United States AI diffusion rule, non-enforcement and destination-specific controls (2025-present)

The United States AI diffusion rule, non-enforcement and destination-specific controls (2025-present) form a direct export-control campaign in which codified law, enforcement policy and successor implementation diverge. The January 2025 rule extended control beyond advanced-computing hardware into country allocations, data-centre authorisations and specified closed AI model weights. Commerce later announced categorical non-enforcement and planned rescission without completing formal removal. Subsequent policy added counter-diversion guidance, export promotion and destination-specific access.

January 2025 framework

The Bureau of Industry and Security issued the Framework for Artificial Intelligence Diffusion as an interim final rule. It took effect on 13 January 2025, appeared in the Federal Register on 15 January and assigned later compliance dates, including 15 May for many requirements. Effective, publication and compliance dates should not be merged.

The framework created destination groups, aggregate country allocations and data-centre or end-user authorisations. It also added ECCN 4E091 for specified AI model weights. The operative Commerce Control List, including its notes and computing conditions, controls the legal definition. General descriptions of frontier or closed models cannot replace that text.

Hardware controls, model-weight controls, country allocations, validated-end-user conditions and data-centre authorisations perform different functions. An allocation is not a transaction-specific licence. An authorisation gives defined parties access under conditions, not unrestricted country access. The framework used control over United States computing items and model technology to pursue declared denial, diversion-control and partner-alignment objectives.

Non-enforcement without formal rescission

On 13 May 2025 Commerce announced that it would not enforce the framework and intended to rescind it. The release's headline used the language of rescission, but the announcement did not complete the formal legal steps needed to delete the rule. It also accompanied separate guidance on advanced-computing diversion and General Prohibition 10 as applied to specified Chinese chips. Guidance, enforcement discretion and replacement rulemaking are distinct actions.

In May 2026 the United States Government Accountability Office concluded that the non-enforcement announcement was itself a rule subject to the Congressional Review Act. GAO also recorded that formal rescission had not occurred. That is a legal accountability opinion, not a court judgment, judicial invalidation or automatic order to resume enforcement.

As at 29 July 2026, relevant provisions remained in Parts 740, 742 and 748 of the Export Administration Regulations, with ECCN 4E091 retained in the Commerce Control List. The current position must therefore state both facts: codified text remains, and Commerce announced categorical non-enforcement. Describing the framework as simply rescinded or simply enforced would be inaccurate.

Successor policy and the United Arab Emirates

Executive Order 14320 of 23 July 2025 directed promotion of full-stack United States AI technology packages. Export promotion, financing and diplomacy do not themselves authorise a controlled transaction. EAR licence authority and transaction conditions remain separate.

On 10 July 2026 Commerce announced eased controls for the United Arab Emirates. Current EAR text gives the UAE Country Group A:5 treatment and provides defined supplement no. 8 authorisations for eligible parties, items and conditions. These destination-specific changes did not formally replace the global January framework. Country treatment, party eligibility, reporting, security conditions and expiry must be checked separately.

The current Part 740 authorisation identified for G42 and Core42 expires automatically on 6 April 2027 unless the specified notice or further action changes that result. It is a time-limited, party-specific route, not general UAE access. This date and every eligible-party condition require rechecking immediately before publication.

Assessment

The state nexus and attribution are established: the United States government created, declined to enforce and later modified an export-control architecture under declared security and technology-policy objectives. Exporters, chip firms, cloud providers, data-centre operators, model developers and approved foreign entities transmit the controls. This case is the canonical record for the January 2025 framework's legal status and later destination-specific changes. Generic entries on model weights, compute clusters and export-control instruments should defer to it rather than describe the May 2025 announcement as completed rescission.

Effectiveness remains unresolved. A rule, threshold or bilateral arrangement does not prove reduced diversion, delayed capability, allied alignment or improved United States market position. Evaluation should measure licensing outcomes, hardware and model access, diversion indicators, compliance cost, partner substitution and capability effects against a stated counterfactual. Public evidence also does not yet establish material humanitarian effects; access and distributional consequences require separate assessment.

See also

AI-chip and compute export control · United States advanced-computing and semiconductor controls on China (2022-present) · Bureau of Industry and Security (US Commerce) · Export Control Reform Act (2018) · Semiconductor chokepoint · Technology denial

Sources

1. United States Department of Commerce, Bureau of Industry and Security, Framework for Artificial Intelligence Diffusion, interim final rule, 90 Fed. Reg. 4544, 15 January 2025.
2. United States Department of Commerce, Bureau of Industry and Security, "Department of Commerce Announces Rescission of Biden-Era Artificial Intelligence Diffusion Rule", 13 May 2025.
3. United States Government Accountability Office, Applicability of the Congressional Review Act to the Rescission of the Artificial Intelligence Diffusion Rule, B-337935, 12 May 2026.
4. United States Department of Commerce, Bureau of Industry and Security, Export Administration Regulations, Part 740, current at 29 July 2026.
5. United States Department of Commerce, Bureau of Industry and Security, Export Administration Regulations, Part 742, current at 29 July 2026.
6. United States Department of Commerce, Bureau of Industry and Security, Export Administration Regulations, Part 748, current at 29 July 2026.
7. United States Department of Commerce, Bureau of Industry and Security, "Department of Commerce Eases Export Controls on UAE", 10 July 2026.
8. Executive Order 14320, "Promoting the Export of the American AI Technology Stack", 23 July 2025.
9. United States Department of Commerce, Bureau of Industry and Security, Industry Guidance to Prevent Diversion of Advanced Computing Integrated Circuits, 13 May 2025.
10. United States Department of Commerce, Bureau of Industry and Security, Guidance on Application of General Prohibition 10 to PRC Advanced-Computing Integrated Circuits, 13 May 2025.
11. Export Control Reform Act of 2018, 50 U.S.C. sections 4801-4826.