This bill reauthorizes the PROTECT Our Children Act of 2008 with updated requirements. It mandates a National Strategy for child exploitation prevention to be reviewed every four years (instead of every two), requiring detailed analyses of trends, resource needs, and ICAC task force performance. The bill modifies ICAC task force operations to include prioritizing victim identification, expands coordination with tribal/military agencies, and adds limited liability protections for task forces regarding investigative decisions. It increases annual funding for the program from $70 million (2026) to $90 million (2028), directly affecting federal agencies (DOJ, FBI, ICE), state/local law enforcement, and ICAC task forces nationwide.
HR 6161, the SEC Data Protection Act, requires the Securities and Exchange Commission (SEC) to establish policies protecting sensitive nonpublic data provided by investment advisers. The bill mandates that within one year of enactment, the SEC create rules addressing when it requests such data, safeguarding it based on sensitivity, restricting access to authorized staff, and preventing unauthorized use or disclosure. These policies must be developed through a notice-and-comment rulemaking process. The law directly affects investment advisers who share proprietary information with the SEC, ensuring their data is handled securely under new federal standards.
The Empowering App-Based Workers Act requires digital labor platforms (like ride-hail and delivery services) to disclose how they use algorithms and electronic monitoring tools to determine worker pay and assignments. It caps the percentage of consumer payments that platforms can keep (take rate) at 25% for ride-hail services and mandates detailed weekly pay statements showing compensation, take rate, and other work metrics. The bill prohibits platforms from using algorithms to set different pay rates for similar work based on protected characteristics like race or gender. These provisions directly affect app-based workers, platform companies, and consumers, aiming to create more transparent and fair working conditions in the gig economy. The bill does not override existing state or local laws that provide greater protections for workers.
HR 3108, the RPM Access Act, increases Medicare reimbursement for remote patient monitoring (RPM) in rural areas by setting a minimum reimbursement floor of 100% for practice expenses and malpractice costs starting in 2026. It requires that RPM services include real-time physician availability to address health issues, use data systems compatible with electronic health records, and mandates providers to report data on cost savings and adherence to medications. The bill directly affects rural Medicare beneficiaries with chronic conditions like heart failure and diabetes, as well as healthcare providers delivering RPM services in underserved rural communities. It also requires a 5-year report to Congress analyzing cost savings from RPM use, including reduced hospitalizations and medication adherence. The law aims to improve access to RPM in rural areas where healthcare shortages are most severe.
HR 6315 (SECURE IT Act) requires federal election cybersecurity testing for voting systems and establishes a voluntary program for identifying vulnerabilities. It mandates accredited labs to conduct penetration testing on voting hardware/software within 180 days, and creates a 5-year pilot program where election system vendors can voluntarily share systems with vetted cybersecurity researchers. Researchers must report vulnerabilities to vendors and officials within 180 days, and vendors must provide fixes to election officials for critical issues, with patches reviewed by the Commission within 90 days. The bill grants legal protections for researchers under the Computer Fraud and Abuse Act and Digital Millennium Copyright Act, exempting vulnerability disclosures from public disclosure laws. This directly affects election system vendors, cybersecurity researchers, and state/local election officials managing election infrastructure.
The Undersea Cable Protection Act of 2025 prohibits the National Marine Sanctuaries Act from requiring additional authorizations for undersea fiber optic cables that already have federal or state permits. It directly affects cable operators who have obtained licenses, leases, or permits from any federal or state agency for cable installation or maintenance in national marine sanctuaries. The bill prevents the Secretary from blocking or demanding new permits for these cables once they have valid existing authorization. This simplifies regulatory processes by eliminating redundant federal oversight for cables already approved by other agencies.
This bill establishes a Senior Advisor for National Security within the USDA to coordinate national security efforts related to food and agriculture. It requires the USDA Secretary to submit biennial reports to Congress and the National Security Council identifying vulnerabilities such as foreign control of agricultural data, supply chain disruptions, cybersecurity risks, and dependence on foreign-sourced inputs. The bill mandates improved interagency coordination, including sharing personnel with defense and intelligence agencies, and requires the USDA to assess gaps in security efforts and propose solutions. The primary direct effect is on the USDA's internal operations and reporting structure, not on agricultural policies or farmers.
HR 4491, the SBA IT Modernization Reporting Act, requires the Small Business Administration (SBA) to implement specific recommendations from a 2024 GAO report about risks in its newly deployed IT systems. The bill mandates that SBA’s Administrator submit, within 180 days of enactment, a detailed implementation plan to Congress outlining how the agency will manage risks for all IT modernization projects. This plan must include 11 specific requirements, such as documenting risk sources, using GAO’s established guidelines for scheduling (GAO-16-89G) and cost estimation (GAO-20-195G), and involving cybersecurity experts in contractor selection. The SBA must also provide a briefing to congressional committees 30 days after submitting the plan.
The STEM Pathways for the Future Act creates a new grant program at the National Science Foundation to fund STEM apprenticeship programs not offered by four-year colleges. Eligible recipients include states, tribes, cities, community colleges, and minority-serving institutions, which can use grants for recruiting participants, incorporating emerging technology, and forming private-sector partnerships. The bill prohibits grant funds from being used to incentivize business relocations and establishes an interagency task force to identify existing federal STEM training programs at community colleges and registered apprenticeships within one year. This legislation directly supports workforce development in science, technology, engineering, and math fields through accessible apprenticeship opportunities.
The SHADOW Act creates a new State Department Coordinator to lead U.S. efforts against hybrid warfare threats from China and Russia, particularly in Europe. The Coordinator will assess threats like cyberattacks and disinformation campaigns, coordinate with NATO allies and partners (including Japan and Australia), and help protect critical infrastructure sectors. The bill requires the Coordinator to submit a strategy within 60 days and annual reports for three years detailing threat assessments and coordination progress. It also mandates a specific report within 180 days identifying Chinese entities supporting Russia’s defense industry.
