Provisions Pertaining to U.S. Investments in Certain National Security Technologies and Products in Countries of Concern

• Authority: Department of the Treasury
• Parent authority: Federal government
• Jurisdiction: United States
• Collections: Editors' Picks;U.S. regulations, executive orders, and agency policies
• Most recent activity: Enacted
• Most recent activity date: 2024-11-15

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Disinformation, surveillance, and influence at scale
• Cyberattacks, weapon development or use
• AI possessing dangerous capabilities

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Competitive dynamics
• Governance failure
• AI pursuing its own goals

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 6-8 subdomains, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures (7.1, 7.2, 7.3). Coverage is concentrated in security, misuse prevention, national security, and AI safety domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Information
• Scientific Research & Development Services
• National Security

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Agriculture, Mining, Construction & Manufacturing
• Finance & Insurance
• Professional & Technical Services
• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

This regulation primarily governs the Information sector (AI development, semiconductors, data processing) and Scientific Research and Development Services sector (quantum computing, advanced AI research). It also has significant coverage of National Security sector activities. The regulation applies to U.S. persons making investments in these technologies in countries of concern.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding federal regulation issued by the Department of the Treasury under the International Emergency Economic Powers Act (IEEPA) with explicit enforcement mechanisms, civil and criminal penalties, and mandatory compliance requirements for U.S. persons.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Summary: The regulation was issued by the Department of the Treasury implementing Executive Order 14105. The Secretary of the Treasury is explicitly identified as the authority who issues these regulations in consultation with other agencies.

Target

• Entity Types: AI_Developer, AI_Deployer, AI_Infrastructure_Provider
• Summary: The regulation applies to U.S. persons who engage in transactions with covered foreign persons. It regulates investments in AI systems, semiconductors, and quantum technologies. U.S. persons include entities that develop, deploy, or provide infrastructure for AI.

Enforcer

• Entity Types: AI_Governance_Actor
• Summary: The Department of the Treasury has primary enforcement authority including investigation, penalty assessment, and divestment orders. The Attorney General and Department of Justice handle criminal prosecutions and certain civil enforcement actions.

Monitor

• Entity Types: AI_Governance_Actor
• Summary: The Department of the Treasury monitors compliance through notification requirements, investigations, and information requests. The Secretary consults with multiple agencies on analysis of transactions and national security implications.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple AI lifecycle stages with primary focus on Build and Use Model (AI system development with compute thresholds), Deploy (investment transactions), and Operate and Monitor (post-transaction knowledge requirements). It addresses planning through notification requirements and verification through due diligence standards.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• AI Systems
• Compute Threshold

Technical Scope Summary

The document explicitly defines and regulates AI systems with detailed technical specifications. It establishes compute thresholds at 10^23, 10^24, and 10^25 FLOPs for different categories. It covers AI systems broadly but does not explicitly distinguish between general purpose AI, task-specific AI, foundation models, or generative vs predictive AI. It does not explicitly address open-weight models.