nology application that is operated, directly or indi-
rectly (including through a parent, subsidiary, or af-
filiate (as those terms are defined in section 230.405 
of title 17, Code of Federal Regulations (as in effect 
on the date of enactment of this Act))), by a covered 
entity. 
(6) HIGH-WATTAGE
IOT
DEVICE.—The term 
‘‘high-wattage IoT device’’ means any Internet-con-
nected appliance or device that is capable of con-
suming or controlling electrical power at a level ex-
ceeding 500 watts, regardless of whether the device 
is used or designed for use in residential or commer-
cial applications. 
(7) IOT.—The term ‘‘IoT’’ means Internet of 
Things. 
(8) RELEVANT FEDERAL OFFICIAL.—The term 
‘‘relevant Federal official’’ means— 
(A) any Federal official described in sec-
tion 1(a) of Executive Order 13873 (84 Fed. 
Reg. 22689; relating to securing the informa-
tion and communications technology and serv-
ices supply chain) (as in effect on the date of 
enactment of this Act) (or a designee of the ap-
plicable Federal official); and 
VerDate Sep 11 2014 
23:52 Jan 29, 2026
Jkt 069200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H7208.IH
H7208
ssavage on LAPJG3WLY3PROD with BILLS
(B) the head (or a designee of the head) 
of any other Federal department or agency 
that, in the determination of the Secretary of 
Commerce, is relevant to the purposes of this 
Act. 
SEC. 4. REPORT ON NATIONAL SECURITY RISKS POSED BY 
FOREIGN ADVERSARY-CONTROLLED APPLI-
CATIONS WITH THE CAPABILITY OF CON-
TROLLING HIGH-WATTAGE IOT DEVICES. 
(a) IN GENERAL.—Not later than 270 days after the 
date of enactment of this Act, the Secretary of Commerce, 
in coordination with other relevant Federal officials, shall 
submit to the Committee on Commerce, Science, and 
Transportation of the Senate and the Committee on En-
ergy and Commerce of the House of Representatives a re-
port assessing the national security risks associated with 
foreign adversary-controlled applications with the ability 
to attack or undermine critical infrastructure in the 
United States. 
(b) CONSIDERATIONS.—In preparing the report 
under subsection (a), the Secretary of Commerce shall 
consider, at a minimum— 
(1) the extent of deployment of high-wattage 
IoT devices across the United States; 
VerDate Sep 11 2014 
23:52 Jan 29, 2026
Jkt 069200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H7208.IH
H7208
ssavage on LAPJG3WLY3PROD with BILLS
(2) risks relating to foreign adversary-controlled 
applications, especially those incorporated into con-
sumer products that could be used to attack or oth-
erwise destabilize the electric grid; 
(3) potential impacts of those risks and any 
other relevant vulnerabilities on national security, in-
cluding the risks of frequency imbalances, cascading 
failures, and other disruptions to critical infrastruc-
ture; and 
(4) public comments and input from industry 
experts, domestic producers, importers, consumer 
groups, and other stakeholders regarding the secu-
rity of, and the extent of foreign influence over, for-
eign adversary-controlled applications and high-watt-
age IoT devices. 
(c) RECOMMENDATIONS.—The report submitted 
under subsection (a) shall include recommendations for 
mitigation measures to address any identified national se-
curity risks, which may include— 
(1) an assessment of how Executive Order 
13873 (84 Fed. Reg. 22689; relating to securing the 
information and communications technology and 
services supply chain) (as in effect on the date of en-
actment of this Act) may be applied to IoT devices, 
as such devices apply to the electric grid, to include 
VerDate Sep 11 2014 
23:52 Jan 29, 2026
Jkt 069200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H7208.IH
H7208
ssavage on LAPJG3WLY3PROD with BILLS
restrictions or conditions on transactions directly in-
volving foreign adversary-controlled applications in 
high-wattage IoT devices; 
(2) specifically restricting the procurement by 
the Federal Government of consumer products with 
a foreign adversary-controlled application; 
(3) certification or labeling requirements for 
high-wattage IoT devices; and 
(4) any other proposal, as determined necessary 
by the Secretary of Commerce, in consultation with 
other relevant Federal officials. 
SEC. 5. CODIFICATION OF EXECUTIVE ORDER 13873. 
(a) IN GENERAL.—The provisions of Executive Order 
13873 (84 Fed. Reg. 22689; relating to securing the infor-
mation and communications technology and services sup-
ply chain) (as in effect on the date of enactment of this 
Act) are enacted into law. 
(b) PUBLICATION.—In publishing this Act in slip 
form and in the United States Statutes at Large pursuant 
to section 112 of title 1, United States Code, the Archivist 
of the United States shall include after the date of ap-
proval at the end an appendix setting forth the text of 
the Executive order referred to in subsection (a) (as in 
effect on the date of enactment of this Act). 
Æ 
VerDate Sep 11 2014 
23:52 Jan 29, 2026
Jkt 069200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6301
E:\BILLS\H7208.IH
H7208
ssavage on LAPJG3WLY3PROD with BILLS