Protection Against Foreign Adversarial Artificial Intelligence Act of 2025

Summary

Prohibits federal contractors with active contracts from using the DeepSeek application or any service by High Flyer for contract fulfillment, unless waived by the Secretary of Commerce in consultation with the Secretary of Defense for national security or research purposes.

Requires the Secretary of Commerce, in consultation with the Secretary of Defense, to submit a report within one year detailing national security threats from AI platforms based in or affiliated with countries of concern.

Includes analysis of censorship laws, propaganda use, export control circumvention, and privacy/data security threats related to AI applications.

Includes recommendations for administrative and legislative measures to protect U.S. data security and privacy.

Permits the report to be in unclassified form with a possible classified annex.

Summarizes the bill's focus on protecting the U.S. from AI linked to countries of concern.

A BILL To protect the United States from artificial intelligence applications based in or affiliated with countries of concern, and for other purposes.

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,

SECTION 1. Short title.

This Act may be cited as the “Protection Against Foreign Adversarial Artificial Intelligence Act of 2025”.

Prohibits federal contractors from using DeepSeek for contracts, unless waived by the Secretary of Commerce.

SEC. 2. Prohibition on use of DeepSeek to carry out a Federal contract.

(a) Prohibition.—Except as provided in subsection (b), no Federal contractor with an active Federal contract may use the DeepSeek application or any successor application or service developed or provided by High Flyer or any entity owned by High Flyer, for the fulfillment, assistance, execution, or otherwise support to complete, or support in part, a contract with a Federal agency.

(b) Waiver.—The Secretary of Commerce may, in consultation with the Secretary of Defense, waive the prohibition in subsection (a) on a case-by-case basis if using the application or service is required for the completion of a national security-related objective of a certain contract or for research purposes.

Requires the Secretary of Commerce to report on AI threats from countries of concern within one year.

SEC. 3. Report on threats to national security posed by artificial intelligence platforms based in or affiliated with countries of concern.

(a) Definition of country of concern.—In this section, the term “country of concern” has the meaning given the term “covered nation” in section 4872(f) of title 10, United States Code.

(b) Report required.—Not later than 1 year after the date of the enactment of this Act, the Secretary of Commerce shall, in consultation with the Secretary of Defense, submit to the Committee on Armed Services of the Senate and of the House of Representatives, the Committee on Commerce, Science, and Transportation of the Senate, and the Committee on Energy and Commerce of the House of Representatives a detailed report on the threats to national security posed by artificial intelligence platforms, including large language models and generative artificial intelligence, based in or affiliated with countries of concern.

Requires the report to analyze AI-related censorship, propaganda, security threats, and recommend actions addressing these issues.

(c) Contents.—The report submitted pursuant to subsection (b) shall include the following:

(1) An analysis of censorship laws and capacities by governments described in subsection (a) that could access or influence of artificial intelligence applications.

(2) An analysis of the potential and current use of artificial intelligence platforms to further state-sponsored propaganda.

(3) The national security impact of circumvention of United States export controls on graphics processing units contributed to the development of artificial intelligence models of countries of concern.

(4) An analysis of the privacy and data security threats toward United States data entered or otherwise submitted to an artificial intelligence application, including— (A) how and where United States users’ data is stored, including whether such data is stored within on-premise servers or a cloud infrastructure; (B) whether United States users’ data can be accessed and used by a government or political entity of a country of concern, including the Chinese Communist Party; (C) the extent to which data collected from the United States contributes to the development of artificial intelligence applications described in subsection (b); (D) the threat that such access could be an economic espionage risk to intellectual property, trade secrets, proprietary information, or sensitive or confidential information to obtain an unlawful advantage; and (E) the threat that such access could be a risk to information, including policy decisions, relating to an office or program under the Federal Government.

(5) Any other information considered relevant by the Secretary.

(6) Recommendations for administrative and legislative action to address data security and privacy risks posed to the United States by artificial intelligence applications affiliated with governments of countries of concern.

(d) Form.—The report submitted pursuant to subsection (b) shall be submitted in unclassified form, but may include a classified annex.