HR-866-119
Received in the Senate.
Sponsored by Robert Latta (R-OH)
What it does
This bill would direct the Secretary of Commerce — acting through the National Telecommunications and Information Administration (NTIA) — to conduct a study of the national security risks and cybersecurity vulnerabilities posed by consumer routers, modems, and combination modem-router devices that are designed, developed, manufactured, or supplied by companies owned by, controlled by, or subject to the influence of a "covered country." Covered countries are defined by reference to an existing defense statute (10 U.S.C. § 4872(f)(2)), which currently includes China, Russia, Iran, North Korea, Cuba, and Venezuela. The Secretary must submit a report of findings to the relevant House and Senate commerce committees within one year of enactment.
Who benefits
U.S. consumers and households who use home networking equipment and may be unaware of potential security vulnerabilities. Internet service providers (ISPs) that could use study findings to inform procurement decisions. U.S.-based router and modem manufacturers (such as Netgear, Motorola, and Arris) who may gain competitive advantage if the study leads to restrictions on foreign competitors. National security and cybersecurity agencies (e.g., CISA, NSA) that would receive a formal evidence base for future policy. Congress, which would gain a structured assessment to inform potential follow-on legislation.
Who is hurt
Manufacturers based in covered countries — most prominently Chinese companies such as TP-Link, Huawei, and ZTE — whose products could face future regulatory action based on study findings. U.S. retailers and distributors that carry these products. Consumers who prefer lower-cost routers and modems often made by covered-country manufacturers, and who could face higher prices if future restrictions reduce market competition. NTIA staff who would bear the administrative burden of conducting the study within the one-year deadline.
Supporters argue
Supporters argue that consumer routers and modems are the gateway to every home network, making them a high-value target for foreign intelligence services. They point to documented incidents — including a 2024 FBI and CISA advisory warning that Chinese state-sponsored actors had compromised U.S. telecommunications infrastructure — as evidence that the threat is real and active. They contend that a formal, government-led study is a measured first step that gathers evidence before imposing any restrictions, ensuring that any future policy is grounded in data rather than assumption.
Opponents argue
Opponents argue that the bill may produce a study with limited practical impact, since Congress already has access to classified intelligence assessments on this topic through existing oversight channels. They contend that singling out "covered countries" by statute — without a classified, device-specific technical review — risks being overbroad, potentially sweeping in products with no demonstrated vulnerability while doing little to address software-based threats in devices manufactured elsewhere. Critics also note that the one-year timeline may be insufficient for a rigorous, technically credible assessment of a rapidly evolving threat landscape.
Constitutional context
Congress has broad authority to regulate foreign commerce and direct executive branch studies under the Commerce Clause (Art. I, §8, cl. 3) and its general legislative powers. No significant constitutional tension is raised by directing an executive agency to conduct a study and report findings; this is a routine exercise of congressional oversight authority. The bill does not itself impose restrictions on devices or companies, so First Amendment, Fourth Amendment, or Due Process challenges are not directly implicated at this stage.
Checks and balances
The executive branch (NTIA/Commerce) gains a directed research mandate; Congress retains oversight through the required committee report, and any follow-on regulatory or legislative action would require additional congressional or agency action subject to standard judicial review.
Historical precedent
The Secure and Trusted Communications Networks Act of 2019 similarly directed the FCC to identify and restrict telecommunications equipment from companies posing national security risks — most notably Huawei and ZTE — and is a directly analogous precedent for using federal study and designation processes to address foreign technology threats.