I 
119TH CONGRESS 
1ST SESSION H. R. 3447 
To require the Secretary of Commerce to issue standards with respect to 
chip security mechanisms for integrated circuit products, and for other 
purposes. 
IN THE HOUSE OF REPRESENTATIVES 
MAY 15, 2025 
Mr. 
HUIZENGA
(for 
himself, 
Mr. 
FOSTER, 
Mr. 
MOOLENAAR, 
Mr. 
KRISHNAMOORTHI, Mr. CRAWFORD, Mr. LIEU, Mr. LAHOOD, and Mr. 
GOTTHEIMER) introduced the following bill; which was referred to the 
Committee on Foreign Affairs 
A BILL 
To require the Secretary of Commerce to issue standards 
with respect to chip security mechanisms for integrated 
circuit products, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Chip Security Act’’. 
SEC. 2. SENSE OF CONGRESS. 
It is the sense of Congress that— 
(1) technology developed in the United States 
should serve as the foundation for the global eco-
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
system of artificial intelligence to advance the for-
eign policy and national security objectives of the 
United States and allies and partners of the United 
States; 
(2) the United States can foster goodwill, 
strengthen relationships, and support innovative re-
search around the world by providing allies and 
partners of the United States with advanced com-
puting capabilities; 
(3) advanced integrated circuits and computing 
hardware that is exported from the United States 
must be protected from diversion, theft, and other 
unauthorized use or exploitation in order to bolster 
the competitiveness of the United States and protect 
the national security of the United States; 
(4) implementing chip security mechanisms will 
improve compliance with the export control laws of 
the United States, assist allies and partners with 
guarding computing hardware, and enhance protec-
tions from bad actors looking to access, divert, or 
tamper with advanced integrated circuits and com-
puting hardware; and 
(5) implementing chip security mechanisms may 
help with the detection of smuggling or exploitation 
of advanced integrated circuits and computing hard-
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
ware, thereby allowing for increased flexibility in ex-
port controls and opening the door for more inter-
national partners to receive streamlined and larger 
shipments of advanced computing hardware. 
SEC. 3. DEFINITIONS. 
In this Act: 
(1) APPROPRIATE
CONGRESSIONAL
COMMIT-
TEES.—The term ‘‘appropriate congressional com-
mittees’’ means— 
(A) the Committee on Banking, Housing, 
and Urban Affairs of the Senate; and 
(B) the Committee on Foreign Affairs of 
the House of Representatives. 
(2) CHIP
SECURITY
MECHANISM.—The term 
‘‘chip security mechanism’’ means a software-, 
firmware-, or hardware-enabled security mechanism 
or a physical security mechanism. 
(3) COVERED
INTEGRATED
CIRCUIT
PROD-
UCT.—The term ‘‘covered integrated circuit prod-
uct’’ means— 
(A) an integrated circuit classified under 
Export Control Classification Number 3A090 or 
3A001.z; 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(B) a computer or other product classified 
under Export Control Classification Number 
4A090 or 4A003.z; or 
(C) an integrated circuit or computer or a 
product containing an integrated circuit or com-
puter that is classified under an Export Control 
Classification Number that is a successor or 
substantially similar to the numbers listed in 
subparagraphs (A) and (B). 
(4) EXPORT.—The term ‘‘export’’ has the 
meaning given that term in section 1742(3) of the 
Export Control Reform Act of 2018 (50 U.S.C. 
4801(3)). 
(5) IN-COUNTRY
TRANSFER.—The term ‘‘in- 
country transfer’’ has the meaning given that term 
in section 1742(6) of the Export Control Reform Act 
of 2018 (50 U.S.C. 4801(6)). 
(6) REEXPORT.—The term ‘‘reexport’’ has the 
meaning given that term in section 1742(9) of the 
Export Control Reform Act of 2018 (50 U.S.C. 
4801(9)). 
(7) SECRETARY.—The term ‘‘Secretary’’ means 
the Secretary of Commerce. 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
SEC. 4. REQUIREMENTS FOR SECURITY MECHANISMS FOR 
EXPORT OF INTEGRATED CIRCUIT PROD-
UCTS. 
(a) PRIMARY REQUIREMENTS FOR CHIP SECURITY 
MECHANISMS.— 
(1) IN
GENERAL.—Not later than 180 days 
after the date of the enactment of this Act, the Sec-
retary shall require any covered integrated circuit 
product to be outfitted with chip security mecha-
nisms that implement location verification, using 
techniques that are feasible and appropriate on such 
date of enactment, before it is exported, reexported, 
or in-country transferred to or in a foreign country. 
(2) NOTIFICATION
REQUIREMENT.—Not later 
than 180 days after the date of the enactment of 
this Act, the Secretary shall require any person that 
has received a license or other authorization under 
the Export Control Reform Act of 2018 (50 U.S.C. 
4811 et seq.) to export, reexport, or in-country 
transfer a covered integrated circuit product to 
promptly report to the Under Secretary of Industry 
and Security, if the person obtains credible informa-
tion that the product— 
(A) is in a location other than the location 
specified in the application for the license or 
other authorization; 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(B) has been diverted to a user other than 
the user specified in the application; or 
(C) has been subjected to tampering or an 
attempt at tampering, including efforts to dis-
able, spoof, manipulate, mislead or circumvent 
location verification mechanisms or other chip 
security mechanisms. 
