It is good that there is an exemption for open source models. Although that would need to be defined. Open source data is difficult because of privacy concerns.
The reference to any "bias" is probably the worst form of legislation anyone could come up with. It doesn't just stifle innovation, that is the price for some forms of security, but it also stifles freedom, which in the long term undermines security.
