Cybersecurity Policy Report, Pallone, Guthrie Offer Bill to Limit ‘Covered List’ Additions to Entities Controlled by ‘Adversaries’, (Sep 24, 2026)

By Lynn Stanton

House Energy and Commerce Committee ranking member Frank Pallone Jr. (D., N.J.) and Chairman Brett Guthrie (R., Ky.) have introduced a bill that would expand the definition of equipment that could be added to the FCC’s “covered list” of equipment and services deemed a national security risk, as well as adding criteria that could trigger inclusion, limiting additions to those from an entity controlled by one of four “foreign adversaries.”

The Communications and Technology Transparency Act would replace the 2019 Secure and Trusted Communications Networks Act’s reference to “communications equipment or service” to be placed on the covered list with a reference to “information and communication technology or service” as defined in 15 CFR 791.2.

“This update broadens the types of technologies the FCC must add to its covered list and creates better alignment between the FCC’s national security work and the Department of Commerce’s work,” according to a section-by-section outline of the bill released by the sponsors.

It would bar the FCC from adding any new technology or service to the covered list after enactment unless it was produced or provided by an entity controlled by a foreign adversary, defined as having the same meaning “given the term ‘covered nation’ in section 4872(f)(2) of title 10, United States Code,” that is, North Korea, China, Russia, and Iran.

The bill would also bar the FCC from granting any authorization or license to any entity on the covered list and would allow Congress to use the Congressional Review Act to overturn decisions to add or remove a class or category of information and communications technologies or services that did not reference a particular entity, according the section-by-section.

It would require the FCC to give Congress seven days’ notice before adding any technology or service to the list; to notify the Department of Congress within 60 days of receiving notice that an information and communications technology or service posed an unacceptable risk to national security; and to meet every 90 days with the secretary of Commerce to consult and coordinate on the covered list, with an invitation to the head of each national security agency to attend as well; and to submit an annual, unclassified report to Congress on the results of the meetings with Commerce.

The bill would clarify “that the FCC is not required to retroactively review or revoke any equipment authorization that was granted before the relevant equipment was placed on its covered list,” the section-by-section states. “This requirement offers stability to American consumers and companies so that they do not face a sudden disruption by the placement of certain technology or equipment on the FCC’s covered list.”

In a joint statement, Reps. Pallone and Guthrie said, “The current process for identifying and barring malicious foreign technology has worked in many cases, but lacks the transparency, consistency, and clarity needed to meet our long-term national security needs as technology rapidly advances. Having learned important lessons since the Secure and Trusted Communications Networks Act was signed into law, it’s time for Congress to address these discrepancies and ensure there are no gaps in how we deal with our foreign adversaries or the telecom equipment they develop and control.

“Every day our adversaries are relentless in their attempts to breach our communications networks, and every day those efforts become increasingly sophisticated. This bill meets that challenge, builds on our past efforts, and creates an enduring and transparent process for safeguarding and securing America’s communications networks,” they added.

News: FederalLegislation DataSecurity