What's Happening?
The Government Accountability Office (GAO) has determined that the Department of Commerce's decision not to enforce the AI Diffusion Rule constitutes a 'rule' under the Congressional Review Act (CRA). This decision highlights the distinction between permissible
enforcement discretion and policies that effectively suspend regulations. The AI Diffusion Rule, issued in January 2025, amended export controls for advanced computing and AI technologies. Despite a press release in May 2025 announcing plans to rescind the rule, the GAO found that the non-enforcement directive is a substantive rule requiring CRA review. This ruling leaves companies in a position to make risk-based compliance decisions as the rule remains legally in effect.
Why It's Important?
The GAO's decision underscores the complexities of regulatory enforcement and the role of the CRA in overseeing agency actions. By classifying the non-enforcement directive as a rule, the GAO emphasizes the need for formal rulemaking processes and accountability in regulatory changes. This ruling has significant implications for companies involved in exporting advanced computing and AI technologies, as they must navigate the legal landscape amid ongoing non-enforcement. The decision also highlights the potential for increased scrutiny and oversight of agency actions, which could impact future regulatory practices and the stability of compliance frameworks.
What's Next?
The Bureau of Industry and Security (BIS) may proceed with formal rulemaking to rescind or replace the AI Diffusion Rule, which could alter the current regulatory framework. Companies must continue to evaluate their transactions against the existing rule to manage compliance risks. The GAO's decision may prompt further legal and regulatory reviews, potentially influencing how agencies approach non-enforcement directives in the future. Stakeholders in the tech and export industries will need to monitor developments closely, as any changes to the rule could have significant operational and legal implications.
