The US restricts foreign access to its AI models
The test Between 26 Oct 2026 and 25 Oct 2027, BIS publishes a rule or the President signs an executive order that restricts foreign access to US AI model weights or model APIs (a licence requirement, a ban, or mandatory identity checks on foreign users); procurement-only orders and federal-contract terms do not count.
Not under way · Confidence: low · Reviewed 25 Oct 2026 · Scores from 1 to 10
This page answers: What could happen, how it is scored, and who is exposed?
Using this page
- Read the two scores: Likelihood and Impact are kept apart.
- Check what is happening, each fact with its source.
- Use the calendar for the dates to watch.
Follow this riskSign in to follow; one weekly email if you ask for it.
Likelihood ↑ 8 Sep 2026: CISA, NSA and FBI advisory AA26-251A names six China-based firms running distillation campaigns against US models.
Impact is the average of the four parts, rounded, plus one point when Canada is directly hit on two or more channels, up to 10.
Two separate scales from 1 to 10. Strature never multiplies or merges them.
Why it matters
No US rule in force limits who abroad may use or obtain American AI models: the January 2025 rule on model weights never reached its 15 May 2025 compliance date, because Commerce announced on 13 May 2025 it would not enforce and would rescind it. On 8 Sep 2026 CISA, NSA and FBI said six China-based firms ran industrial-scale distillation campaigns, an allegation, and a House bill would push sanctions; so far the answer has been guidance and procurement steps, not access rules.
Why Likelihood 4 Pushes: the joint advisory, NSTM-4, the DHS DeepSeek order, H.R. 8283, GAO's May 2026 finding. Brakes: the administration rescinded the 2025 rule and has used guidance and procurement so far; the US-China truce. The 4 rests on the 8 Sep advisory; without it, 3.
The other facts on file (4)
- The AI Diffusion rule of 15 Jan 2025 added a control for AI model weights. [2] (12 May 2026)
- Commerce announced on 13 May 2025 it would not enforce and would rescind the rule; GAO found on 12 May 2026 that the announcement is a rule under the CRA. [2] (12 May 2026)
- OSTP issued NSTM-4 on adversarial distillation on 23 Apr 2026. [6] (2 May 2026)
- H.R. 8283, introduced 15 Apr 2026, would require an Entity List determination within 210 days of enactment. [7] (15 Apr 2026)
Where it sits
How it spreads
Between 26 Oct 2026 and 25 Oct 2027, BIS publishes a rule or the President signs an executive order that restricts foreign access to US AI model weights or model APIs (a licence requirement, a ban, or mandatory identity checks on foreign users); procurement-only orders and federal-contract terms do not count.
Not under wayChannels 4 on the card
- US model sellersAn export-control layer on API sales abroad.
- Cloud and software sellers abroadResellers and hosts, Canadian firms among them, screen users; no figure.
- ChinaAccess cut; Entity List path adds trade penalties.
- PartnersCountry tiers for access, as in the 2025 rule [2].
Sectors 1
- Technology
Countries 3
- United States primary
- China primary
- Canada
Who is exposed
- Countries
- China, United States, Canada
- Sectors
- Technology
Three scenarios and their signposts
- S1
Guidance, not rules
The US relies on NSTM-4, the advisory and procurement bans.
- S2
Sanctions route
Congress passes H.R. 8283 and firms are listed, without an access rule.
- S3
Access rules
BIS issues a licence or identity rule for model access.
| Path | Signpost |
|---|---|
| S1 | No BIS rule by mid-2027 |
| S2 | A floor vote on H.R. 8283 |
| S3 | A BIS proposed rule naming model weights |
No probability is given for the three paths.
Dates to watch
The dates to watch
A dot is a day, a bar a month or a year; a hollow mark is tentative. The line marks today.
- 3 Nov 2026 US midterm elections [10] Declared · Outside event
- 25 Oct 2027 End of the scored window Declared · Strature date
Sign in, with alerts on, for an email 7 days and 1 day before.
The other side
US model sellers keep open markets while rules stay light, and partners that host US models gain from that; the bill itself says authorised training within terms of service plays an important role, which a clear rule could protect.
Connected in Strature
- United States
- China
- Canada
- Washington re-tightens chip export controls on China Shares a channel: Both are BIS advanced-computing rules; the 2025 rule covered chips and weights together.
Sources
6 sources, numbered as the text cites them
- Decision B-337935: Applicability of the Congressional Review Act to the Rescission of the AI Diffusion Rule. US Government Accountability Office · 12 May 2026 · Official · confidence high · retrieved 25 Oct 2026
- China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies (AA26-251A). CISA, NSA and FBI · 8 Sep 2026 · Official · confidence high · retrieved 25 Oct 2026
- NSTM-4: US Policy Response to AI Model Distillation Attacks. Cloud Security Alliance · 2 May 2026 · Industry · confidence medium · retrieved 25 Oct 2026
- H.R. 8283, Deterring American AI Model Theft Act of 2026 (introduced). US House of Representatives, via GovInfo · 15 Apr 2026 · Official · confidence high · retrieved 25 Oct 2026
- Notice of Order Regarding Exclusion and Removal of DeepSeek Products From Federal Civilian Executive Branch IT Systems and Procurements (FR Doc. 2026-21447). Department of Homeland Security, Federal Register · 20 Oct 2026 · Official · confidence high · retrieved 25 Oct 2026
- 2026 Congressional Primary Dates and Candidate Filing Deadlines for Ballot Access. Federal Election Commission · 18 May 2026 · Official · confidence high · retrieved 25 Oct 2026
Reviewed 25 Oct 2026 · version 1 · last change: reviewed · All risks