Krux
April 5, 2026
GSA Bans Federal Contractors From Training AI on Government Data
Published: April 5, 2026 at 12:26 AM
Updated: April 5, 2026 at 12:26 AM
100-word summary
The General Services Administration just proposed federal procurement rules that would bar contractors from using government data to train or improve AI models. Draft clause 552.239-7001 also mandates "eyes off" data handling, restricting human review except during incident response, and requires vendors to disclose all AI systems within 30 days of award. Contractors keep ownership of their underlying AI but must report security incidents to CISA within 72 hours and maintain detailed processing logs for 90 days. The clause was pulled from the March refresh cycle and won't take effect until Refresh 32. The real shift: the federal government is treating AI vendors like it treats cloud providers, demanding audit...
What happened
The General Services Administration just proposed federal procurement rules that would bar contractors from using government data to train or improve AI models. Draft clause 552.239-7001 also mandates "eyes off" data handling, restricting human review except during incident response, and requires vendors to disclose all AI systems within 30 days of award. Contractors keep ownership of their underlying AI but must report security incidents to CISA within 72 hours and maintain detailed processing logs for 90 days. The clause was pulled from the March refresh cycle and won't take effect until Refresh 32.
Why it matters
The real shift: the federal government is treating AI vendors like it treats cloud providers, demanding audit trails and data residency guarantees rather than trusting black-box promises.