Skip to main content
v2026.11,986 entries · CC-BY 4.0

Editorial · CASRAI · AI and ML research outputs

Commerce reportedly finalizing rule to block Chinese remote access to AI chips in third countries

The Information reports Commerce is finalizing a rule to curb Chinese AI firms’ remote access to advanced chips in third-country data centres. It is unpublished; here is what it could mean for research export-control offices.

Published 13 Nov 2026· 4 minute read

Ask CASRAI · free to try

Ask about this story

Ask your first 2 questions free below. Subscribers get 150 a day for $29 a month.

An AI assistant specialized in research administration. It cites the sources behind every answer, labels web answers and says when it can't answer.

Answers draw on CASRAI's guides and dictionary plus the federal and funder documents we index: Federal Register, Grants.gov, Regulations.gov and UKRI.

Works on this site and inside Claude, Cursor and the AI tools you already use.

Everything CASRAI publishes — this page, the dictionary, the guides and the news — stays free to read, with no account and no card.

CASRAI is the reference for research administration — bookmark it for the next question.

The US Commerce Department is reportedly in the final stages of a rule meant to stop Chinese AI companies from using advanced AI chips remotely through data centres in third countries. The rule has not been published or announced. Everything below rests on press reporting, chiefly The Information, which first reported it on Wednesday 11 November 2026, and on outlets relaying that report. This post covers the reported rule and the new reporting around it. For the earlier Moonshot AI story, see our coverage of Moonshot AI’s reported search for Blackwell access in Europe.

What happened

According to The Information, citing two people familiar with the matter, Commerce is finalizing a rule that would extend the Bureau of Industry and Security’s (BIS) existing semiconductor controls to curb Chinese AI firms’ remote access to advanced chips hosted in other countries. Investing.com’s republication of the report (12 November 2026) says Commerce is consulting other government agencies before finalizing, and that the rule could be announced this month. As of 13 November 2026 no rule text, Federal Register notice or BIS announcement had been seen.

Key details as reported

  • Countries. Reports say the rule would cover seven additional countries. Asia Times lists Singapore, Malaysia, Thailand, Indonesia, Brazil, Norway and South Africa; the Investing.com version names only Malaysia, Singapore and Thailand. The full list should be treated as unconfirmed until official text appears.
  • Licensing. Per Asia Times, operators in those countries would need export licences to bring in Nvidia Blackwell-class or more advanced chips. Data centres run by US companies would reportedly be exempt if they restrict remote access from arms-embargoed nations such as China and Russia, and would instead report local customers and the scale of computing.
  • The gap it targets. Export controls cover physical shipments of chips; renting capacity in an overseas data centre has largely fallen outside them. Chinese firms including Tencent, Alibaba and ByteDance have reportedly signed offshore data-centre deals for Nvidia capacity, and Forbes reports Chinese firms rushing to secure such capacity before a rule lands.
  • Internal disagreement. Investing.com, citing Axios, reports that President Trump pushed for tighter controls while Commerce Secretary Howard Lutnick opposed the measure. We have not independently confirmed this.
  • Legal questions. Commentators have questioned whether BIS has the statutory authority to regulate remote access without new legislation. The Remote Access Security Act passed the House in January 2026 but, as previously reported by CNBC, had not passed the Senate.

The Megaspeed reporting

Separately, on 10 November 2026 The Information reported that a network tied to Megaspeed executive Alice Huang acquired about $7.5 billion of Nvidia chips and moved roughly 240,000 restricted chips to Chinese firms (as summarised by RuntimeWire). Reuters could not independently verify the allegation and China has denied it. Earlier New York Times reporting linked Megaspeed’s Malaysian subsidiary to at least $4.8 billion of AI equipment purchases, and Singapore’s Ministry of Home Affairs says its investigation into Megaspeed and six other individuals is ongoing. Megaspeed’s owner has said the company cooperates with US export control inspections. These are allegations in press reports, not findings or charges.

What it means for researchers and research offices

The following is editorial interpretation, not a finding from the sources.

  • Cloud and colocation compute is becoming an export-control question. If a rule keys on who can reach hardware remotely, universities that buy GPU time abroad, or resell or share hosted accelerators, may be asked to show who the end users are. Review provider terms for customer-screening and acceptable-use clauses.
  • Foreign collaborators. Granting accounts on institutional clusters to collaborators or visiting researchers in or affiliated with China should be checked against your export-control and research-security analysis, including whether the work falls within the fundamental research exclusion. Shared model-training or hosted-compute arrangements in joint projects deserve the same review as data transfers.
  • Vendor due diligence. Third-country data centres in the reported list may face new licensing, which could change availability, cost or contract terms for institutions that use them.
  • Do not over-react. The scope, the country list, treatment of existing contracts and the exemptions are all unsettled. Offices should monitor and prepare an inventory of remote-access arrangements rather than change policy on press reports alone.

What to watch

  • Publication of rule text by BIS or in the Federal Register, with the final country list and any grace period for existing contracts.
  • Whether Congress addresses remote access, including the Remote Access Security Act and any provisions attached to the defence authorization bill.
  • Whether the Megaspeed allegations lead to official US or Singapore action.
  • Guidance from BIS, COGR, AUTM-style associations or your counsel on how the rule applies to academic compute.

Sources

Referenced across the research world

University of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logoUniversity of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logo
  • University of Cambridge logo
  • Columbia University logo
  • Crossref logo
  • University of Edinburgh logo
  • Harvard University logo
  • University of Oxford logo
  • Princeton University logo
  • Stanford School of Medicine logo
  • University College London logo
  • ORCID logo

View CASRAI adoption →