From the article:

> The new law doesn’t apply to classified code, national security systems or code that would post privacy risks if shared.