H.R. 7208 — PROTECT the Grid Act

This section sets forth congressional findings on risks to U.S. electric grid stability from high-wattage Internet-of-Things (IoT) devices (e.g., electric vehicle chargers, clothes dryers, smart air conditioners) controlled by foreign adversaries—particularly People's Republic of China companies subject to state oversight and data-access mandates, which control over 25% of the U.S. major appliance industry and enable potential coordinated demand-manipulation attacks (i.e., MaDIoT attacks). It states that the purposes of the Act are to reinforce national security initiatives securing the domestic information and communications technology and services (ICTS) supply chain against such manipulation, especially by China, and to require the Secretary of Commerce, in consultation with other federal officials, to submit to Congress a report with findings and recommendations ensuring network-connected home appliances do not enable foreign adversary activities or jeopardize grid stability.

This section defines terms for purposes of the Act, including (1) “consumer product,” which has the meaning given in section 3(a) of the Consumer Product Safety Act (15 U.S.C. 2052(a)); (2) “covered entity,” meaning an entity subject to the jurisdiction of, operating on behalf of, owned by or controlled by, or subject to the direction or influence of a foreign adversary; (3) “critical infrastructure,” which has the meaning given in 42 U.S.C. 5195c(e); (4) “foreign adversary,” meaning any covered nation as defined in 10 U.S.C. 4872(f); (5) “foreign adversary-controlled application,” meaning a website, desktop application, mobile application, or augmented or immersive technology application operated by a covered entity; (6) “high-wattage IoT device,” meaning any Internet-connected appliance or device capable of consuming or controlling electrical power exceeding 500 watts; (7) “IoT,” meaning Internet of Things; and (8) “relevant Federal official,” meaning specified officials under Executive Order 13873 or designees of other relevant agency heads as determined by the Secretary of Commerce.

This section directs the Secretary of Commerce, in coordination with other relevant federal officials, to submit to the Senate Committee on Commerce, Science, and Transportation and the House Committee on Energy and Commerce, not later than 270 days after enactment, a report assessing national security risks posed by foreign adversary-controlled applications (i.e., software from entities in countries designated as foreign adversaries) with the capability to control high-wattage Internet of Things (IoT) devices and thereby attack or undermine U.S. critical infrastructure, such as the electric grid. In preparing the report, the Secretary must consider, at a minimum, (1) the extent of high-wattage IoT device deployment across the United States; (2) risks from such applications in consumer products that could destabilize the electric grid; (3) potential national security impacts, including frequency imbalances, cascading failures, and other disruptions; and (4) input from industry experts, domestic producers, importers, consumer groups, and other stakeholders. The report must include recommendations for mitigation measures, which may encompass (1) applying Executive Order 13873 (on securing the information and communications technology supply chain) to such IoT devices affecting the electric grid, including restrictions on related transactions; (2) prohibiting federal procurement of consumer products containing foreign adversary-controlled applications; (3) certification or labeling requirements for high-wattage IoT devices; and (4) other proposals deemed necessary.

This section codifies into law the provisions of Executive Order 13873 (84 Fed. Reg. 22689; relating to securing the information and communications technology and services supply chain), as in effect on the date of enactment. The section further directs the Archivist of the United States, when publishing the Act in slip form and the United States Statutes at Large pursuant to 1 U.S.C. 112, to include an appendix at the end setting forth the text of that executive order (as in effect on the date of enactment).