US AI policy

Federal civilian agencies and their suppliers cannot deploy or retain DeepSeek products or third-party services built on them in government IT systems.

Federal civilian agencies using DeepSeek models or services must stop and switch to alternatives.

Vendors serving US federal agencies must audit and remove DeepSeek technology or derivative components integrated in their products.- Third-party services built on DeepSeek (fine-tuned, distilled, or packaged) are also covered; companies with US government business need to plan model replacement.- Chinese AI models face tighter access to the US federal market; DeepSeek-dependent go-to-market strategies need reassessment.

Companies selling to US federal agencies or their suppliers must verify their tech stack contains no DeepSeek or derivative models.

Vendors and integrators in federal civilian supply chains must identify and replace products built on DeepSeek.- Companies building on Chinese open-source models face procurement restrictions when targeting US government customers.- Tightening two-way controls between the US and China raises compliance scrutiny for Chinese AI firms operating in the US and vendors with ASEAN footprints.

Companies selling to US federal agencies must confirm their supply chains contain no DeepSeek components or risk losing procurement eligibility

Companies selling to the U.S. government or federal contracting ecosystem must audit and remove components based on DeepSeek implementations or face contract compliance risk.- Third-party vendors fine-tuning or building on DeepSeek models are explicitly covered; derivative implementations cannot be used for federal work.- Firms in the China-U.S. AI supply chain must assess U.S. market access restrictions and adjust their tech stack to meet procurement requirements.

Federal software vendors must audit which open-weight models are embedded in products sold to civilian agencies and demonstrate supply chain compliance to keep contracts

AI companies must ensure their models do not launch or assist in cyberattacks, or face potential legal consequences

Companies must sign commercial agreements with Reddit to access its data

AI companies must cooperate with investigations and provide internal records and executive testimony

AI labs must cooperate with the investigation and provide documents and executive testimony

Provides citizens with a more accessible entry point to government services, simplifying information retrieval across agencies

ADAS providers must enhance detection capabilities for stationary or slow-moving vehicles

AI companies must evaluate whether their product restrictions comply with supply chain security regulations to avoid being classified as 'manipulating products'

Obligations: The FAA is obligated to ensure the AI system (like SMART) it deploys for air traffic management meets safety standards and provides reliable routing advice to controllers, while the system itself does not directly control planes. • Opportunities: The AI system can help optimize air traffic flow, reduce congestion, and improve airport operational efficiency. • Deadlines: The system was deployed in the airspace where the American Airlines/Black Hawk collision that killed 67 people in January 2025 occurred, requiring assurance of its safety and effectiveness.

Obligations: Companies deploying Meta smart glasses must comply with Meta's privacy guidelines, implementing the indicator light system and applying software updates to prevent vulnerabilities.

Obligations: Companies must comply with the new AI-based air traffic management system for flight scheduling and rerouting. • Opportunities: Enhanced flight safety, increased air traffic capacity, and improved operational efficiency. • Deadlines: The system is set to be operational by September 21, 2026, with a 12-year contract for development.

Must equip AI models with 'kill switch' functionality and establish independent auditors; - Must collaborate with the expert panel to provide recommendations within two months; - Must comply with California's AI safety regulations, facing compliance risks otherwise.

Company Obligations: Cognita Imaging must complete the development and validation of an LLM-as-a-Jury evaluation method for 1 million radiology reports within 18 months, meeting FDA research requirements.

Obligations: Companies deploying macOS systems must promptly apply the security updates to mitigate risks of kernel memory corruption and privilege escalation. • Opportunities: Engaging with international security research teams, such as those from China, can enhance the discovery and reporting of vulnerabilities. • Deadlines: Immediate action is required to apply the updates to protect against known vulnerabilities.

Lawyers must strictly verify the accuracy of content generated by AI when drafting legal documents to avoid submitting false information, which may result in contempt of court charges and fines.

ARPA-H is investing in an AI heart failure treatment program;

For companies: Provides a path to market products before formal marketing authorization.

Companies may consider the use of copyrighted text for AI training as fair use.

Companies can train AI without excessive concern for copyright infringement risks.

Legalizes the use of copyrighted materials for AI training, providing new opportunities for the AI industry.

Internet-exposed or outdated PLCs are high-risk targets; operators must immediately audit and harden external exposure