ARTICLE · 28 OCTOBER 2026

GSA’s New AI Contracting Clause: Compliance Considerations Beyond Data Security

Winston Taylor

Explore more from Winston Taylor

The General Services Administration has issued a new clause governing federal procurement of large language model systems, establishing requirements that extend beyond cybersecurity to encompass AI supply chains, intellectual property rights, model change notifications, and exit planning.

United StatesGovernment, Public Sector

Elizabeth Leavy

Key takeaways

Effective October 19, 2026: GSA contracting activities may implement the clause earlier.
Scope: Applies to GSA procurements of LLM systems where Government Data is submitted to or produced by the model.
Beyond security: Covers supply chain flowdowns, change and incident notices, intellectual property (IP), and data portability and deletion.
Third-party LLMs: Contractors remain responsible even when they do not control the underlying model.

As it turns out, artificial intelligence (AI) ¹ will not be entirely self-regulated, at least not for federal contractors. On September 28, 2026, the General Services Administration (GSA) issued a new clause governing certain GSA procurements of large language model (LLM) systems: GSAR 552.239-7001, Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems. Its requirements extend well beyond cybersecurity to AI supply chains, IP, model changes, and exit planning, and contractors

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Related Articles

Heads Up: COINS Act Proposal Takes Aim At Biotech And AI Investment In China

GlobalGovernment, Public Sector

Goodwin Procter LLP

Fifth Circuit Holds That CFIUS Does Not Preempt Texas State Law Restricting Foreign Investment

United StatesGovernment, Public Sector

Tropical Storm Isaias Could Strengthen Into A Hurricane: What Gulf Coast Residents Should Know

United StatesGovernment, Public Sector

Morgan & Morgan

DOJ’s New Fraud Enforcement Hub (Video)

United StatesGovernment, Public Sector

Seyfarth Shaw LLP

Court Of Federal Claims Provides A Roadmap For Adequate Rule-of-Two Set Aside Market Research

United StatesGovernment, Public Sector

Crowell & Moring LLP

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

See more popular content from

Government, Public Sector

SBA Extends Deadline For Comments On Historic Overhaul Of Size Standards

The Small Business Administration has extended the comment period for two proposed rules that could dramatically reshape federal government contracting by significantly expanding the pool of entities eligible for small business set-aside procurements. With some size standard thresholds proposed to increase as much as tenfold, these changes would fundamentally alter the makeup of the small business contractor base.

United StatesGovernment, Public Sector

Crowell & Moring LLP

BIOSECURE Act Update: Court Enjoins WuXi AppTec’s 1260H Designation, but Strategic and Compliance Clocks Keep Running

The U.S. District Court for the District of Columbia has preliminarily enjoined the Department of War from enforcing WuXi AppTec's Section 1260H designation, finding the agency misread its evidence on state and military affiliation. However, this ruling does not close alternative pathways to biotechnology company of concern (BCC) designation under the BIOSECURE Act, and earlier supply-chain restrictions continue to drive near-term compliance decisions with a critical June 30, 2027 deadline for sub-tier supp

United StatesGovernment, Public Sector

Greenberg Traurig

Sanctions Update: October 19, 2026

This comprehensive sanctions update examines the US delisting of Venezuelan politician Jorge Rodriguez amid diplomatic negotiations and energy sector expansion, while tracking global sanctions developments including new US restrictions on Iranian banks, UK measures targeting hostile Iranian activities, EU designations for sanctions circumvention, and China's proposed export controls on advanced technologies.

GlobalGovernment, Public Sector

FMCSA MOTUS Implementation – Common Motor Carrier Concerns

The Federal Motor Carrier Safety Administration launched MOTUS in May 2026, replacing legacy registration platforms and fundamentally changing how motor carriers, freight brokers, and surface freight forwarders handle operating authority applications and license maintenance. While designed to combat fraud and streamline registration activities, the transition has created significant user experience challenges that threaten operating authority status and customer relationships for transportation service prov

United StatesGovernment, Public Sector

Benesch, Friedlander, Coplan & Aronoff LLP

When Can Congress Refuse To Seat A Duly-Elected Candidate?

Never. In 1969, the U.S. Supreme Court ruled that the Speaker of the House could not exclude a duly-elected candidate for the U.S. House of Representatives.

United StatesGovernment, Public Sector

Holland & Knight

Massachusetts’ 2026 Ballot Questions: What Clients Need To Know

Massachusetts voters will decide nine statewide ballot questions in November 2026 that could fundamentally reshape the state's legal, regulatory, and fiscal landscape. These measures address government transparency, election reforms, housing development, marijuana regulation, firearms laws, and state revenue limits, with implications extending far beyond Election Day to implementation, regulation, and ongoing policy debates.

United StatesGovernment, Public Sector

Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.

Weekly Sanctions Update: September 14, 2026

The Treasury Department intensifies economic pressure on Iran through Operation Economic Outcast, suspending aviation licenses and sanctioning dozens of entities while implementing a presumption of denial for Iran-related transactions. Meanwhile, new enforcement actions target Chinese cybercrime platforms, Ecuadorian terrorist organizations, and Israeli settlers, as Congress considers comprehensive Russia-Iran sanctions legislation.

GlobalGovernment, Public Sector

Weekly Sanctions Update: October 13, 2026

The US has authorized Russian diesel imports while simultaneously expanding sanctions against the International Criminal Court and Iran's shadow fleet. These developments highlight tensions between energy security concerns and sanctions enforcement, as international partners express divergence over US policy directions.

GlobalGovernment, Public Sector

The Analysts' Brief: The US-Russia Diesel Deal

The Trump administration's October 2025 diesel deal with Russia promises temporary sanctions relief to ease US fuel prices before midterm elections, but analysts question whether the limited supply will meaningfully impact global markets or represent a lasting shift in US-Russia relations. The agreement has already strained transatlantic partnerships and US-Ukraine cooperation while raising compliance uncertainties for businesses navigating evolving sanctions regimes.

GlobalGovernment, Public Sector

DOJ Continues DEI False Claims Act Enforcement With $25 Million Accenture Settlement

The Department of Justice announced a $25 million settlement with Accenture Federal Services over allegations that the company violated the False Claims Act by falsely certifying compliance with anti-discrimination requirements while allegedly using race or sex in hiring, promotion, and access to professional development programs. This marks the third major DEI-related FCA enforcement action in 2026, following similar settlements with IBM and Deloitte.

United StatesGovernment, Public Sector

Bass, Berry & Sims PLC