DETECT Act

The DETECT Act requires the National Institute of Standards and Technology (NIST) to develop security guidelines for federal agencies using drone systems connected to government networks, including minimum cybersecurity standards for critical components like cameras and data systems. Agencies must implement these guidelines through a pilot program within one year, and contractors must report security vulnerabilities in drone systems they manage. The law mandates a 2-year delay before agencies can prohibit purchasing drones that don’t meet the new standards, with limited exemptions for commercial data collection. It also establishes reporting requirements for vulnerabilities and annual congressional reports on waiver approvals for non-compliant drones. The bill directly affects all federal agencies operating drone systems linked to government information networks, excluding national security systems.