This Act may be cited as the China FIREWALL Act of 2026.

(a) Prohibition on the use of Chinese AI models (1) In general Not later than 60 days after the date of the enactment of this Act, the Director of the Office of Management and Budget, in consultation with the Administrator of General Services, the Director of the Cybersecurity and Infrastructure Security Agency, the Director of National Intelligence, and the Secretary of Defense, and consistent with the information security requirements under subchapter II of chapter 35 of title 44, United States Code, shall develop standards and guidelines for executive agencies that require the removal of any covered application from information technology. (2) National security and research exceptions The standards and guidelines developed under paragraph (1) shall include— (A) exceptions for law enforcement activities, national security interests and activities, and security researchers; and (B) for any authorized use of a covered application under an exception, requirements for agencies to develop and document risk mitigation actions for such use. (b) Procurement prohibition The head of an executive agency may not procure a covered application, including any software that utilizes a covered application. (c) Waiver The Director of the Office of Management and Budget, in consultation with the Administrator of General Services, the Director of the Cybersecurity and Infrastructure Security Agency, the Director of National Intelligence, and the Secretary of Defense may waive the requirements of this section, on a case-by-case basis, in the interest of national security. (d) Definitions In this section: (1) Artificial intelligence; AI The term artificial intelligence or AI has the meaning given that term in section 5002 of the National Artificial Intelligence Initiative Act of 2020 (15 U.S.C. 9401U.S. Code — Title 15, Section 9401View official source on GovInfo). (2) Covered application The term covered application means any AI application that is developed or provided by a foreign entity of concern, or any software that utilizes a foundation model developed or provided by a foreign entity of concern. (3) Executive agency The term executive agency has the meaning given that term in section 133 of title 41, United States Code. (4) Foreign entity of concern The term foreign entity of concern has the meaning given that term in section 40207(a) of the Surface Transportation Reauthorization Act of 2021 (42 U.S.C. 18741(a)U.S. Code — Title 42, Section 18741(a)View official source on GovInfo). (5) Foundation model The term foundation model means a software component of an information system that— (A) implements artificial intelligence; (B) uses computational, statistical, or machine-learning techniques to produce outputs from a defined set of inputs; (C) is trained on a broad data set; (D) is designed for generality of output; and (E) is adaptable to a wide range of distinctive tasks. (6) Information technology The term information technology has the meaning given that term in section 11101 of title 40, United States Code.