TL;DR
GSA's final LLM procurement clause, effective October 19 2026, sets binding data-safeguarding rules for AI vendors selling to the federal government while narrowing scope enough to ease the broadest industry fears.
What happened
- September 28, 2026: GSA issued clause 552.239-7001, "Basic Safeguarding of Data within Large Language Model Artificial Intelligence Systems," as a GSA Regulation Deviation.
- Effective date is October 19, 2026, though contracting officers may incorporate it into active contracts before that date at their discretion.
- The rule is the third iteration of a process that began with a March 2026 draft, revised after industry criticism into a June 2026 proposed clause, and now finalized with further changes.
- Applicability now requires a two-part test: the government must be procuring a system where LLM functionality is a "material feature," and government data must be "submitted directly to or produced by" the LLM.
- The original March draft's outright ban on non-U.S. AI components was removed in June and does not reappear in the final rule.
Why it matters
- Scope is materially narrowed: contractor-internal back-office LLM use and systems where LLM is "incidental or ancillary" are explicitly excluded, reducing compliance surface for large integrators.
- Flow-down obligations shift from a rigid four-role taxonomy (LLM Developer, Operator, Integrator, Service Provider) to a principles-based NIST AI RMF 1.0 framework, giving contractors more flexibility but also more interpretive risk.
- The clause still overrides all contractor commercial agreements, preserving the core tension with FAR Part 12 commercial acquisition rules and leaving procurement roadblocks for major LLM suppliers unresolved.
- IP protections for contractors are expanded, with a new provision expressly acknowledging pre-existing contractor materials, reducing the risk of inadvertent government IP claims on proprietary models.
- Open-model carve-out: flow-down provisions on origin, ownership, or foreign control do not apply to "Fully Open Models" or "Open-LLM Components," a meaningful concession to open-source AI ecosystems.
What to watch next
- GSA companion clauses: the final rule references the four supply-chain roles from June but no longer defines them or attaches companion clauses. Whether GSA issues revised companion clauses will determine how subcontractor obligations are actually enforced.
- FAR Part 12 conflict resolution: industry pressure on the order-of-precedence issue is unresolved. Watch for formal protests, congressional inquiries, or a follow-on rulemaking that reconciles the clause with commercial acquisition norms.
- Adoption pace: contracting officers can act before October 19, so watch for early incorporation into pending GSA Schedule task orders as a signal of how aggressively the agency intends to enforce the new standard.
Originally published on Present of AI, a daily source-linked AI news timeline. Read the full timeline or browse the open dataset.