Codify — Article

HB6875 (AI OVERWATCH Act) restricts exports of high‑performance chips to 'countries of concern'

Tightens Commerce export controls for selected integrated circuits, creates a trusted‑U.S. party carve‑out, and gives Congress a 30‑day review window — a potential structural change to U.S. semiconductor export policy.

The Brief

HB6875 amends the Export Control Reform Act to require Commerce (BIS) to impose a licensing requirement for the export, re‑export, or in‑country transfer of specified high‑performance integrated circuits to entities connected to a defined list of “countries of concern” (including China, Russia, Iran, North Korea, Cuba, and Venezuela). The bill defines “covered integrated circuits” by Commerce Control List entries (e.g., ECCN 3A090/4A090 and related entries) and by explicit technical performance thresholds, and it empowers the Under Secretary to update those technical thresholds after an interagency review.

The measure builds a detailed congressional review and certification procedure into any license approval (including multiple security and supply assurances and a DNI technical assessment), denies general licenses, terminates preexisting licenses to covered consignees in countries of concern, and creates a narrowly framed exemption for “trusted United States persons” subject to regulatory standards (security controls, ownership limits, audit requirements). It also requires an interagency national security strategy assessing the AI and production implications of U.S. and allied exports.

At a Glance

What It Does

Requires a BIS license for exports, reexports, and in‑country transfers of specified integrated circuits to entities tied to enumerated countries of concern, prohibits general licenses, and demands interagency certifications and congressional notification before approval. The bill also terminates prior licenses to covered consignees and creates a regulatory process for designating ‘trusted United States persons’ that may receive an exemption.

Who It Affects

Chip designers, sellers, foundries, and system integrators that export advanced accelerators or chips (ECCN 3A090/4A090 and similar products), cloud/data‑center operators as ultimate users, semiconductor equipment suppliers, multinational firms with parent companies in designated countries, and BIS/other interagency partners responsible for licensing and enforcement.

Why It Matters

This is a substantive tightening of export controls tying technical thresholds for chips to statutory licensing, giving Congress a de facto review veto via a 30‑day certification and potential joint resolution. It reconfigures how industry documents end‑use assurances, raises compliance costs, and creates a formal pathway for trusted‑party exemptions intended to preserve some commercial flows while prioritizing U.S. AI leadership and national security.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

The bill creates a new statutory section in the Export Control Reform Act that targets a narrow set of semiconductor products and the actors that could deliver them to adversary states. It defines covered integrated circuits by pointing to existing Commerce Control List entries (notably ECCN 3A090 and 4A090 and related codes) and by numeric performance cutoffs — for example, multi‑unit chips with specified total processing performance, performance‑density combinations, or bandwidth figures.

Products containing those chips are included unless they are not designed or marketed for data‑center use.

Operationally, the Under Secretary of Commerce (BIS) must treat exports, reexports, and in‑country transfers of those covered circuits to entities connected to a listed country of concern as licenseable transactions. BIS may not substitute a general license — each transaction requires a specific license.

Before approving any such license, BIS and the interagency Operating Committee must provide the appropriate congressional committees with the full license file and a set of certifications and supporting analyses, including assurances about enforceable mechanisms preventing diversion to military/intelligence uses, effects on domestic supply and U.S. processing capacity advantage, and a technical assessment of AI leadership impacts (with DNI input where relevant).The bill also creates a procedural structure for a narrow exemption: a ‘trusted United States person’ can receive covered integrated circuits destined for non‑country‑of‑concern markets and keep ownership and control after operation, provided that regulators adopt standards within 90 days. Those regulations must set physical and cyber security measures, limits on offshore installation of aggregate processing performance, ownership ceilings for parties from countries of concern, sourcing preferences, and annual audit/attestation rules.

Prior licenses to consignees in the countries of concern are explicitly terminated, and BIS must deny all new licenses to those consignees until a short waiting period following submission of an interagency national security strategy that the bill requires. Finally, the Under Secretary may update the technical thresholds after a defined interagency process and Operating Committee sign‑off, recognizing that chip capabilities evolve quickly.

The Five Things You Need to Know

1

The bill defines covered integrated circuits both by ECCN references (3A090, 4A090, related entries and certain 5A002.z items) and by numeric performance thresholds (e.g.

2

total processing performance ≥4,800; combinations such as total ≥2,400 with performance density ≥1.6; DRAM bandwidth ≥1,400 GB/s; interconnect ≥1,100 GB/s; or combined bandwidth ≥1,700 GB/s).

3

Before approving any license for shipment to an entity tied to a country of concern, BIS must provide the relevant congressional committees the license application and certifications at least 30 days in advance; Congress can block the approval by passing a joint resolution within that window.

4

The bill forbids issuance of any general license for covered integrated circuits, and it expressly terminates preexisting licenses that would authorize exports to entities connected to listed countries of concern.

5

BIS must issue regulations within 90 days to create the ‘trusted United States person’ designation; the regulatory criteria include security controls, a requirement that a U.S. trusted party not transfer a majority of its aggregate covered processing performance offshore, an ownership cap (no more than 10% ultimate beneficial ownership by parties principally resident in a country of concern), and annual audits.

6

Eighteen months after the mandated national security strategy is submitted to Congress, the Under Secretary may add or adjust the technical parameters that define covered integrated circuits, but only after the Operating Committee for Export Policy approves the change by majority vote.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 1758A(a)

Definitions and scope for ‘covered integrated circuits’ and actors

This subsection sets the vocabulary the rest of the section uses: it lists the ‘countries of concern’ (PRC including Hong Kong/Macau, Cuba, Iran, North Korea, Russia, and Venezuela under Maduro), ties the product definition to specific ECCNs and to concrete performance metrics, and excludes devices not designed/marketed for data‑center use. For compliance teams the key mechanic is that the statute cross‑references the Commerce Control List and numeric thresholds, so product classification will require both ECCN analysis and performance measurement against the statutory cutoffs.

