HR-8926-119
Referred to the House Committee on Energy and Commerce.
Sponsored by Valerie Foushee (D-NC)
What it does
This bill would direct the Assistant Secretary of Commerce for Communications and Information to create a grant program providing up to $500 million per year (fiscal years 2027–2030) to help state and local governments update their technology systems. Grants would be split 50/50 between population-based allocations and need-based allocations, with at least 70% of each state's funds required to flow directly to local governments. States receiving funds would need to meet certain technology governance standards, including having a Chief Data Officer, data privacy policies, and compliance with federal cybersecurity frameworks.
Who benefits
State and local government agencies that use outdated technology systems. Residents who interact with government services (permitting, benefits, public records) that would become faster or more secure. Cybersecurity firms, AI vendors, and technology contractors who would compete for government modernization contracts. Smaller and rural local governments that currently lack resources to upgrade systems independently. Federally recognized Indian Tribes, which are included in the bill's definition of "State." Post-quantum cryptography vendors and consultants. Government IT staff who would receive training and hiring support.
Who is hurt
Incumbent legacy technology vendors whose older systems may be replaced. States and localities that do not meet the bill's "covered mandates" (Chief Data Officer, data privacy policies, NIST cybersecurity compliance) and may have a portion of their funds restricted. Taxpayers who bear the cost of the $2 billion total authorization. States with smaller populations may receive less in the population-based allocation tier relative to their modernization needs. Private-sector technology companies that compete with government-modernized digital services.
Supporters argue
Supporters argue that outdated government technology creates serious security vulnerabilities — ransomware attacks on state and local governments increased by over 50% between 2018 and 2023, costing hundreds of millions in recovery expenses. They contend that the bill's dual-track funding formula (population-based plus needs-based) ensures both equitable distribution and targeted help for the most underserved governments, while the 70% local passthrough requirement ensures funds reach frontline service providers rather than being absorbed at the state level.
Opponents argue
Opponents argue that the bill creates a new federal grant bureaucracy with broad discretionary authority — the Assistant Secretary alone determines "need" and compliance with "covered mandates" — giving a single federal official significant leverage over state technology governance decisions, which have traditionally been state prerogatives. They contend that $2 billion over four years is insufficient to meaningfully modernize thousands of government entities nationwide, and that attaching federal compliance conditions (NIST frameworks, Chief Data Officers) amounts to indirect federal mandates on state administrative structures.
Constitutional context
Congress has broad authority to attach conditions to federal grants under the Spending Clause (Art. I, §8, cl. 1), provided conditions are unambiguous and not coercive (South Dakota v. Dole, 1987). The bill's requirement that states comply with NIST cybersecurity frameworks and data governance standards as a condition of receiving funds is a standard exercise of this authority. No active constitutional tension area is directly implicated, though post-Loper Bright (2024), courts would independently review any agency interpretations of the bill's ambiguous terms — such as what constitutes "substantially similar" to a Chief Data Officer.
Checks and balances
The Executive Branch (Assistant Secretary of Commerce/NTIA) gains new grant-making and compliance-determination authority; Congress retains oversight through a mandatory 4-year briefing requirement and controls funding levels through the annual appropriations process.
Historical precedent
The State and Local Cybersecurity Grant Program, established under the Infrastructure Investment and Jobs Act of 2021, similarly provided federal grants to state and local governments for cybersecurity improvements with NIST-aligned compliance conditions.