The GAIN AI Act of 2025 amends the Export Control Reform Act to require Department of Commerce licensing for exports, reexports, and in‑country transfers of certain advanced integrated circuits destined for entities tied to specified ‘countries of concern.’ Applicants must certify they offered a right of first refusal to United States persons; applications lacking that certification must be denied. The bill also creates a regulatory pathway to designate ‘trusted United States persons’ whose in‑country acquisitions and continued ownership can exempt transactions from certain license requirements.
This is an industry‑targeted measure: it ties export licensing to commercial allocation and creates concrete technical thresholds for which products qualify, while imposing regulatory timelines, recordkeeping, and penalties. For compliance officers and supply‑chain managers, the bill imposes new disclosure and notice duties, an obligation to document how U.S. demand is being prioritized, and a fast timetable for U.S. customers to act on purchase opportunities—tools the Commerce Department will operationalize via regulation within fixed deadlines.
At a Glance
What It Does
The bill requires a Commerce Department license for covered advanced circuits sent to entities with ties to enumerated countries and conditions those licenses on a certification that the exporter offered a public right of first refusal to U.S. persons. It also creates an exemption if a buyer is designated a ‘trusted United States person’ that keeps ownership and control in the U.S.
Who It Affects
Exporters and reexporters of high‑performance AI chips and products containing them (especially data‑center targeted devices), U.S. cloud and AI service customers, chip manufacturers, and Commerce’s Bureau of Industry and Security (BIS), which must write regulations and enforce the new duties.
Why It Matters
The bill shifts part of export policy from pure national‑security gating to a commercial allocation mechanism aimed at preserving domestic access to scarce AI compute. It introduces granular technical triggers and fast procedural windows that will change how manufacturers, distributors, and large buyers coordinate inventory and contracts.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The Act inserts a new section into the Export Control Reform Act that starts by imposing a licensing requirement for exports, reexports, or in‑country transfers of certain advanced integrated circuits or products containing them when the transaction involves an entity based in, headquartered in, or ultimately owned by a company headquartered in a defined ‘country of concern.’ The carve of products is focused on devices designed or marketed for data centers and tied to specific technical markers of processing performance, performance density, and memory/interconnect bandwidth.
For any license application falling under that rule, the exporter must file a certification that it offered a right of first refusal to United States persons. The bill defines what that right entails: a public notice period (at least fifteen days) during which U.S. persons can inquire, a requirement that a U.S. person who requests to buy may receive preference if they both request the available quantity on the offered terms and take material steps to complete the purchase within fifteen business days.
BIS must deny applications that omit the certification. The statute includes a rule of construction that the government cannot itself pick between competing U.S. buyers.The bill also builds in an operational rhythm: BIS has 120 days after enactment to hold public consultation and issue implementing regulations that specify what public notice looks like, how buyers exercise the right of first refusal, recordkeeping standards, penalties for concealment or misrepresentation, and tests for when an exporter may proceed despite a U.S. buyer’s failure to complete a purchase.
The statute lists factors BIS must consider, including existing backlogs, production line capacity impacts, and whether foreign customers are receiving preferential pricing or terms.Finally, the text creates an exemption for transactions destined for non‑countries‑of‑concern when the recipient is a designated ‘trusted United States person.’ BIS must define standards for that designation within 120 days, including physical and cybersecurity controls, an annual audit/attestation, a cap that no more than 10 percent of ultimate beneficial ownership can be held by entities primarily residing in a country of concern, and a restriction that the buyer may not transfer or install a majority of its aggregate processing performance outside the United States. The statute defines covered products, links to Commerce Control List entries, and gives BIS authority to update technical thresholds after 24 months following notice-and-comment rulemaking.
The Five Things You Need to Know
The bill requires a license from the Commerce Department for exports, reexports, or in‑country transfers of covered advanced integrated circuits to entities tied to specified ‘countries of concern.’, Exporters must provide a public right of first refusal with at least a 15‑day inquiry period and give a U.S. person 15 business days to take material steps to complete a purchase; applications without the requisite certification must be denied.
Commerce must publish implementing regulations within 120 days covering public notice form, buyer procedures, recordkeeping, and penalties for concealment or misrepresentation.
A ‘trusted United States person’ exemption is available only after Commerce issues standards (within 120 days), which include annual audits, cybersecurity and physical safeguards, a requirement that majority processing remain in the U.S.
and a cap of no more than 10% ultimate beneficial ownership by entities primarily domiciled in a country of concern.
Covered products target data‑center‑designed integrated circuits and are tied to specific technical thresholds (e.g.
total processing performance of 4,800+, alternate lower thresholds with performance density metrics, and DRAM/interconnect bandwidth figures); Commerce may add new technical parameters after 24 months via notice-and-comment.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
License requirement for exports to 'countries of concern'
This subsection creates a new statutory trigger: any export, reexport, or in‑country transfer of a ‘covered advanced circuit or product’ to an entity located in, headquartered in, or ultimately parented by a firm in a listed country of concern requires a BIS license. That obligation moves the transaction into the Export Administration Regime and makes BIS the gatekeeper for flows the statute identifies as sensitive. For compliance teams, this means screening counterparties against the statutory country list and flagging transactions that touch the enumerated technical thresholds.
