GSAR Data Safeguarding Clause for Large Language Model AI Systems

Current understanding

GSA is soliciting public comment (via listening sessions and a request for comments) on a draft General Services Acquisition Regulation (GSAR) clause that would establish basic data safeguarding standards for Large Language Model AI systems acquired by federal agencies through GSA vehicles. The proposal would be the first federal acquisition-regulation clause specifically targeting LLM data handling, extending existing federal AI governance and information-security frameworks into procurement contract terms. Status: pre-proposed rulemaking / notice of listening sessions and request for comments; no draft regulatory text has been formally issued for notice-and-comment.

Evidence log

• 2026-06-25 — AI Flaw Reporting and Security Enhancement Act: cross-connection with ai-flaw-reporting-security-enhancement-act: Complementary AI risk controls: GSAR clause governs data safeguarding for LLM systems in federal acquisition, while HR9333 creates a cross-sector flaw reporting mechanism that could feed such acquisition-security requirements. (novelty: 3)
• 2026-06-17 — General Services Acquisition Regulation; Acquisition of Information and Communication Technology; Notice of Listening Sessions and Request for Comments: cross-connection with advanced-ai-innovation-security-eo: GSAR clause operationalizes federal AI governance principles into procurement contract terms for LLM systems. (novelty: 3)

Open questions

Related