Technical corrections only. The v3 version updates the legislative status from 'Engrossed in House' to 'Referred in Senate' and includes the Senate referral details and the Clerk's name. No substantive policy changes were made to the bill's text.
Remote Access Security Act
- Sponsor
- Rep. Lawler, Michael [R-NY-17]
- Committees
- Banking, Housing, and Urban Affairs Committee (primary)
- Last action
- Jan 13, 2026
Bottom line
This bill expands the U.S. government's authority to regulate remote access by foreign persons to sensitive U.S. items, aiming to bolster national security by closing a perceived loophole in existing export control laws.
What it actually does
This bill amends the Export Control Reform Act of 2018 to explicitly include "remote access" of items under U.S. jurisdiction within the scope of export controls. It defines "remote access" as purposeful, knowing, reckless, or negligent access by a foreign person to a U.S.-jurisdiction item via a network connection from a remote location, if such use poses a serious national security or foreign policy risk. The bill integrates this concept into various sections of the existing act concerning control authority, enforcement, and reporting, and mandates congressional consultation on related regulations.
Proponents argue
Proponents would argue that the bill closes a critical loophole in existing export control laws, adapting them to the realities of modern digital access and cloud computing. They would assert that controlling remote access is essential to prevent foreign adversaries from obtaining sensitive U.S. technology and intellectual property, thereby safeguarding national security and foreign policy interests in an increasingly interconnected world.
Opponents contend
Opponents might express concerns that expanding export controls to include remote access could create significant compliance burdens for U.S. businesses, particularly those operating globally or utilizing cloud services. They might argue it could stifle innovation, increase operational costs, and potentially lead to unintended restrictions on legitimate international collaboration or data sharing, impacting economic competitiveness and the free flow of information.
The bill is concise and relatively easy to read, allowing for a quick understanding of its core purpose and amendments.
Section 2(1), amending Section 1742 of the Export Control Reform Act of 2018 (50 U.S.C. 4801)
Establishes 'Remote Access' Definition
This provision defines "remote access" as purposeful, knowing, reckless, or negligent access by a foreign person to an item subject to U.S. jurisdiction through a network connection (like the internet or a cloud computing service) from a location other than where the item is physically located. This definition applies if the Secretary of Commerce determines that the use of the item could pose a serious risk to the national security or foreign policy of the United States. It explicitly clarifies that this definition does not lower the requisite criminal intent (mens rea) required for criminal liability under existing law.
Supporters argue
Supporters argue this definition is crucial for modernizing export controls, ensuring that digital access methods are adequately covered, and preventing circumvention of traditional export rules. It addresses the evolving threat landscape where physical export is not the only means of technology transfer, thereby safeguarding national security.
Critics contend
Critics might contend that the definition's breadth, particularly the inclusion of 'reckless, or negligent basis,' could lead to an overly broad application, potentially penalizing U.S. companies for unintentional access or creating an impossible standard for monitoring. They may also argue that 'serious risk' is subjective and could be inconsistently applied, leading to uncertainty.
Tradeoffs
This provision balances the imperative to protect national security in the digital age against potential burdens on legitimate international business operations and the need for clear, consistently enforceable standards for digital access.
Section 2(2) through 2(10), amending various sections of 50 U.S.C. 4811-4825
Integrates Remote Access into Export Control Framework
This series of amendments systematically inserts phrases like "or remote access of such items" and "remotely access" into numerous sections of the Export Control Reform Act of 2018. This effectively extends the existing regulatory, licensing, enforcement, and reporting requirements that currently apply to physical exports and in-country transfers to now also cover remote access by foreign persons. This ensures that the full suite of export control tools can be applied to digital access.
Section 3
Mandates Congressional Consultation on Remote Access Regulations
This section requires the Secretary of Commerce to keep the Committee on Foreign Affairs of the House and the Committee on Banking, Housing, and Urban Affairs of the Senate fully and currently informed about any anticipated regulations concerning remote access of items. This includes providing information, in a classified setting if necessary, on the national security risks addressed, how the regulations mitigate those risks, and their potential impact on the U.S. economy. It clarifies that this consultation does not require committee approval for the executive branch to exercise its authority.
This clause clarifies that the new definition of 'remote access' does not lower the requisite mens rea (criminal intent) required to be proven for criminal liability under section 1760 of the Export Control Reform Act.
Section 2(1), amending Section 1742 (50 U.S.C. 4801), specifically the last sentence of the new paragraph (15).
Why it matters:This is likely standard legislative practice to provide a precise legal clarification regarding criminal standards, preventing misinterpretation or unintended consequences for criminal prosecutions. It is a technical safeguard rather than an attempt to conceal a controversial provision.
Case for: Supporters would argue this ensures that individuals are not inadvertently subjected to criminal penalties for remote access without the necessary level of intent, maintaining a high bar for criminal prosecution and protecting against overreach. It upholds due process by requiring proof of specific intent.
Case against: Critics might argue that by explicitly preserving a high mens rea standard, it could make criminal enforcement more challenging in complex digital environments where proving intent can be difficult. This could potentially allow some actors to evade accountability, even in cases of significant national security risk, if intent is hard to establish.
Estimated impact: This clause clarifies the legal standard for criminal enforcement, potentially limiting the scope of criminal prosecutions to cases with clear intent, thereby affecting legal defense and prosecution strategies.