On March 29, 2021, the U.S. Department of Commerce (Commerce or the Department) issued an advance notice of proposed rulemaking (ANPRM) regarding new licensing procedures for Commerce’s January 2021 interim final rule for reviewing and potentially prohibiting information and communications technology or services (ICTS) transactions involving “foreign adversaries.” Comments on the ANPRM are due Wednesday, April 28, 2021.
The January 2021 rule – issued pursuant to Executive Order (EO) 13873 “Securing the Information and Communications Technology and Services Supply Chain” – established the processes and procedures Commerce will use to identify, assess, and address certain transactions involving ICTS (ICTS Transaction) designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of a “foreign adversary” (which the rule identified as China, Russia, Iran, North Korea, Cuba, and Venezuela’s Maduro regime) that pose an undue or unacceptable risk to U.S. national security. However, the January 2021 rule did not include procedures for a licensing process. Instead, the rule noted that Commerce would issue another rule describing the licensing process within 60 days (or March 22, 2021) and that it would fully implement that licensing regime by May 19, 2021.
While the January 2021 rule became effective on March 22 as scheduled, the ANPRM clarifies that Commerce no longer “expect[s] to have a licensing or other pre-clearance process in place by May 19, 2021” because “it has become apparent additional public input is needed.” The ANPRM does not provide any additional guidance on how the Department intends to implement and enforce the January 2021 rule, nor does it reopen or extend the deadline for submitting comments on the rule. Instead, the ANPRM seeks comment on the licensing or other pre-clearance process that Commerce will ultimately adopt and implement, particularly with respect to the following issues:
In furtherance of EO 13873, earlier this month Commerce announced that it served subpoenas on multiple Chinese companies that provide ICTS in the United States. The Department has not disclosed the names of the companies and has not specified whether any transactions with those companies may become prohibited or subject to licensing requirements. Nor has the agency issued guidance to U.S. industry for conducting internal assessments of national security risks arising from potentially prohibited ICTS Transactions. Nevertheless, because the agency has now confirmed that it intends to utilize the authority granted to it by EO 13873 to prohibit certain ICTS Transactions with “foreign adversaries,” companies should consider reviewing internal records of transactions with companies or persons from “foreign adversary” countries to assess their potential risk exposure.