BIS Closes the Subsidiary Loophole. The Damage Was Already Done.

The Gap Was Structural, Not Accidental

On the evening of May 31, the Commerce Department's Bureau of Industry and Security posted guidance with a blunt answer to a question operators had been quietly asking for twelve months: yes, license requirements for advanced AI chips still apply to Chinese-headquartered companies operating outside China. That the answer was ever in doubt is the story.

The Commerce Department created the opening in May 2025 when it announced it would not enforce the AI Diffusion Rule issued in the final days of the Biden administration — the rule that governed global access to AI chips. The license requirement, first established in November 2023, was supposed to apply to all destinations outside the United States when chips are destined for China-headquartered firms or their subsidiaries. When the Trump administration shelved the Diffusion Rule, it created ambiguity about whether those pre-existing requirements were still operational. Chinese entities and their intermediaries moved quickly.

The unexpected guidance suggests the United States' best AI chips may have been making their way to subsidiaries of Chinese AI firms based in places like Malaysia for almost a year despite broader U.S. efforts to starve Chinese firms of semiconductors needed to develop critical AI capabilities. One chip industry source with deep supply-chain knowledge estimated hundreds of thousands of chips were exported during the year the Trump administration left the door open.

What the Guidance Actually Says

The Department of Commerce said in the guidance that its licensing requirements for the export of advanced AI chips applied to all businesses with headquarters or a parent company in China. The May 31 guidance clarifies that export licenses are required for entities headquartered in China or Macau, regardless of where their affiliates are located. That sentence is what matters for procurement and legal teams.

BIS is focusing on top-tier processors, citing Nvidia's Rubin and Blackwell lines and AMD's MI350X accelerator as representative examples. The scope targets the highest-performance accelerators—the ones that actually move the frontier for AI training at scale.

This is a clarification of existing law, not new law. A BIS spokesperson said: "BIS issued guidance clarifying export license requirements that have been in place since 2023." That framing matters: companies that shipped chips to Chinese subsidiaries without licenses during the gap period may have been violating regulations that were technically in force, even if unenforced.

Who Knew What

Nvidia says it was already compliant. "The guidance reaffirms that NVIDIA's sales and vetting process is correct — consistent with our existing approach, licences are required to ship controlled products to PRC-headquartered companies," an Nvidia spokesperson told Al Jazeera. Nvidia is claiming its own controls were never the problem. The problem was intermediaries and other vendors in the supply chain operating in the ambiguous space the non-enforcement created.

The new guidance was posted after a paper about the loophole circulated in Washington. The paper, a copy of which was seen by Reuters, says "the floodgates have quietly opened." That language explains the Sunday evening timing—an unattributed document circulating on a Friday forced a weekend response from BIS.

AMD and Intel did not immediately respond to requests for comment. TSMC, which manufactures chips on behalf of clients including Nvidia, declined to comment. TSMC's silence matters specifically because the guidance does not address foundry-level due diligence obligations.

What the Guidance Does Not Fix

Three gaps remain.

First, enforcement mechanism. The guidance did not mention any renewed enforcement mechanisms, including due diligence requirements on chip producers to ensure their orders are not delivered to Chinese subsidiaries operating in third-party countries. Without audit triggers or penalty structures stated, the guidance is declaratory only.

Second, existing hardware. The Commerce Department guidance will allow firms that have purchased export-controlled computing items without a license to continue operating them until further notice. The guidance stops short of forcing data centers to stop using or servicing chips already in place — meaning hardware already deployed stays in service. Any compute advantage gained through the loophole persists.

Third, the foundry gap. Former State Department official Chris McGuire noted a remaining gap: foundries such as TSMC are not required to perform extra due diligence to ensure advanced chips are not destined for Chinese front companies. As long as fabrication and packaging are outside BIS's direct reach, determined actors have pathways.

The Taiwan case illustrates how the routing problem extends beyond subsidiaries to outright falsification. Prosecutors are investigating suspected Nvidia chip smuggling involving third-country transit. Taiwan suspects three individuals smuggled at least one shipment of Nvidia AI chips to China by first exporting them to Japan. Authorities detained the three defendants and seized about 50 servers allegedly tied to fraudulent export documents.

Immediate Compliance Obligations

If you procure, resell, or deploy advanced accelerators—Blackwell-class GPUs, AMD MI350X, or successors—verify the ultimate beneficial owner of your customer or supplier. A Singapore or Malaysian entity is not inherently clean. If the parent is headquartered in China or Macau, a license is required, and that requirement has been in place since November 2023.

The guidance appears more focused on clarifying enforcement standards than imposing a broad new ban. Lower-tier chips supplied under existing licenses may continue to be sold under current terms, while products already shipped will remain with customers. Prospective compliance is not optional.

What to Watch

1. BIS enforcement notices (next 30-60 days). Whether the agency issues formal penalty guidance or initiates audits against companies that shipped to Chinese subsidiaries during the gap year will determine legal exposure for those firms.

2. Ownership threshold publication. The current guidance is silent on what percentage of Chinese ownership triggers the control. A 10% Chinese LP stake in a Singapore data center fund is a different compliance posture than a 51% Chinese parent.

3. Southeast Asian data center order books. Materially dropping purchase orders for advanced accelerators in Malaysia, Indonesia, and Vietnam in Q3 2026 would confirm the subsidiary channel was operating at scale. Public filings and Nvidia's geographic revenue disclosures are the leading indicator.

4. TSMC due diligence requirements. If BIS extends obligations upstream to the foundry, the compliance surface expands dramatically. A proposed rule touching TSMC would be the most significant supply chain intervention since the October 2022 entity list additions.

5. Chinese regulatory response. Beijing's own export control regime on critical minerals and chipmaking materials is the escalation vector. Watch the Chinese Ministry of Commerce for licensing restriction announcements on gallium, germanium, or graphite.