Government

UPDATE: On February 5, 2025, the Trump administration issued an executive order delaying the cancellation of de minimis until “adequate systems are in place to fully and expediently process and collect tariff revenue applicable”. Imports from China below the value of $800 will generally not be subject to the 10% tariff or Section 301 duties.
Continue Reading The First Wave: U.S. Imposes Tariffs on Canada (or not?), Mexico (or not?), and China (well, yeah, probably so)

Update: On February 22, Maryland District Court Judge Adam Abelson issued a Preliminary Injunction halting the rollout and enforcement of the several provisions in the EO. Relevant here, the PI prohibits the Federal Government from requiring any contractor or grantee to make any certification required by the EO; and prohibits the Federal Government from bringing any False Claims Act enforcement action, or other enforcement action, in connection with either the proposed certification or the nine federal investigations to be proposed by each federal agency. The 63-page opinion addressed both First and Fifth Amendment implications of the EO relying, in part, on
Continue Reading The Squeeze is the Juice – Utilization of The False Claims Act in the DEI/Government Contracting Executive Order 

In the ever-evolving world of cybersecurity, even organizations that meet stringent security standards can be victims of sophisticated cyberattacks. A notable example of this is the December 8, 2024 cybersecurity incident involving the U.S. Department of the Treasury and its third-party cloud service provider, BeyondTrust. This incident underscores some critical lessons for entities (both government agencies and private sector) that rely on third-party cloud service providers (“CSPs”).
Continue Reading Looking Beyond FedRAMP – Lessons from the U.S. Treasury Cybersecurity Incident

The wait is finally over! After more than 14 years of anticipation, the Federal Acquisition Regulation (“FAR”) Proposed Rule on Controlled Unclassified Information (“CUI”) was released on January 15, 2025 and comes as part of the Government’s broader efforts to identify, detect, and respond to ever-evolving threats targeting Federal contractors.
Continue Reading At Long Last – The FAR CUI Rule is Here! 

In the ever-evolving world of cybersecurity, even organizations that meet stringent security standards can be victims of sophisticated cyberattacks. A notable example of this is the December 8, 2024 cybersecurity incident involving the U.S. Department of the Treasury and its third-party cloud service provider, BeyondTrust. This incident underscores some critical lessons for entities (both government agencies and private sector) that rely on third-party cloud service providers (“CSPs”).
Continue Reading Looking Beyond FedRAMP – Lessons from the U.S. Treasury Cybersecurity Incident

On January 8, 2025, the Department of Justice (“DOJ”) published its final rule addressing Executive Order (E.O.) 14117, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” With the final rule, the DOJ National Security Division’s Foreign Investment Review Section (“FIRS”) defines prohibited and restricted data transactions, and outlines trusted data flows for companies with overseas operations involving countries of concern, including IT infrastructure. The general effect of the rule is to close “front door” access to bulk sensitive personal data on U.S. persons and certain U.S.-government-related data. Until now—or rather, April
Continue Reading Data, Deals, and Diplomacy, Part III: DOJ Issues National Security Final Rule with New Data Compliance Obligations for Transactions Involving Countries of Concern

Over the last few years, the Federal Risk and Authorization Management Program (“FedRAMP”) Program Management Office (“PMO”) has released two draft guidance documents related to defining the applicable boundary for security assessments of cloud service offerings, but final versions were never released. On January 16, 2025, FedRAMP released another draft authorization boundary guidance document (RFC-0004). FedRAMP’s authorization boundary guidance is “the most frequently requested policy update” as it forms the foundation for determining the scope of review for assessment and authorization. The new draft currently is open for public comment through February 17, 2025.
Continue Reading FedRAMP Releases New Draft Authorization Boundary Guidance

In the Fiscal Year 2025 National Defense Authorization Act (“FY25 NDAA”), Congress included some important provisions related to the bid protest process at the U.S. Government Accountability Office (“GAO”). These provisions (1) raise the dollar threshold for task order protests of Department of Defense (“DoD”) procurements and (2) task DoD and GAO with exploring processes to make protesting DoD procurements more difficult.
Continue Reading FY2025 NDAA Increases the Threshold for DoD Task Order Protests and Asks GAO and DoD to Explore Changes to Bid Protest Process

Important Update: On January 28, 2025 the U.S. District Court for the District of Columbia granted an Administrative Stay enjoining OMB from enforcing OMB Memorandum M-25-13 until the Court can hear full arguments, scheduled for February 3. We continue to monitor developments.
Continue Reading ALERT: Trump Administration Issues “Pause” on Federal Grant Spending Effective January 28

Tariffs remain the focus of the incoming Trump Administration. Over the past several months, the announcements from president-elect Trump and his transition team have been dynamic. We expect the Trump trade policy team to use creative methods to deliver aggressive new tariff policies this year.
Continue Reading Trump Tariffs Survival Guide: 10 Strategies for U.S. Importers

To kick off the New Year (and as is now tradition, since we put out a similar Recap & Forecast last year), Sheppard Mullin’s Governmental Practice Cybersecurity & Data Protection Team has prepared a cybersecurity-focused 2024 Recap (highlighting major updates and including links to the resources we put out over the past year) and a 2025 Forecast (previewing what we expect to see in 2025). This Recap & Forecast covers the following six high-interest topic areas relating to cybersecurity and data protection:
Continue Reading Governmental Practice Cybersecurity and Data Protection: 2024 Recap & 2025 Forecast Alert

On December 2, 2024, the Department of Commerce, Bureau of Industry and Security (BIS) issued a new set of regulations targeting semiconductors manufacturing equipment (SME) and high-bandwidth memory (HBM) chips. The updates are a part of BIS’s ongoing efforts to target semiconductors in attempt to slow down China’s advancement of AI. In the race to artificial general intelligence, advanced-node semiconductors play an outsized role in a country or company’s ability to progress.
Continue Reading The Persistence of (High Bandwidth) Memory: Semiconductor Manufacturing Equipment and Korean Semiconductor Manufactures Face Harsher Restrictions Under New HBM Rules

Cell phone and laptop searches do happen but they are relatively rare. Although the Fourth Amendment right to be free of unreasonable searches and seizures is drastically reduced at a port of entry, as are expectations of privacy, U.S. Customs & Border Protection (“CBP”) has internal protocols requiring Officers to have some basis for the search. Below, we dive into the CBP protocols and what to expect if you are selected for a search. 
Continue Reading Will CBP Search Your Laptop and Cell Phone at the Port of Entry?

You have always dreamed of going to space. All of us have at some point or another. And the only thing standing between you and that dream were overly-restrictive commodity and technology export licensing requirements on certain space items to specified countries! (well, that, and gravity, and the fact that you are not a billionaire[1], and maybe a few other things).
Continue Reading Ticket to Ride – The Commercial Space Activity Exception and Space Tourism: Reduced Export Controls Ease Cross-Border Collaborations (Part IV of IV)