H.R. 2683: Remote Access Security Act

This bill, titled the Remote Access Security Act, proposes amendments to the Export Control Reform Act of 2018 to include specific regulations on "remote access" to items that are under U.S. jurisdiction. Here’s a breakdown of what the bill encompasses:

Definition of Remote Access

The bill defines "remote access" as:

• Access to items subject to U.S. control by foreign individuals through a network connection, such as the internet or cloud computing, from a location that is different from the physical location of the item.
• Any other form of access specified in rules made by the Secretary of Commerce.

Amendments to Export Control Regulations

The bill makes several amendments concerning how remote access is treated under existing export control laws:

• It includes remote access alongside exporting items as a category that requires regulation.
• It modifies existing paragraphs to ensure that references to "in-country transfer" also encompass "remote access of items".
• Regulations concerning the release and regulation of items will now explicitly mention remote access.

New Regulatory Authority

The legislation grants the Secretary additional authority to:

• Regulate remote access to items that fall under U.S. jurisdiction by foreign persons.
• Issue guidelines related to the control of remote access.

Clarifications in Existing Regulations

Several sections of the Export Control Reform Act will be revised to include or clarify remote access as a relevant factor:

• Sections that previously mentioned only in-country transfers will now also address remote access.
• Definitions and regulatory frameworks will be updated to reflect changes in technology and access mechanisms, thus ensuring comprehensive oversight of access to U.S. controlled items.

Impact on Existing Control Framework

The changes aim to close gaps in existing regulations that could allow sensitive materials or technologies to be accessed remotely without proper oversight. The bill emphasizes the need for regulation not just for physical exports but also for any virtual or remote access to those items.

Implementation Schedule

The bill does not specify an implementation schedule, but it is expected that it would require regulatory updates and guidelines to be created post-passage to enforce the new provisions effectively.

Relevant Companies

• CSCO (Cisco Systems, Inc.): May be affected if their products or services are subject to the remote access controls outlined in the bill.
• MSFT (Microsoft Corporation): Impacted by remote access regulations for their cloud services, which may involve regulated technology.
• GOOGL (Alphabet Inc.): May be impacted if their cloud and virtual services are subject to the new regulatory framework.