Comments on GSA’s Proposed AI Clause Due March 20, 2026
On March 6, 2026, the General Services Administration (GSA) proposed GSAR 552.239-7001, titled Basic Safeguarding of Artificial Intelligence Systems. This groundbreaking contract clause is aimed at imposing dedicated, AI-specific safeguarding requirements through procurement vehicles. The proposed clause marks a significant shift in federal acquisition practices, as no other agency has implemented a comparable, stand-alone AI governance clause.
Rather than following the traditional notice-and-comment rulemaking process, the GSA adopted a quicker approach via the MAS refresh comment process, resulting in a compressed timeline for stakeholder feedback, with comments due by March 20, 2026. If adopted in its current form, the clause would establish contractually binding obligations governing the development, deployment, and management of artificial intelligence (AI) systems used in or supplied under federal contracts.
Key Objectives of GSAR 552.239-7001
The GSAR 552.239-7001 clause aims to advance federal objectives by emphasizing AI control, transparency, and accountability. It reflects the federal government’s growing concerns about data security, supply chain risk, and the often opaque nature of commercial AI systems. Contractors that utilize AI—whether for data analysis, content generation, automation, or decision support—will need to ensure their practices align with these priorities.
Disclosure Obligations and Data Use Restrictions
The clause introduces extensive disclosure obligations, significant data use restrictions, expansive government use rights, and affirmative compliance obligations for contractors. Key requirements include:
- Exclusively using American AI Systems for contract performance, explicitly prohibiting foreign systems.
- Disclosing all AI systems used in contract performance throughout the supply chain within 30 days of award unless requested sooner by the contracting officer.
- Ensuring mechanisms for government oversight, intervention, and feedback.
- Prohibiting the use of government data to train or improve AI models.
- Providing the government with ownership rights in AI outputs and developments.
- Promptly reporting security or performance incidents within 72 hours.
- Maintaining documentation related to compliance with the clause.
- Ensuring data portability and interoperability through open data formats while avoiding proprietary technologies.
- Promoting unbiased AI principles, ensuring systems are truthful, historically accurate, neutral, and nonpartisan.
Scope and Definitions
The proposed clause broadly applies to AI use in contract performance, not limited to AI systems provided to the government. Key terms such as “AI System”, “American AI System”, and “Service Provider” are defined to include a range of entities beyond traditional subcontractors, encompassing third-party vendors that support AI functionality.
Data Protection and Safeguarding Requirements
The clause mandates safeguarding obligations when using AI systems. These include establishing controls to protect against unauthorized access and maintaining system integrity. The requirements align with existing federal cybersecurity frameworks but introduce an AI-specific focus on safeguarding models and training data.
Government Rights and Oversight
The government retains ownership of all data and any custom developments created specifically for the government under the contract. Contractors and service providers are granted a limited, revocable license to use such data during the contract term. The clause grants the government the right to use AI systems and outputs for any lawful purpose, enabling authorized personnel to integrate contractor AI systems with government systems.
Compliance and Supply Chain Obligations
Contractors are required to flow down these requirements to subcontractors and other service providers involved in AI development or operation. This broad definition of “Service Provider” means contractors must ensure compliance across a complex ecosystem of vendors, including cloud providers.
Anticipated Next Steps
While the proposed clause may evolve based on contractor feedback, it signifies a meaningful shift in how the federal government intends to govern AI. Contractors should expect the clause to be refined throughout the MAS refresh process and should prepare for its potential implications.
Operational and Compliance Impact
If adopted, contractors should anticipate actions such as:
- Establishing an internal AI governance framework.
- Developing inventories of AI systems used in contract performance.
- Ensuring compliance with flowdown requirements.
- Updating internal policies and training personnel on proper AI usage.
- Preparing for incident reporting and audit readiness.
Conclusion
The proposed GSAR 552.239-7001 clause likely signals a new direction for federal procurement policy regarding AI. Contractors who proactively assess and implement these requirements will be better positioned to remain compliant and competitive in an evolving regulatory landscape.
