OMB Releases Final Federal Source Code Policy
Client Alert | 1 min read | 08.12.16
On August 8, 2016, OMB released the final federal source code policy, which requires new, custom-made source code developed specifically by or for the federal government to be made available for sharing and reuse across all federal agencies in an effort to minimize duplicative procurements and reduce federal vendor lock-in. The policy also establishes a pilot program that requires agencies commissioning new, custom software to release at least 20 percent of that code as open source software (OSS) for three years, which will require agencies to consider the value of publishing custom code as OSS and negotiate data rights reflective of its value, as well as to obtain sufficient rights to fulfill the policy’s objectives.
Contacts
Insights
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
The wait is over. As of today, manufacturers of connected products (both hardware and software) must comply with the Cyber Resilience Act’s (“CRA”) vulnerability and incident reporting obligations. The CRA’s Single Reporting Platform (“SRP”), operated by the European Union Agency for Cybersecurity (“ENISA”), is now the EU-wide gateway through which those notifications must flow.
Client Alert | 10 min read | 09.11.26
Mining, Indigenous Consultation Rights, and Investment Treaty Protection
Client Alert | 2 min read | 09.11.26
New ISOO Guidance Directs Federal Agencies to Provide More CUI Guidance to Contractors
Client Alert | 4 min read | 09.10.26
European Commission Publishes Landmark Guidelines on Exclusionary Abuses by Dominant Companies


