The Cloud Security Act amends Title 18 of the United States Code, specifically sections related to stored communications and customer records, to establish new exceptions for disclosures to the Secretary of Commerce or a designated government agent. These exceptions permit electronic communication service providers to share both the contents of communications and customer records under specific circumstances. Such disclosures are authorized if the provider, in good faith, believes the information pertains to a specified foreign entity's use of a covered cloud product . The primary purpose is to facilitate compliance with regulations issued under the Export Control Reform Act of 2018, ensuring that sensitive technology use by certain foreign entities can be monitored and controlled. The information shared must be limited to what is reasonably necessary for verification, notification, or reporting requirements. The bill introduces specific definitions to clarify its scope, including "AI model," "covered cloud product," and "covered integrated circuit." A covered cloud product refers to infrastructure, platform, or software as a service offerings used for developing or deploying advanced AI models that utilize covered integrated circuits , which are defined by specific technical specifications or existing export control classifications, with an exclusion for those not designed for data centers.