Certification and denial mandate tied to right of first refusal
Applicants for the license must include a certification that they provided a right of first refusal to U.S. persons; BIS must deny any application that lacks the certification. The practical effect is binary: exporters cannot rely on post‑licensing remediation to show they complied. Counsel will need to incorporate the certification into licensing workflows and ensure that public‑notice and buyer‑contact processes precede any submission.
Regulatory implementation: public notice, timing, and standards
BIS has 120 days to consult and issue regulations defining how public notice must be given, how U.S. persons exercise the right of first refusal, and the timelines for action. The statute prescribes specific items regulators must cover—notice form, when a U.S. buyer must inform BIS, and what constitutes good‑faith buying activity—while also directing BIS to set recordkeeping and penalty rules. Those forthcoming regs will determine whether the statutory 15‑day windows are operationally feasible and how strictly ‘material steps’ and ‘good faith’ are interpreted.
Trusted United States person exemption and its conditions
The law creates an exemption from certain Commerce license controls for covered products that go to non‑country‑of‑concern destinations and remain owned and controlled by a designated trusted U.S. person. BIS must define the designation process and standards—physical and cyber security, an annual attestation, a limitation that not more than 10% of ultimate beneficial ownership may be held by entities primarily domiciled in a country of concern, and a requirement that the majority of aggregate processing performance not be transferred or installed outside the U.S. This section effectively establishes a certification program that domestic buyers must meet to avoid license friction.
Definitions and technical thresholds for covered products
The statute ties the scope of covered items to Commerce Control List entries (3A090/4A090 equivalents), functional equivalents, and numeric performance thresholds—examples include a total processing performance of 4,800 or more, alternate lower thresholds tied to performance density, and specific DRAM/interconnect bandwidth cutoffs. It also excludes circuits not designed or marketed for data centers. BIS gets explicit authority to add technical parameters after 24 months via Federal Register notice-and-comment, meaning the list is intended to evolve with technology but with a statutory lag.
Allocation limits, rule of construction, and backlog tests
The statute bars Commerce from choosing among competing U.S. buyers—it cannot allocate scarce supply. Instead, it sets up objective considerations (backlog, production capacity, pricing differentials) for determining whether an export would harm U.S. access. The bill also defines what constitutes a backlog (documented orders not fulfilled within standard lead times) and what counts as material information—aiming to anchor disputes in commercial documentation rather than subjective judgments.
This bill is one of many.
Codify tracks hundreds of bills on Technology across all five countries.
Explore Technology in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- U.S. AI service providers and data‑center operators: They gain a statutory mechanism to secure priority access to scarce, high‑end compute chips that are critical inputs for model training and inference, reducing the risk that foreign buyers tied to countries of concern will exhaust limited supply.
- Domestic chip purchasers (enterprises and government labs): The right‑of‑first‑refusal plus defined public notice increases transparency about upcoming lots of high‑end devices and gives them a short, statutory window to compete for supply.
- Policymakers and national security officials: The Act provides an enforceable tool to align commercial allocation with national security priorities by embedding buyer‑preference requirements into export licensing.
Who Bears the Cost
- Exporters and manufacturers of advanced integrated circuits: They must add public‑notice processes, retain records, certify compliance on license applications, and potentially reroute sales or reprice offers—raising operational and legal costs.
- Bureau of Industry and Security (Commerce): BIS must draft regulations within tight 120‑day windows, adjudicate disputes over ‘material steps’ and backlogs, monitor compliance, and enforce penalties without additional appropriations specified in the statute.
- Multinational firms and foreign customers in countries of concern: These customers face increased friction and potential denial of supply; multinational firms with cross‑border ownership structures must monitor ultimate beneficial owners to determine whether trustworthy exemptions apply.
- Companies seeking foreign investment or partnerships: The 10% foreign‑ownership ceiling for trusted U.S. person status and the restriction on moving majority processing outside the U.S. make certain investment structures and offshore deployments less viable.
Key Issues
The Core Tension
The central dilemma is balancing domestic access to scarce, strategic AI compute against preserving predictable commercial export and investment relationships: the bill favors securing U.S. customer supply through regulatory allocation and high compliance standards, but those same tools can disrupt market contracts, deter valuable foreign capital and partnerships, and shift enforcement burdens onto BIS and private exporters.
Operationalizing a statutory right of first refusal raises several implementation challenges that the bill punts to BIS. The statute sets out bright‑line timing (a 15‑day public notice and a 15‑business‑day window for buyers to take material steps) but leaves the detailed mechanics—how notice is published, what counts as adequate proof of ‘material steps,’ and how to treat partial fills—to regulation.
Those delegation decisions will determine whether the right is practical or merely symbolic. Similarly, the statute ties denial of licenses to the absence of a certification, making pre‑licensing compliance processes critical and increasing the chance of denied filings over technicalities.
The trusted United States person pathway is intended to enable exceptions for domestic buyers, yet its conditions (annual audits, a cap of 10% for ownership by entities primarily domiciled in a country of concern, and a prohibition on transferring a majority of processing overseas) create a high bar that could exclude many commercial buyers and foreign‑backed U.S. firms. The 24‑month lag before Commerce can update technical parameters creates another tension: thresholds set today may be outdated quickly, but frequent adjustments also risk legal uncertainty and regulatory churn.
Finally, the scheme creates potential trade and diplomatic friction: prioritized allocation to U.S. buyers and extra export friction for customers in listed countries of concern could prompt reciprocal measures or complicate alliances where partner economies have integrated supply chains.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.