The U.S. Department of Commerce’s Bureau of Industry and Security has proposed a new rule that introduces a new Customer Identification Program (CIP). Similar to a “know your customer” requirement, CIP would require U.S. infrastructure as a service (IaaS) providers and their foreign resellers to verify the identity of their foreign customers and report to the Department of Commerce on the use of their products for large artificial intelligence training. If approved, CIP would create increased compliance costs and risks for U.S. IaaS providers.

California Passes Flurry of Year-End AI Legislation
In 2024, California passed a series of significant AI-related laws aimed at enhancing data privacy and consumer protection. In their