US Lawmakers Demand Ban on Americans Helping Chinese and Russian Spy Agencies

Congress Pressures Trump Administration to Shut Foreign Spy Agency Loophole

America’s Spy Loophole

A bipartisan group of US lawmakers is demanding that the Trump administration close a loophole they say could allow American citizens and companies to provide expertise and technology to foreign intelligence and security agencies, including those belonging to China and Russia. Their warning cuts to an uncomfortable national security problem: Washington has spent years restricting what its strategic rivals can buy from America while potentially leaving room for American expertise itself to reach organisations conducting intelligence operations against US interests.

The lawmakers are pressing Commerce Secretary Howard Lutnick to complete restrictions covering civilian intelligence and security organisations, rather than limiting the strongest controls largely to military-intelligence services. Senators Ron Wyden and John Cornyn said the remaining gaps could allow foreign agencies to hire US consultants or acquire American surveillance, cyber and artificial-intelligence capabilities for intelligence operations.

The Loophole at the Centre of the Fight

The problem has its roots in the Export Control Reform Act of 2018. That law gave the US government authority to regulate activities by Americans anywhere in the world when those activities related to specified sensitive areas, including foreign military-intelligence services.

Commerce subsequently tightened restrictions on American support for military-intelligence organisations. Rules announced in 2021 specifically targeted military-intelligence end users associated with countries including China and Russia, seeking to prevent US technology and services from strengthening espionage and intelligence operations considered hostile to American interests.

But military intelligence is only part of the modern espionage system. Major powers also operate civilian intelligence, internal-security, surveillance and other state organisations whose work can overlap with counterintelligence, cyber operations, political surveillance and the collection of information abroad.

That distinction is now at the heart of the congressional pressure campaign.

Congress Already Expanded the Government’s Power

Congress moved to broaden the law in December 2022 through the National Defense Authorization Act for fiscal year 2023. The change expanded the government's statutory authority from activities related specifically to foreign military-intelligence services to activities connected with foreign military, security or intelligence services.

That was a significant change. It meant Washington had a legal foundation for reaching beyond the military branches of an adversary’s intelligence apparatus and potentially restricting American assistance to a much broader range of foreign government organisations.

The Commerce Department's Bureau of Industry and Security then proposed new regulations in July 2024 intended to use those powers. Commerce said the proposed framework would expand controls over US persons providing support to foreign military, intelligence and security services and would cover intelligence agencies in dozens of countries of concern.

The proposal also contemplated restrictions involving American assistance with foreign-origin equipment, including some maintenance, repair and acquisition activities. Commerce explicitly said Congress had sought to prevent US persons from assisting foreign services that threaten international security or conduct surveillance against dissidents, journalists and Americans.

Yet the lawmakers now argue the regulatory process has taken too long.

Why China and Russia Matter

The dispute would be significant even if it involved obscure foreign agencies. It becomes far more serious because China and Russia sit at the centre of Washington's long-term counterintelligence concerns.

Current Commerce regulations impose extensive controls involving Chinese and Russian military and military-intelligence end users. The rules specifically identify China's Intelligence Bureau of the Joint Staff Department and Russia's Main Intelligence Directorate, commonly known as the GRU, among the military-intelligence organisations subject to controls.

But the congressional concern reaches further than those military organisations. Modern intelligence operations can depend on commercially available software, cyber expertise, artificial intelligence, surveillance technology, data analysis and specialist consultants rather than equipment that looks obviously military.

That is what makes the legal distinction important. A programmer, cybersecurity expert, surveillance specialist or technology company can potentially provide capabilities with enormous intelligence value without supplying a missile, aircraft or traditional weapon.

The Most Troubling Part: American Expertise

Technology export controls usually conjure images of semiconductor shipments, military components or restricted machinery crossing borders.

The deeper concern in this case is knowledge.

An experienced American cybersecurity specialist could possess expertise developed through years of work inside the world's most advanced technology ecosystem. A surveillance company could offer software capable of analysing enormous quantities of data. Artificial-intelligence specialists could help automate identification, targeting or information-processing systems.

Those capabilities can potentially be as strategically valuable as physical hardware.

Wyden and Cornyn warned that foreign intelligence organisations can still hire consultants in the United States and obtain advanced American surveillance, cyber and AI capabilities for intelligence operations. Their argument is effectively that export controls become much less meaningful if the technology itself is restricted while the expertise needed to exploit similar capabilities remains accessible.

