- Potential benefitStrengthens national security by creating a centralized, statutory mechanism to review and block or mitigate ICTS trans…
- Federal agenciesProvides the federal government broader and clearer tools (rulemaking, mitigation conditions, prohibitions, subpoenas,…
- Potential benefitImproves risk-informed decisionmaking through mandated DNI risk assessments and a technical advisory committee that can…
Information and Communications Technology and Services National Security Review Act
Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.
This bill creates an Office of Information and Communications Technology and Services (OICTS) inside the Bureau of Industry and Security at the Department of Commerce to identify, review, mitigate, and prohibit certain transactions in information and communications technology and services (ICTS) that pose national security risks. It defines covered transactions, entities and jurisdictions of concern (specifically naming the People’s Republic of China, Russian Federation, Iran, and North Korea), grants investigative and subpoena authorities, and authorizes mitigation measures or prohibitions including contractual conditions, cybersecurity requirements, and component exclusions.
Transparency and due process: liberals and centrists want more transparency and procedural safeguards; conservatives worry about expanded administrative power and overcriminalization.
Relative to its intended legislative type, this bill establishes a clear statutory framework that creates new substantive regulatory authority over ICTS-related transactions, implements an institutional home within BIS, defines key terms and risks, and provides enforcement tools, but it omits explicit resourcing and certain procedural safeguards.
This bill creates an Office of Information and Communications Technology and Services (OICTS) inside the Bureau of Industry and Security at the Department of Commerce to identify, review, mitigate, and prohibit certain transactions in information and communications technology and services (ICTS) that pose national security risks.
It defines covered transactions, entities and jurisdictions of concern (specifically naming the People’s Republic of China, Russian Federation, Iran, and North Korea), grants investigative and subpoena authorities, and authorizes mitigation measures or prohibitions including contractual conditions, cybersecurity requirements, and component exclusions.
The Director of National Intelligence must provide risk assessments to the Secretary and to Congress, an industry technical advisory committee is required, and existing Executive Order-based regulations remain in effect while the Secretary may promulgate new rules.
On substance the bill addresses a recognized national security problem (ICTS supply-chain risk) and contains compromise features (mitigation options, advisory committee, DNI input), which increase viability. Offsetting that are significant expansions of executive regulatory and enforcement power, strong penalties, procedural exemptions, and limited judicial remedies that tend to trigger legal and stakeholder opposition. Judged solely on content and typical legislative patterns, it has a roughly even chance pending negotiation on scope, due-process safeguards, resource/funding provisions, and industry accommodations.
Relative to its intended legislative type, this bill establishes a clear statutory framework that creates new substantive regulatory authority over ICTS-related transactions, implements an institutional home within BIS, defines key terms and risks, and provides enforcement tools, but it omits explicit resourcing and certain procedural safeguards.
Transparency and due process: liberals and centrists want more transparency and procedural safeguards; conservatives worry about expanded administrative power and overcriminalization.
Who stands to gain, and who may push back.
These are examples from the analysis, not a ranked list of the most-affected groups.
- CitiesIncreases regulatory burden and compliance costs for U.S. companies and foreign firms subject to U.S. jurisdiction that…
- Potential burdenCreates broader executive authority and significant criminal (up to $1,000,000 and 20 years imprisonment) and civil pen…
- Potential burdenCould disrupt international trade and foreign investment, provoke retaliatory measures by targeted jurisdictions, and i…
Why the argument around this bill splits.
Transparency and due process: liberals and centrists want more transparency and procedural safeguards; conservatives worry about expanded administrative power and overcriminalization.
A mainstream liberal view would generally welcome stronger federal tools to protect critical infrastructure, sensitive data, and the digital supply chain from hostile state actors.
Support would be tempered by concerns about transparency, due process, civil liberties, and potential collateral harm to lawful research, academic collaboration, immigrant-owned businesses, or smaller firms.
The secrecy provisions, limited public judicial access to some records, and severe criminal penalties would raise equity and oversight concerns.
A pragmatic centrist would view the bill as a reasonable, targeted expansion of export-control and supply-chain authorities to address clear national-security risks in ICTS, while expecting careful rulemaking and interagency coordination.
The centrist would appreciate evidence requirements (DNI risk assessments) and industry consultation but would be concerned about implementation costs, regulatory clarity, and the balance between secrecy and judicial review.
They would likely support the concept but want clearer criteria, timelines, cost estimates, and administrative safeguards before full endorsement.
A mainstream conservative view would acknowledge legitimate national security concerns about ICTS linked to adversary states but would be wary of creating a new powerful administrative office with broad investigation, secrecy, and enforcement powers.
Concerns would focus on government overreach, regulatory burden on U.S. businesses, potential to disadvantage U.S. firms competitively, and limited judicial transparency.
Some conservatives might support targeted restrictions on technologies tied to hostile actors but oppose the bill as written without stronger limits, congressional oversight, and safeguards against bureaucratic expansion.
The path through Congress.
Reached or meaningfully advanced
Reached or meaningfully advanced
Still ahead
Still ahead
Still ahead
On substance the bill addresses a recognized national security problem (ICTS supply-chain risk) and contains compromise features (mitigation options, advisory committee, DNI input), which increase viability. Offsetting that are significant expansions of executive regulatory and enforcement power, strong penalties, procedural exemptions, and limited judicial remedies that tend to trigger legal and stakeholder opposition. Judged solely on content and typical legislative patterns, it has a roughly even chance pending negotiation on scope, due-process safeguards, resource/funding provisions, and industry accommodations.
- No explicit appropriation or staffing/funding mechanism is specified; actual budgetary impact and CBO scoring could alter legislative support.
- Degree of industry support or opposition is unknown—major technology and telecom firms' reactions would materially affect Congressional willingness to advance the bill.
Recent votes on the bill.
No vote history yet
The bill has not accumulated any surfaced votes yet.
Go deeper than the headline read.
Transparency and due process: liberals and centrists want more transparency and procedural safeguards; conservatives worry about expanded a…
On substance the bill addresses a recognized national security problem (ICTS supply-chain risk) and contains compromise features (mitigatio…
Relative to its intended legislative type, this bill establishes a clear statutory framework that creates new substantive regulatory authority over ICTS-related transactions, implements an institutional home within BIS,…
Go beyond the headline summary with full stakeholder mapping, legislative design analysis, passage barriers, and lens-by-lens tradeoff breakdowns.