US AI Export Controls Unveiled

Jan 19, 2025

4 min read

Updated: Jan 20, 2025

Protecting American AI: What You Need to Know About the US Department of Commerce’s New Interim Final Rule

As an expert in export controls and sanctions, I’m here to guide you through the recently published Interim Final Rule (IFR) from the US Department of Commerce’s Bureau of Industry and Security (BIS). If you’re a professional navigating the complexities of due diligence, restrictive measures, and dual-use items, this rule can significantly impact your work. I’ll explain how this new framework shapes the export and security controls for artificial intelligence (AI) and highlight actionable steps for staying compliant.

Why This Matters

Released on January 13, 2025, the IFR establishes a framework for managing the global diffusion of AI technologies while tightening controls on critical hardware, software, and advanced model weights. For professionals like you, this is more than just a regulatory update; it’s an opportunity to align your internal compliance programme (ICP) with cutting-edge governance practices and ensure your organisation remains competitive.

This rule is not just about restrictions; it also paves the way for growth by creating structured pathways for companies to expand responsibly. If you’re in AI, computing, or data centre operations, this is your cue to act.

Watch the Public Briefing by BIS

https://www.youtube.com/watch?v=7Rk5dhFjVfY

The Briefing was provided by U.S. BIS in January 2025

Key Features of the IFR

1. Expanded Controls on Advanced AI Chips

The IFR introduces a global licensing requirement for advanced computing integrated circuits (ICs), computing equipment, and related technologies (“Advanced AI Chip Items”). These are critical for AI innovation but also pose security risks if diverted improperly.

The framework adopts a three-tiered country structure:

Group 1: Whitelisted Country Group
- Includes the US and 18 allied countries with low diversion risks.
- Unlimited exports are permitted unless the end user is tied to Group 2.
Group 2: Prohibited Country Group
- Covers 23 arms-embargoed countries, including China, and Macau.
- Licensing applications face a presumption of denial.
Group 3: All Other Countries
- Exports require licenses but can qualify for conditional exceptions based on factors like destination and computing power.

For Group 3, a default allocation of 790 million total processing performance (TPP) per country applies, with potential increases for countries meeting national security commitments.

2. New Controls on AI Model Weights

Advanced closed-weight AI models trained with 10^26 or more computational operations now fall under export controls. While published model weights are exempt, closed-weight models require licenses for all destinations.

This change introduces new compliance challenges, particularly for infrastructure-as-a-service (IaaS) providers and multinational corporations relying on US-based AI resources. If you’re in this space, proactive due diligence is critical to avoid breaches.

3. License Exceptions for Flexibility

While stringent, the IFR includes new conditional license exceptions to reduce supply chain disruptions:

Shipments Below Certain Performance Thresholds: Allows exports under specific TPP limits.
Manufacturing/Supply Chain Shipments: Permits transfers to private-sector end users outside prohibited countries for development and storage activities.

These exceptions are highly conditional, so meticulous attention to detail in documentation and compliance is essential.

4. Data Center Validated End-User Authorizations

The IFR introduces two types of Validated End-User (VEU) Authorizations:

Universal VEUs (Whitelisted Countries): Enables approved entities to procure unlimited AI computing resources for use worldwide, excluding prohibited countries. Applicants must meet rigorous security obligations.
National VEUs (Group 3): Authorises entities in non-Whitelisted countries to establish data centres in specific locations. These authorisations do not count towards TPP caps, offering a strategic advantage.

Opportunities for Businesses

While compliance might seem daunting, the IFR provides clear pathways for businesses headquartered in Whitelisted Countries to expand globally. The framework supports:

License-free procurement of unlimited AI computing power within the US and allied countries.
Strategic expansion into non-allied countries with proper authorisations.
Streamlined supply chains through conditional exceptions.

If you’re in AI development, chip manufacturing, or data centre operations, these pathways can help you scale responsibly while adhering to regulatory requirements.

Your Next Steps

Review Your Internal Compliance Programme (ICP)
- Ensure your ICP aligns with the new export controls. This is crucial for demonstrating integrity and accountability.
Engage in Due Diligence
- Evaluate your supply chain and client base to identify risks tied to Group 2 entities or destinations.
Leverage Conditional Exceptions
- Assess eligibility for license exceptions or VEU programmes. Work closely with consultants to navigate the application process.
Prepare for the May 15, 2025 Deadline
- The compliance deadline is fast approaching. Begin necessary adjustments now to avoid disruptions.
Submit Comments
- If your business is significantly impacted, consider submitting comments to BIS by the May 15 deadline.

Why This Matters to You

As a professional in export controls, sanctions, or AI, your role is pivotal in ensuring compliance while fostering innovation. The IFR is not just a set of rules; it’s a roadmap for balancing national security with technological progress. Your expertise in navigating these complexities is more important than ever.

Remember, compliance is not just about avoiding penalties; it’s about demonstrating professionalism, confidentiality, and adaptability. By embracing these changes, you can position yourself and your organisation as leaders in a rapidly evolving landscape.

Let’s Work Together

I’m here to help you decode these complexities and turn challenges into opportunities. Let’s collaborate to build a robust compliance framework tailored to your needs. Together, we can navigate the evolving export control regime and ensure your business thrives in this dynamic environment.

Disclaimer

This article is for informational purposes only and does not constitute legal advice. For personalised support, contact me at Customs Manager Ltd. Book a free consultation to discuss how these changes impact your business.