> The new law doesn’t apply to classified code, national security systems or code that would post privacy risks if shared.

Seems pretty clear they would.