Section 1758A(b)

License requirement and prohibition on general licenses

This provision obliges the Under Secretary to require an export license for any covered integrated circuit moved to entities tied to a country of concern, covering exports, reexports, and in‑country transfers. Practically, it removes the option to rely on general authorizations for these items and pushes exporters toward case‑by‑case BIS adjudication. Because the statute covers in‑country transfers, it captures more than cross‑border shipments and reaches internal transfers in foreign jurisdictions tied to covered consignees.

Section 1758A(c)

Congressional certifications, technical assessments, and 30‑day review

Before issuing a license, BIS and interagency partners must send the committees a copy of the application plus multiple certifications: enforceable mechanisms preventing military/intel use, assurances about U.S. supply sufficiency, and that U.S. advantage in installed processing capacity won’t be harmed. The submission must include supporting analyses and a technical assessment of AI leadership impacts; the DNI may provide an alternative assessment. Licenses cannot be issued until 30 days after transmittal, and Congress can block a transaction via a joint resolution subject to expedited procedures.

3 more sections
Section 1758A(d)

Trusted United States person exemption and regulatory criteria

This subsection creates a carve‑out for covered integrated circuits destined for non‑country‑of‑concern locations and remaining under the ownership/control of a certified trusted U.S. person. BIS must solicit public comment and promulgate regulations within 90 days setting criteria — including physical and cybersecurity standards, restrictions on moving aggregate processing capabilities offshore, limits on ownership by country‑of‑concern actors, preference for U.S. sourcing, and annual attestations. The rules set both the compliance bar and the enforcement triggers for losing the exemption.

Section 1758A(e)–(f)

Termination of prior licenses and temporary licensing freeze

The statute voids existing licenses that would have allowed shipments of covered chips to consignees in countries of concern. It also requires BIS to deny all new licenses to such consignees until 14 days after the mandated national security strategy is submitted to Congress. For companies with outstanding contractual obligations, this creates immediate legal and commercial risk and a short but non‑trivial waiting period tied to interagency work.

Section 1758A(g)

Required national security strategy and DNI analysis

This clause compels an interagency strategy involving Commerce, State, Defense, Energy, USTR, Treasury, OSTP, and consultation with the DNI. The document must assess national security implications of access to covered circuits and related equipment, compare production numbers and capabilities (including a DNI assessment for China), and analyze the hypothetical AI capabilities if countries of concern relied solely on indigenous production. The strategy both informs the licensing regime and triggers the 14‑day pause on approvals.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Technology across all five countries.

Explore Technology in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • U.S. national security agencies — Gain statutory influence over high‑end chip flows and a formal mechanism to assess and block transfers that could enhance adversary AI, cyber, or military capabilities.
  • Domestic chip manufacturers and certain cloud providers — May receive protection from enabling foreign adversary AI deployments and a clearer pathway to compete if limits reduce adversary procurement; trusted U.S. parties that qualify could maintain supply lines with regulatory certainty.
  • Congress — Receives a structured 30‑day review and the practical ability to block specific exports via expedited joint resolution, increasing legislative oversight over strategic semiconductor flows.

Who Bears the Cost

  • Exporters, foundries, and chip suppliers — Face new per‑transaction licensing, loss of general licenses, administrative costs of providing detailed certifications and supporting analyses, and commercial disruption from retroactive termination of prior licenses.
  • Multinational companies with ties to countries of concern — Will need to restructure ownership or operations to meet the trusted‑person ownership caps or face de facto market exclusion, raising legal, tax, and operational costs.
  • Bureau of Industry and Security and interagency partners — Must implement rapid rulemaking, adjudicate complex technical classifications, conduct supply‑chain assessments, and defend decisions amid potential political pressure; resource and staffing needs may rise sharply.

Key Issues

The Core Tension

The central dilemma is balancing two legitimate goals that pull in opposite directions: preventing adversaries from acquiring weaponizable AI capacity via state‑of‑the‑art chips, versus maintaining resilient, efficient semiconductor supply chains and U.S. industry competitiveness. Tight export controls reduce the risk of tech transfer to hostile actors but raise costs, disrupt commerce, and can incentivize workarounds that erode the controls’ effectiveness.

The bill bundles technical thresholds, interagency certification, congressional oversight, and a regulatory exemption into one package. That creates implementation frictions.

First, the numeric performance cutoffs lock policy to currently measured metrics — which vendors and adversaries can chase or evade — and BIS will need technical capacity to measure and verify those metrics in submissions. Second, the certification requirements ask for enforceable end‑use mechanisms and supply‑sufficiency assurances that are hard to verify remotely; policing in‑country behavior remains a well‑known enforcement headache.

Third, the termination of prior licenses and immediate freezes produce abrupt legal risks for commercial contracts and could prompt litigation or requests for waivers.

The trusted‑person exemption is narrowly drawn but administratively complex. The ownership and offshore‑deployment limits may encourage corporate reorganizations (e.g., U.S. holding structures or segmentation of processing fleets) intended to satisfy the letter of the rule while preserving economic ties to foreign partners.

That creates a cat‑and‑mouse dynamic between regulated entities and regulators. Finally, the congressional 30‑day window and joint‑resolution option add democratic accountability but risk politicizing specific technical licensing determinations and slowing responses when national security circumstances require rapid action.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.