Commerce Dept. gains power to sanction foreign AI researchers over model theft

What it does

This bill directs the Commerce Department to identify foreign entities and individuals from China, Russia, and other adversarial countries that are stealing the technical blueprints of U.S. AI models through unauthorized access and fraudulent account schemes. Once identified, these entities face sanctions—asset freezes and transaction bans—and are added to an export control blacklist. The bill protects legitimate AI research conducted with permission and carves out humanitarian exceptions to sanctions.

Why we flagged it

The bill's operative mechanism is a national security assessment followed by export controls (Entity List additions) and economic sanctions (asset freezes) against foreign entities engaged in AI model theft. It is fundamentally a trade-control and sanctions statute, not a research or innovation bill despite its framing around 'national security interests.'

What the text implies

• The bill grants private AI companies (OpenAI, Anthropic, Meta, etc.) significant gatekeeping power over what counts as 'unauthorized extraction.' Their terms of service and contractual definitions become de facto national security policy, with minimal public oversight or appeal mechanism.
• The definition of 'model extraction attack' relies on inference from 'totality of circumstances'—volume, timing, pattern, coordination—which is inherently subjective and could capture legitimate security research, competitive benchmarking, or academic study if conducted at scale.
• Foreign researchers and students in the U.S. may face heightened scrutiny or restrictions on AI model access, potentially chilling international collaboration and brain drain from U.S. AI research institutions.
• The bill creates a public 'AI Model Extraction Attackers List' that names foreign entities and individuals, which may lack due process protections and could be used for reputational harm or as a basis for broader sanctions without transparent criteria.
• Sanctions are imposed under the International Emergency Economic Powers Act (IEEPA), which grants the President broad discretion to freeze assets and block transactions with minimal congressional oversight beyond reporting requirements.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Citizens benefit from national security protections against foreign theft of U.S. AI intellectual property and potential deterrence of adversarial AI development. However, the bill's broad definition of 'model extraction' and reliance on private AI companies to report attacks creates opacity: citizens have no direct visibility into what counts as theft, which companies are targeted, or how enforcement decisions are made. The bill also grants significant power to private AI owners to define what

Who stands to gain

• U.S. closed-source AI model owners (OpenAI, Anthropic, Google DeepMind, Meta, Microsoft, etc.)
• U.S. technology and semiconductor companies (AMD, HPE, Cisco, Cognizant) that supply AI infrastructu
• U.S. defense and intelligence contractors that rely on advanced AI capabilities

Named in the bill

Department of Commerce (SecDOC, Under SecDOC for Industry and Security), Bureau of Industry and Security, Operating Committee for Export Policy, End-User Review Committee, People's Republic of China, Russian Federation, Entity List (15 CFR 744), International Emergency Economic Powers Act (IEEPA), OpenAI, Anthropic, Google, Meta, Microsoft (implied beneficiaries), AMD, HPE, Cisco, Cognizant (mapped stocks)

Where it stands

5 cosponsors: 3 Democrats, 2 Republicans.

• Aug 5, 2026 — Introduced · Congress.gov: “Introduced in Senate”
• Aug 5, 2026 — Referred to Senate Committee on Banking, Housing, and Urban Affairs · Congress.gov: “Read twice and referred to the Committee on Banking, Housing, and Urban Affairs”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.