(b) DEVELOPMENT OF SECONDARY REQUIREMENTS 
FOR CHIP SECURITY MECHANISMS.— 
(1) ASSESSMENT.— 
(A) IN GENERAL.—Not later than one year 
after the date of the enactment of this Act, the 
Secretary shall— 
(i) conduct an assessment to identify 
what additional mechanisms, if any, should 
be added to the primary chip security 
mechanisms required under subsection 
(a)(1)— 
(I) to enhance compliance with 
the requirements of the Export Con-
trol Reform Act of 2018; 
(II) to prevent, hinder, and de-
tect the unauthorized use, access, or 
exploitation of covered integrated cir-
cuit products; 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(III) to identify and monitor 
smuggling intermediaries; and 
(IV) to achieve any national secu-
rity or foreign policy objective of the 
United States that the Secretary con-
siders appropriate; and 
(ii) if the Secretary identifies any 
such mechanism, develop requirements for 
outfitting covered integrated circuit prod-
ucts with that mechanism. 
(B) ELEMENTS.—The assessment required 
by paragraph (1) shall include— 
(i) an examination of the feasibility, 
reliability, and effectiveness of— 
(I) methods and strategies that 
prevent the tampering, disabling, or 
other manipulating of covered inte-
grated circuit products; 
(II) workload verification meth-
ods; 
(III) methods to modify the 
functionality of covered integrated cir-
cuit products that have been illicitly 
acquired; and 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(IV) any other method the Sec-
retary determines appropriate for the 
prevention of unauthorized use, ac-
cess, or exploitation of covered inte-
grated circuit products; 
(ii) an analysis of— 
(I) the potential costs associated 
with implementing each method exam-
ined under clause (i), including an 
analysis of— 
(aa) the potential impact of 
the method on the performance 
of 
covered 
integrated 
circuit 
products; and 
(bb) the potential for the in-
troduction of new vulnerabilities 
into the products; 
(II) the potential benefits of im-
plementing the methods examined 
under clause (i), including an analysis 
of the potential increase— 
(aa) in compliance of cov-
ered integrated circuit products 
with the requirements of the Ex-
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
port Control Reform Act of 2018; 
and 
(bb) in detecting, hindering, 
and preventing unauthorized use, 
access, or exploitation of the 
products; and 
(III) the susceptibility of the 
methods examined under clause (i) to 
tampering, disabling, or other forms 
of manipulation; and 
(iii) an estimate of the expected costs 
to implement at-scale methods to tamper 
with, disable, or manipulate a covered inte-
grated circuit product, or otherwise cir-
cumvent the methods examined under 
clause (i). 
(2) REPORT TO CONGRESS.— 
(A) IN GENERAL.—Not later than one year 
after the date of the enactment of this Act, the 
Secretary shall submit to the appropriate con-
gressional committees a report on the results of 
the assessment required by paragraph (1), in-
cluding— 
(i) an identification of the chip secu-
rity mechanisms, if any, to be included in 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
the requirements for secondary chip secu-
rity mechanisms; and 
(ii) if applicable, a roadmap for the 
timely implementation of the secondary 
chip security mechanisms. 
(B) FORM.—The report required by para-
graph (1) shall be submitted in unclassified 
form, but may include a classified annex. 
(3) IMPLEMENTATION.— 
(A) IN GENERAL.—If any mechanisms are 
determined by the Secretary to be appropriate, 
the Secretary shall, not later than 2 years after 
the date on which the Secretary completes the 
assessment required by paragraph (1), require 
any covered integrated circuit product to be 
outfitted with the secondary chip security mech-
anisms identified pursuant to paragraph (1)(A) 
before the product is exported, reexported, or 
in-country transferred to or in a foreign coun-
try. 
(B) PRIVACY.—In implementing require-
ments for secondary chip security mechanisms 
under subparagraph (A), the Secretary shall 
prioritize confidentiality. 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(c) ENFORCEMENT AUTHORITY.—In carrying out 
this section, the Secretary may— 
(1) verify, in a manner the Secretary deter-
mines appropriate, the ownership and location of a 
covered integrated circuit product that has been ex-
ported, reexported, or in-country transferred to or in 
a foreign country; 
(2) maintain a record of covered integrated cir-
cuit products and include in the record the location 
and current end-user of each such product; and 
(3) require any person who has been granted a 
license or other authorization under the Export Con-
trol Reform Act of 2018 to export, reexport, or in- 
country transfer a covered integrated circuit product 
to provide the information needed to maintain the 
record. 
(d) ANNUAL ASSESSMENT AND REPORT ON NEW 
CHIP SECURITY MECHANISMS.—Not later than 2 years 
after the date of the enactment of this Act, and annually 
thereafter for 3 years, the Secretary shall— 
(1) conduct an assessment of new chip security 
mechanisms that have been developed in the year 
preceding the date of the assessment; and 
(2) submit to the appropriate congressional 
committees a report that includes— 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB
(A) a summary of the results of the assess-
ment required by paragraph (1); 
(B) an evaluation of whether any of the 
new mechanisms assessed under paragraph (1) 
should be added to or replace any of the exist-
ing requirements for secondary chip security 
mechanisms developed under subsection (b)(1); 
and 
(C) any recommendations for modifications 
to relevant export controls to allow for more 
flexibility with respect to the countries to or in 
which covered integrated circuit products may 
be exported, reexported, or in-country trans-
ferred if the products include chip security 
mechanisms that meet the requirements devel-
oped under subsection (b)(1). 
Æ 
VerDate Sep 11 2014 
21:25 May 21, 2025
Jkt 059200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6301
E:\BILLS\H3447.IH
H3447
kjohnson on DSK7ZCZBW3PROD with $$_JOB