Trump Repeals Biden Cybersecurity Rules

In a significant policy reversal, former President Donald Trump has signed Executive Order 13859 to dismantle key cybersecurity regulations established during the Biden and Obama administrations. The move represents a major shift in the nation’s approach to digital security and AI governance.

Key Changes to Digital Identity and Public Benefits

The order specifically targets Biden’s Executive Order 14144 regarding digital identity verification. Where Biden’s policy encouraged agencies to accept digital IDs for public benefits, Trump’s administration claims this could enable “widespread abuse by illegal immigrants.”

Expert Concerns About Cybersecurity Consequences

Cybersecurity expert Mark Montgomery of the Foundation for Defense of Democracies warned that eliminating digital ID mandates may compromise national security. In comments to Politico, Montgomery asserted the repeal “prioritizes questionable immigration benefits over proven cybersecurity benefits.”

AI Security Provisions Eliminated

The executive order removes several AI-related security measures, including:

• Requirements for AI testing in energy infrastructure protection
• Federal funding for AI security research programs
• Pentagon directives about using AI models for cybersecurity

New Focus on AI Vulnerability Management

The White House frames these changes as shifting AI strategy toward “identifying and managing vulnerabilities” rather than what it calls “censorship.” This aligns with Silicon Valley allies’ criticisms of previous AI content moderation approaches.

Other Cybersecurity Rollbacks

The order makes additional significant changes:

• Eliminates quantum-resistant encryption requirements
• Removes security attestation mandates for federal contractors
• Repeals Obama-era sanctions policies for cyber attacks

Controversial Changes to Cyber Sanctions

Perhaps most controversially, the order limits cyber sanctions only to “foreign malicious actors.” The administration claims this prevents “misuse against domestic political opponents” and removes ambiguity around “election-related activities.”

This sweeping executive action fundamentally reshapes America’s cybersecurity landscape, with significant implications for national security, AI development, and digital infrastructure protection.