Prohibits entities from distributing, maintaining, or updating foreign adversary-controlled applications in the U.S. Requires user data portability before prohibition. Allows civil penalties for violations. Permits exemptions for qualified divestitures and necessary services. Grants judicial review in D.C. Circuit.
Analysis summaries, actor details, and coverage mappings were LLM-classified and may contain errors.
This is a binding federal statute enacted by the United States Congress with explicit enforcement mechanisms, civil penalties, and mandatory compliance requirements.
The document primarily addresses national security risks from foreign adversary-controlled applications, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), competitive dynamics (6.4), and governance failure (6.5). It also addresses privacy compromise (2.1) through data portability requirements and power centralization (6.1) through divestiture provisions.
The document primarily governs the Information sector, specifically social media platforms and applications that enable user-generated content sharing. It also has implications for Professional and Technical Services (marketplace operators) and potentially impacts National Security through its focus on foreign adversary threats.
The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle, focusing on the distribution, maintenance, and updating of applications. It does not substantially cover earlier stages like planning, data collection, or model building.
The document does not explicitly define or mention AI models, AI systems, or specific AI categories. It focuses on 'applications' (websites, desktop applications, mobile applications, augmented or immersive technology applications) controlled by foreign adversaries, without specific AI terminology. The scope is defined by application functionality and ownership rather than AI technical characteristics.
United States Congress
The document is a division of an Act passed by the United States Congress, as indicated by the title '21st Century Peace through Strength Act' and the legislative structure.
Attorney General of the United States; United States district courts
The Attorney General is explicitly designated as the enforcement authority with power to conduct investigations, pursue enforcement actions, and bring civil actions in district courts.
The President of the United States (through interagency process); Congress; United States Court of Appeals for the District of Columbia Circuit
The President monitors through determinations of national security threats and qualified divestitures via interagency processes. Congress receives reports. The D.C. Circuit Court provides judicial review.
ByteDance, Ltd.; TikTok; entities providing marketplace services (including online mobile application stores); entities providing internet hosting services; covered companies controlled by foreign adversaries
The Act explicitly targets entities that distribute, maintain, or update foreign adversary controlled applications, including specifically named companies (ByteDance, TikTok) and service providers (marketplace operators, internet hosting services).
8 subdomains (3 Good, 5 Minimal)