Summary#
The China FIREWALL Act of 2026 would create a new federal law; it does not amend an existing Act. Its stated aim is to restrict certain AI applications in executive agencies, by requiring their removal from agency information technology and barring agencies from procuring them. The bill has been introduced and referred to a House committee; it is not law.
- Within 60 days after enactment, the Office of Management and Budget (OMB), consulting four other federal officials, must develop standards and guidelines requiring executive agencies to remove covered applications from their information technology.
- Agencies may be allowed to keep or use a covered application for law enforcement, national security, or security research under exceptions in the standards. Agencies must document risk-mitigation steps for any use allowed under an exception.
- Executive agencies may not procure a covered application, including software that uses one.
- OMB may waive the section’s requirements case by case for national security, after consulting the named officials.
What it means for you#
- Federal executive agencies: They would have to remove covered applications from agency information technology under OMB’s standards. The bill does not itself set out a removal process or schedule beyond the 60-day deadline for OMB to develop the standards.
- Federal agencies buying software: They could not procure a covered application or software that uses one, unless OMB waives the requirement.
- People outside the federal executive branch: The bill does not directly ban private or general public use of these applications.
- People concerned about the bill’s “China” title: The operative definition covers AI developed or provided by a “foreign entity of concern,” not only entities from China. The bill points to another statute for that definition.
- Researchers and law enforcement: The standards must include exceptions for security researchers and law enforcement activities, as well as national security interests and activities. The bill does not guarantee that any particular use will qualify.
Money#
No publicly available information on the bill’s estimated costs.
- OMB must develop standards and consult other officials, but the bill gives no staffing or cost estimate.
- The bill does not provide an appropriation, fee, fine, or savings estimate.
What is unclear#
- The bill relies on another statute’s definition of “foreign entity of concern”; that definition is not reproduced in the supplied text.
- It does not explain how agencies decide whether software “utilizes” a covered application or how to identify all affected software.
- It does not set out agency procedures, oversight, reporting, or appeal rights for removal decisions or exceptions.
- The exception language appears in the provision about removal standards; the bill does not clearly say whether those exceptions also permit procurement. OMB’s separate waiver power applies to the section’s requirements.
- The bill gives no separate start date for the procurement ban.
Case for#
- The bill appears intended to limit security risks from AI applications linked to foreign entities of concern on federal systems.
- A government-wide standard led by OMB could give agencies a common rule for removing covered applications.
- The exceptions could allow certain law enforcement, national security, and security research uses, while requiring agencies to document risk-mitigation steps.
Case against#
- The procurement ban reaches not only AI applications but also software that uses a covered application, which could make the restriction broad.
- The bill does not explain how agencies identify covered software or handle removal, so agencies may lack clear direction until standards are developed.
- It is unclear how exceptions will work in practice, and OMB’s national-security waiver gives it discretion to set aside the section’s requirements case by case.
- The bill does not provide a cost estimate for the work agencies and OMB would have to do.