Remote Access Security Act

S 3519, the Remote Access Security Act, amends the Export Control Reform Act of 2018 to regulate remote access to U.S.-controlled items (like dual-use technology) via cloud services from outside the U.S. by "foreign persons of concern" (including governments of specified countries and their entities). It defines prohibited remote access as activities posing national security risks, such as enabling weapons development, offensive cyber operations, or human rights violations through spyware. The bill requires new licensing for remote access, imposes penalties for violations, and mandates annual reports to Congress on implementation, with controls set to expire after 10 years. It directly affects U.S. cloud service providers and foreign entities seeking remote access to controlled items.