The Stop PRC Economic Espionage Act of 2026 expands the definition of a foreign instrumentality under U.S. law to include entities domiciled in covered nations, in addition to those substantially owned by foreign governments. This change directly affects investigations into economic espionage by broadening the scope of organizations that can be legally classified as foreign agents for the purpose of criminal prosecution. By amending the United States Code, the bill ensures that companies based in specific foreign countries are treated with the same scrutiny as those owned by foreign governments when accused of stealing trade secrets. The provision relies on existing definitions of covered nations found in the National Defense Authorization Act to determine which countries are included in this expanded category.
The Quiet Skies Act directs the Secretary of Transportation to create new regulations banning voice calls on cell phones in the United States. This rule must be finalized within 180 days of the law's enactment and will apply to all air travelers. The bill aims to reduce noise on airplanes by prohibiting passengers from making or receiving phone calls while in flight.
This bill requires wagering and prediction market platforms to use facial recognition technology to verify that all users are over 18 years old before allowing them to place bets or orders. To protect user privacy, the law mandates that these platforms collect only the data strictly necessary for age verification and must delete any such data once it is no longer needed. The Federal Trade Commission is given the authority to enforce these age verification rules and can issue penalties for violations. Additionally, the legislation establishes a new Office of the Retail Advocate and an Advisory Council within the Commodity Futures Trading Commission to better protect individual investors and oversee the regulation of event contracts.
The FLOWS Act of 2026 creates a $50 million grant program to help rural water systems adopt digital technologies that improve efficiency, detect leaks, and protect against cyber threats. These funds are intended for owners of public water systems serving fewer than 3,300 people, with priority given to community-owned organizations and those in greatest need. The grants can cover the design and construction of smart water infrastructure, workforce training, and cybersecurity measures, while also allowing recipients to purchase necessary software. Additionally, the bill requires a five-year study to evaluate how these digital tools impact water loss, system resilience, and project costs in rural areas.
The Countering CCP Act requires the U.S. Food and Drug Administration to review medical devices made by Chinese manufacturers or those controlled by Chinese entities for potential cybersecurity vulnerabilities. Under this law, the agency must request detailed technical information from these companies within 180 days to assess whether patient data could be stored on servers in China or accessed by unauthorized parties. If a device is found to pose a cybersecurity risk or if a company fails to provide the requested information, the FDA can order an immediate recall and halt its distribution. Additionally, the bill mandates a comprehensive report on the cybersecurity preparedness of the U.S. medical device industry two years after the law takes effect.
The AI Security and Innovation Act establishes a new Center for AI Security and Innovation within the National Institute of Standards and Technology to assess risks and improve the security of artificial intelligence systems. This center will evaluate threats such as data leaks and model tampering, develop voluntary safety standards, and conduct research on advanced AI capabilities developed by both U.S. and foreign entities. The bill defines key terms like "artificial intelligence model" and "covered frontier system," and authorizes $20 million annually from 2027 to 2032 to fund the center's activities. While the center director will consult with various federal agencies and AI developers, the legislation explicitly prohibits the center from having regulatory or enforcement powers. The center is authorized to operate for five years before its provisions expire.
The PROTECT Act requires the Department of Homeland Security to share safety and data protection guidelines with government agencies and private organizations within a year of passing. These guidelines focus on how to securely handle personal information for law enforcement officers and employees, as well as steps they can take to stay safe. The law defines personal information broadly to include any data that can identify an individual, regardless of their citizenship status. This initiative aims to improve security practices across federal, state, local, and private sectors without changing existing legal requirements for data handling.
The AI OVERWATCH Act establishes new export controls on advanced integrated circuits destined for specific countries of concern, including China, Russia, Iran, North Korea, and Cuba. It requires companies to obtain a specific license for each export of high-performance chips, prohibiting the use of general licenses and mandating detailed certifications to Congress regarding national security and defense impacts. The bill defines these restricted chips by their technical processing power and creates a "trusted United States person" program that allows certain domestic entities to bypass licensing requirements if they meet strict security and ownership standards. Additionally, the legislation requires the government to develop an "American Artificial Intelligence Victory Strategy" outlining how to maintain U.S. leadership in AI against foreign competitors.
The Critical Infrastructure Airspace Defense Act grants owners and operators of high-risk facilities, such as power plants and substations, the legal authority to detect, track, and neutralize unauthorized drones threatening their safety. To use this power, personnel must complete a federally mandated training and certification program that ensures they follow specific operational standards and coordinate with aviation authorities. The legislation also provides $250 million in funding through 2031 to help these facilities purchase and install approved drone countermeasures while offering liability protection for authorized actions taken in good faith.
The Connected Vehicle Security Act of 2026 restricts the importation, sale, and use of connected vehicles and related technology from China, Russia, Iran, and North Korea to protect national security. Starting in 2027, the bill generally bans these vehicles if they originate from or are controlled by these countries, with separate restrictions on software and hardware taking effect in 2030. The Secretary of Commerce is authorized to issue specific exemptions for items that do not pose a security risk and must publish a list of approved products. The law also requires companies to submit declarations confirming their vehicles comply with the rules and imposes heavy fines for violations.
