclusive Government control, reducing risk that operational or classified information is reused commercially.
Small and nontraditional firms see lower barriers to entry and greater opportunities to compete for DoD cloud and AI work, expanding the pool of bidders.
DoD systems and contractors gain greater resiliency and interoperability because the bill prioritizes multi‑cloud deployments and modular/open architectures.
Government contractors and small vendors will face higher compliance costs and the risk of fines or contract termination for mishandling data, increasing operational burdens.
Taxpayers and contractors may see fewer cutting‑edge commercial services or higher contract prices because strict Government‑exclusive data rights and limits on using DoD data to train vendor models can discourage provider participation.
Small businesses and other bidders may be disadvantaged if acquisition executives use exemption authority unevenly, allowing ad hoc national‑security justifications that reduce consistent competition.
Based on analysis of 2 sections of legislative text.
Directs DoD to require competitive, multi-cloud procurement, government-exclusive rights to government data, DFARS prohibitions on training commercial models with government data, penalties, and annual reporting.
Official title: Provide for certain requirements relating to cloud, data infrastructure, and foundation model procurement.
Introduced May 15, 2025 by Elizabeth Warren · Last progress May 15, 2025
Requires the Department of Defense to change how it buys cloud, data infrastructure, and large AI models so more vendors can compete, DoD retains exclusive rights to government data, and commercial providers cannot use government data to train their models without authorization. Sets a $50 million contracting-size threshold to identify covered providers, prioritizes multi-cloud approaches, updates Defense Federal Acquisition Regulation Supplement (DFARS) rules on data separation and prohibited uses, and creates penalties and a narrow exemption process for national-security needs. The Pentagon must produce an initial public report on competition and DFARS exemptions by January 15, 2027, and annual reports for four years.