1. (D) TIMING.—The term “covered transaction” includes a current, past, or potential future transaction. 2. (I) A group, subgroup, or other association or orga

1. (D) TIMING.—The term “covered transaction” includes a current, past, or potential future transaction. 2. (I) A group, subgroup, or other association or organization whether or not organized for profit. [like an OSS project on github?] 3. (1) IN GENERAL.—It shall be unlawful for a person to violate, attempt to violate, conspire to violate, or cause a violation of any regulation, order, direction, mitigation measure, prohibition, or other authorization or directive issued under this Act, including any of the unlawful acts described in paragraph (2). 4. SEC. 5. Considerations. [the star of the show - read it] Apple, Google, Amazon, and Microsoft are definitely touching more than 1M personal records and/or providing "communication". They are all subject to this bill. All their "transactions" are now subject to approval of Secretary of Commerce. For example: "State-of-the-art end-to-end encryption (powered by the open source Signal Protocol) keeps your conversations secure. We can't read your messages or listen to your calls, and no one else can either. Privacy isn’t an optional mode — it’s just the way that Signal works. Every message, every call, every time." Isn't Signal also subject to this bill? Or better, who isn't subject to this bill? Will starting/contributing to an OSS project in any of the Sec. 5 areas require consulting an attorney?