Washington Has Seen This Problem Before

The danger of former intelligence specialists selling their skills abroad is not theoretical.

Concerns over so-called “hack-for-hire” operations have previously pushed Washington to examine what happens when people trained inside Western intelligence and cybersecurity institutions take highly specialised capabilities into private employment overseas.

Commerce itself highlighted that danger when proposing its expanded rules in 2024. The department specifically said the restrictions were designed in part to prevent hack-for-hire business models from circumventing American controls on cyber-intrusion technologies.

That distinction matters because intelligence capability is increasingly portable. The most valuable export may not be a physical product packed into a shipping container. It may be technical knowledge carried by one engineer, contractor or former intelligence professional.

AI Raises the Stakes

Artificial intelligence makes the issue more urgent.

Intelligence agencies once required huge teams to process intercepted communications, surveillance imagery, databases and individual targets. Modern AI systems can accelerate classification, translation, facial comparison, pattern detection, cyber operations and the interrogation of massive datasets.

The political question therefore extends beyond whether America should export a particular chip.

It is also whether American citizens and businesses should be allowed to help a foreign intelligence organisation build the systems that make advanced hardware useful.

That concern lands in the middle of a much wider argument inside Washington over technology transfers to China. Congressional scrutiny of advanced semiconductor exports has intensified, while lawmakers from both parties have questioned whether US technology restrictions are sufficiently strong to prevent Chinese organisations from gaining capabilities with military or intelligence applications.

The spy-agency dispute widens that argument from hardware to human expertise.

An Unusually Bipartisan Warning

The coalition behind the demand is politically significant.

The letter was led by Democratic Senator Ron Wyden and Republican Senator John Cornyn and was also signed by Democratic Senator Peter Welch, Republican Representatives Michael McCaul and Pat Harrigan, and Democratic Representative Sara Jacobs.

That combination matters in a deeply polarised Congress. National security policy toward China in particular has become one of the areas where Democrats and Republicans frequently overlap, even when they disagree sharply on how individual restrictions should work.

The central argument here is difficult to dismiss along conventional party lines: if the United States regards a foreign intelligence organisation as a national security threat, lawmakers want to know why American expertise should remain available to support it.

This Is Not a Ban on Every Foreign Consultancy Job

The proposed direction should not be confused with a blanket prohibition on Americans working for foreign companies or governments.

Export-control regulations contain detailed definitions, licensing requirements and jurisdictional boundaries. Commerce's existing rules also interact with restrictions administered by other agencies, including the State Department and Treasury Department.

The important question will therefore be how any final restrictions define prohibited “support,” which organisations qualify as intelligence or security end users, what technologies and activities require licences, and which legitimate activities receive exemptions.

Poorly designed rules could capture ordinary commercial work that poses little national security danger.

Rules drawn too narrowly could preserve exactly the loopholes Congress wants eliminated.

The Bigger US-China Technology Battle

The timing adds another layer.

The demand comes amid broader congressional pressure for tougher controls on China's access to advanced American technology and ahead of an expected visit to Washington by Chinese President Xi Jinping.

That means the argument is unlikely to remain confined to an obscure section of export-control law.

Washington increasingly sees technology policy, national security policy and China policy as parts of the same struggle. Semiconductors matter because they power advanced computing. AI matters because it can transform intelligence and military capabilities. Cyber expertise matters because computer networks have become strategic infrastructure.

The result is a growing American effort to control not only weapons but the ecosystem of knowledge and technology that can produce strategic power.

What Happens Next

The immediate decision rests with the Commerce Department and the Trump administration.

Congress has already granted broader authority. Commerce has already proposed regulations designed to implement it. The political pressure now centres on converting that framework into enforceable rules and determining precisely which foreign intelligence and security organisations should face restrictions.

Until that happens, lawmakers argue a contradiction remains at the heart of US national security policy: America can spend billions defending itself against sophisticated foreign intelligence operations while leaving pathways through which American knowledge, surveillance capabilities and cyber expertise could potentially strengthen the organisations conducting them.

That is why this fight is bigger than another technical change to export regulations. In an era when a line of code, an AI model or the knowledge inside one expert's head can have strategic value, Washington is being forced to decide whether controlling physical technology is enough — or whether America's human expertise has become a national-security export in its own right.