Sponsors (18)
The bill tightens export controls and enforcement around foreign remote access to better protect national security and increase oversight, while imposing meaningful compliance costs, potential operational disruptions for international users, and risks of chilling legitimate activity.
Foreign persons' remote access to sensitive U.S. technology will be subject to export controls, reducing the risk of unauthorized transfers to adversaries.
Keeps executive authority to act quickly on export-control matters while increasing transparency to key congressional committees, preserving timely national-security responses.
Creates clearer export-control rules and economic-impact explanations (licenses/controls for remote/cloud access and required Commerce impact statements), improving legal certainty for exporters and giving Congress better oversight of economic effects.
U.S. companies—especially cloud providers, small- and medium-sized businesses, and some financial firms—will face higher compliance costs and licensing burdens, disproportionately straining smaller firms' resources.
Foreign customers and employees may lose convenient remote access to U.S. systems or face delays from licensing, harming cross-border collaboration and international business operations.
Broader enforcement reach and stiffer penalties increase the risk of criminal or civil liability for companies and individuals, potentially chilling legitimate research, cloud services, and collaboration absent clearer guidance.
Based on analysis of 3 sections of legislative text.
Treats foreign persons' remote access (including via cloud or network) to U.S.-jurisdictional items as an activity subject to export controls, licensing, and enforcement.
Treats "remote access" — including network or cloud access by foreign persons to items under U.S. jurisdiction — as an activity subject to U.S. export controls alongside exports, reexports, and in‑country transfers. It amends the Export Control Reform Act to add a definition of remote access, updates cross‑references and enforcement, and requires Commerce to brief specified congressional committees before issuing remote‑access regulations. The changes extend existing licensing, enforcement, penalties, compliance, inspection, and reporting authorities to remote access activities, preserve current criminal intent standards, and require the Department of Commerce to keep the House Foreign Affairs Committee and Senate Banking Committee fully informed (including classified briefings) when it plans to regulate remote access risks and economic impacts.
Official title: Remote Access Security Act
Introduced April 7, 2025 by Michael Lawler · Last progress January 13, 2026