IV 

House Calendar No. 67 

116TH CONGRESS 

2D SESSION H. RES. 575 

[Report No. 116–368, Part I] 

Expressing the sense of the House of Representatives that all stakeholders 

in the deployment of 5G communications infrastructure should carefully 

consider and adhere to the recommendations of ‘‘The Prague Proposals’’. 

IN THE HOUSE OF REPRESENTATIVES 

SEPTEMBER 24, 2019 

Mr. FLORES (for himself and Mr. SOTO) submitted the following resolution; 

which was referred to the Committee on Energy and Commerce, and in 

addition to the Committee on Foreign Affairs, for a period to be subsequently determined by the Speaker, in each case for consideration of such 

provisions as fall within the jurisdiction of the committee concerned 

JANUARY 7, 2020 

Reported from the Committee on Energy and Commerce with amendments 

[Strike out the preamble and insert the part printed in italic] 

[Strike out all after the resolving clause and insert the part printed in italic] 

JANUARY 7, 2020 

Committee on Foreign Affairs discharged; referred to the House Calendar and 

ordered to be printed 

[For text and preamble of introduced resolution, see copy of resolution as introduced on 

September 24, 2019] 

RESOLUTION 

Expressing the sense of the House of Representatives that 

all stakeholders in the deployment of 5G communications 


pamtmann on DSKBC07HB2PROD with BILLS
2 

•HRES 575 RH 

infrastructure should carefully consider and adhere to 

the recommendations of ‘‘The Prague Proposals’’. 

Whereas 5G, the next generation (5th generation) in wireless 

technology, promises the next evolution of communications 

and information technology services, applications, and capabilities across every sector of business, government, entertainment, and communications; 

Whereas the United States, Europe, China, and others are racing toward 5G adoption and upgrading existing networks, 

which will drive subsequent advances in artificial intelligence, machine learning, smart homes, smart cities, robotics, autonomous vehicles, and quantum computers; 

Whereas 5G will make possible the automatization of everyday 

activities and the use of the full potential of the Internet 

of Things; 

Whereas these developments, while evolutionary, could include 

risks to important public interests, including privacy, 

data security, public safety, and national security; 

Whereas in a highly connected world, disruption of the integrity, confidentiality, or availability of communications or 

even the disruption of the communications service itself 

can seriously hamper everyday life, societal functions, the 

economy, and national security; 

Whereas the security of 5G networks is crucial for national security, economic security, and other United States national interests and global stability; 

Whereas operators of communications infrastructure depend on 

a complex supply chain of technology from a global market 

of suppliers and service providers; 


pamtmann on DSKBC07HB2PROD with BILLS
3 

•HRES 575 RH 

Whereas government security officials and experts from 32 

countries came together in Prague in May of 2019 to work 

out guidelines for the deployment and security of 5G networks; 

Whereas representatives agreed that ‘‘[m]ajor security risks emanate from the cross-border complexities of an increasingly 

global supply chain which provides [information and communications technology] equipment. These risks should be 

considered as part of the risk assessment based on relevant 

information and should seek to prevent proliferation of 

compromised devices and the use of malicious code and 

functions.’’; and 

Whereas the Prague 5G Security Conference adopted security 

recommendations, which have come to be known as ‘‘The 

Prague Proposals’’: Now, therefore, be it 

1 Resolved, 

2 SECTION 1. SENSE OF THE HOUSE OF REPRESENTATIVES. 

3 The House of Representatives— 

4 (1) urges all stakeholders in the deployment of 

5 5G communications infrastructure to carefully con6 sider adherence to the recommendations of ‘‘The 

7 Prague Proposals’’ (as described in section 2) as they 

8 procure products and services across their supply 

9 chain; and 

10 (2) encourages the President and Federal agen11 cies to promote global trade and security policies that 

12 are consistent with ‘‘The Prague Proposals’’ and urge 


pamtmann on DSKBC07HB2PROD with BILLS
4 

•HRES 575 RH 

1 our allies to embrace the recommendations of ‘‘The 

2 Prague Proposals’’ for their 5G infrastructure. 

3 SEC. 2. PRAGUE PROPOSALS. 

4 The text of ‘‘The Prague Proposals’’ is as follows: 

5 (1) ‘‘POLICY’’.— 

6 (A) ‘‘Communication networks and services 

7 should be designed with resilience and security 

8 in mind. They should be built and maintained 

9 using international, open, consensus-based stand10 ards and risk-informed cybersecurity best prac11 tices. Clear globally interoperable cyber security 

12 guidance that would support cyber security 

13 products and services in increasing resilience of 

14 all stakeholders should be promoted.’’. 

15 (B) ‘‘Every country is free, in accordance 

16 with international law, to set its own national 

17 security and law enforcement requirements, 

18 which should respect privacy and adhere to laws 

19 protecting information from improper collection 

20 and misuse.’’. 

21 (C) ‘‘Laws and policies governing networks 

22 and connectivity services should be guided by the 

23 principles of transparency and equitability, tak24 ing into account the global economy and interVerDate Sep 11 2014 00:31 Jan 08, 2020 Jkt 099200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6203 E:\BILLS\HR575.RH HR575

pamtmann on DSKBC07HB2PROD with BILLS
5 

•HRES 575 RH 

1 operable rules, with sufficient oversight and re2 spect for the rule of law.’’. 

