20
January
2025
Trump rescinds Biden-era EOs, likely setting back the BIS’s proposed EDD rule for large cloud service providers
Immediately after assuming office, President Donald Trump signed an Executive Order that expressly repealed the former President Joe Biden’s October 2023 order on the safe and responsible development of AI (‘artificial intelligence‘). The repealed order had established several directives for the Department of Commerce’s Bureau of Industry and Security (BIS) on which parts of its January 2024 Proposed Rule was based that seeks to impose KYC (‘know-your-customer‘) and enhanced due diligence requirements on large cloud service providers and were based.
The BIS’s Proposed Rule would implement additional measures to address the ‘ongoing national emergency’ related to significant malicious cyber-enabled activities. It would expand on existing U.S. export control frameworks in an effort to deter malicious actors from exploiting U.S. technologies and services by imposing new restrictions and due diligence requirements, particularly for cloud infrastructure providers and other potentially vulnerable platforms. Organizations involved in providing or hosting software, data processing, or cloud services would be subject to heightened compliance obligations under the proposed regulations, having a potentially profound impact on the digital assets industry. The BIS has not indicated whether its publication of a final rule could still be expected or whether it would accord with a lesser scope than the Proposed Rule.
Last updated 05/21/2025.
United States (Regulatory)
History:
- Jan 20, 2025: President Donald Trump signs an Executive Order titled “Initial Rescissions of Harmful Executive Orders and Actions” that revokes—among other of former President Joe Biden’s Executive Orders—the order on responsible AI development, potentially affecting the BIS’s ultimate approach under a final rule (though the BIS has not indicated whether a final rule could still be anticipated). E.O. No. 14148 (90 Fed. Reg. 8237).
- Jan 29, 2024: BIS publishes a Notice of Proposed Rulemaking (NPRM) that incorporates considerations from public input on the 2021 ANPRM and the mandates included in the October 2023 Executive Order, outlining expanded export controls and compliance duties aimed at curbing significant malicious cyber-enabled activities. 89 Fed. Reg. 5698.
- Oct 30, 2023: President Joe Biden signs an Executive Order on the safe and responsible development of AI technologies. E.O. 14110 (86 Fed. Reg. 6837).
- Sep 24, 2021: BIS publishes an Advance Notice of Proposed Rulemaking (ANPRM) on the basis of the January Executive Order, seeking public input on how to shape forthcoming regulations. 86 Fed. Reg. 53018.
- Jan 19, 2021: President Donald Trump signs an Executive Order expanding on concerns addressed under former President Barack Obama’s 2015 Executive Order. E.O. 13984 (86 Fed. Reg. 6837).
- Apr 01, 2015: President Barack Obama signs an Executive Order declaring a national emergency in connection with significant malicious cyber-enabled activities and allowing for the blocking of property of persons involved under U.S. sanctions and export controls. E.O. 13694 (80 Fed. Reg. 18077).