Congress Moves to Close the CXMT Gap — Broader Chip Export Controls and Remote Data Center Access in Scope

Congressional pressure to tighten chip export controls on China intensified this week following analysis showing that CXMT — identified by the Pentagon as a Chinese military company but not placed on the Commerce Department's Entity List — has expanded rapidly under the existing control regime. Three legislative vehicles are now active: the AI Overwatch Act (would prohibit sales of advanced chips and require Commerce to ensure foreign shipments do not reduce domestic supply); the Chip Security Act (targets chip smuggling); and the Remote Access Security Act (would authorise BIS to regulate remote access by Chinese firms to overseas data centres equipped with advanced chips). The Remote Access Security Act has passed the House but remains stalled in the Senate, leaving what critics describe as a significant loophole — and one that directly intersects with the Anthropic IIL's assertion that API-based access constitutes an export. The existence of this pending legislation is described by Mayer Brown as reflecting a congressional judgment that additional statutory authority would be needed for BIS to regulate remote access — a point the Legion LegalTech plaintiffs are using in their challenge to the IIL. For technology transactions and national security practices, the legislative trajectory is clear: remote access to advanced AI and semiconductor infrastructure will be regulated, the only question is whether via the IIL mechanism now being challenged or via new statutory authority. Supply chain compliance programs and AI vendor assessments should anticipate this regulatory direction and build documentation infrastructure accordingly.