3 (D) ‘‘The overall risk of influence on a sup4 plier by a third country should be taken into ac5 count, notably in relation to its model of govern6 ance, the absence of cooperation agreements on 

7 security, or similar arrangements, such as ade8 quacy decisions, as regards data protection, or 

9 whether this country is a party to multilateral, 

10 international or bilateral agreements on cyberse11 curity, the fight against cybercrime, or data pro12 tection.’’. 

13 (2) ‘‘TECHNOLOGY’’.— 

14 (A) ‘‘Stakeholders should regularly conduct 

15 vulnerability assessments and risk mitigation 

16 within all components and network systems, 

17 prior to product release and during system oper18 ation, and promote a culture of find/fix/patch to 

19 mitigate identified vulnerabilities and rapidly 

20 deploy fixes or patches.’’. 

21 (B) ‘‘Risk assessments of supplier’s products 

22 should take into account all relevant factors, in23 cluding applicable legal environment and other 

24 aspects of supplier’s ecosystem, as these factors 


pamtmann on DSKBC07HB2PROD with BILLS
6 

•HRES 575 RH 

1 may be relevant to stakeholders’ efforts to main2 tain the highest possible level of cyber security.’’. 

3 (C) ‘‘When building up resilience and secu4 rity, it should be taken into consideration that 

5 malicious cyber activities do not always require 

6 the exploitation of a technical vulnerability, e.g. 

7 in the event of insider attack.’’. 

8 (D) ‘‘In order to increase the benefits of 

9 global communication, States should adopt poli10 cies to enable efficient and secure network data 

11 flows.’’. 

12 (E) ‘‘Stakeholders should take into consider13 ation technological changes accompanying 5G 

14 networks roll out, e.g. use of edge computing and 

15 software defined network/network function 

16 virtualization, and its impact on overall security 

17 of communication channels.’’. 

18 (F) ‘‘Customer—whether the government, 

19 operator, or manufacturer—must be able to be 

20 informed about the origin and pedigree of com21 ponents and software that affect the security level 

22 of the product or service, according to state of art 

23 and relevant commercial and technical practices, 

24 including transparency of maintenance, updates, 

25 and remediation of the products and services.’’. 


pamtmann on DSKBC07HB2PROD with BILLS
7 

•HRES 575 RH 

1 (3) ‘‘ECONOMY’’.— 

2 (A) ‘‘A diverse and vibrant communications 

3 equipment market and supply chain are essen4 tial for security and economic resilience.’’. 

5 (B) ‘‘Robust investment in research and de6 velopment benefits the global economy and tech7 nological advancement and is a way to poten8 tially increase diversity of technological solutions 

9 with positive effects on security of communica10 tion networks.’’. 

11 (C) ‘‘Communication networks and network 

12 services should be financed openly and trans13 parently using standard best practices in pro14 curement, investment, and contracting.’’. 

15 (D) ‘‘State-sponsored incentives, subsidies, 

16 or financing of 5G communication networks and 

17 service providers should respect principles of 

18 fairness, be commercially reasonable, conducted 

19 openly and transparently, based on open market 

20 competitive principles, while taking into account 

21 trade obligations.’’. 

22 (E) ‘‘Effective oversight on key financial 

23 and investment instruments influencing tele24 communication network development is crit25 ical.’’. 


pamtmann on DSKBC07HB2PROD with BILLS
8 

•HRES 575 RH 

1 (F) ‘‘Communication networks and network 

2 service providers should have transparent owner3 ship, partnerships, and corporate governance 

4 structures.’’. 

5 (4) ‘‘SECURITY, PRIVACY, AND RESILIENCE’’.— 

6 (A) ‘‘All stakeholders including industry 

7 should work together to promote security and re8 silience of national critical infrastructure net9 works, systems, and connected devices.’’. 

10 (B) ‘‘Sharing experience and best practices, 

11 including assistance, as appropriate, with miti12 gation, investigation, response, and recovery 

13 from network attacks, compromises, or disrup14 tions should be promoted.’’. 

15 (C) ‘‘Security and risk assessments of ven16 dors and network technologies should take into 

17 account rule of law, security environment, ven18 dor malfeasance, and compliance with open, 

19 interoperable, secure standards, and industry 

20 best practices to promote a vibrant and robust 

21 cyber security supply of products and services to 

22 deal with the rising challenges.’’. 

23 (D) ‘‘Risk management framework in a 

24 manner that respects data protection principles 


pamtmann on DSKBC07HB2PROD with BILLS
9 

•HRES 575 RH 

1 to ensure privacy of citizens using network 

2 equipment and services should be implemented.’’. 

Amend the title so as to read: ‘‘Resolution expressing the sense of the House of Representatives that all 

stakeholders in the deployment of 5G communications infrastructure should carefully consider adherence to the 

recommendations of ‘The Prague Proposals’.’’. 


pamtmann on DSKBC07HB2PROD with BILLS
House Calendar No. 67 

116TH CONGRESS 

2D SESSION H. RES. 575 

RESOLUTION 

[Report No. 116–368, Part I] 

Expressing the sense of the House of Representations of ‘‘The Prague Proposals’’. fully consider and adhere to the recommenda- 5G communications infrastructure should care- tives that all stakeholders in the deployment of 

JANUARY 7, 2020 

Reported from the Committee on Energy and Commerce 

J

with amendments 

ANUARY 7, 2020 

Committee on Foreign Affairs discharged; referred to the 

House Calendar and ordered to be printed 


pamtmann on DSKBC07HB2PROD with BILLS