What changed between these versions
A minor adjustment to the bill. v2 expands the scope of the mandated study to explicitly include "cybersecurity vulnerabilities" alongside "national security risks" and updates a statutory cross-reference for the definition of "covered country." The core purpose of the bill remains unchanged.
Overview
A handful of targeted changes were made to the bill's operative text. · v2 clarifies and slightly expands the scope of the study to be conducted, while also making a technical correction to a statutory reference.
The primary change in v2 is the expansion of the study's scope under Section 2(a) to explicitly include "cybersecurity vulnerabilities" in addition to "national security risks" posed by consumer routers and modems. Furthermore, Section 2(c)(1) was modified to update a cross-reference for the definition of a "covered country," ensuring accuracy with current statutory language. These changes refine the mandate for the Secretary of Commerce without altering the bill's fundamental objective.
Modifications
This modification broadens the scope of the study that the Secretary of Commerce is required to conduct, ensuring that the investigation into devices from covered countries includes a specific focus on cybersecurity vulnerabilities, which may lead to a more comprehensive assessment of potential threats.
Before
v1 directed the Secretary to conduct a study of the "national security risks" posed by consumer routers, modems, and combined devices from covered countries.
After
v2 directs the Secretary to conduct a study of the "national security risks and cybersecurity vulnerabilities" posed by the same consumer devices from covered countries.
This change ensures that the definition of "covered country" accurately reflects the intended statutory reference in title 10 of the United States Code. This is a technical correction that maintains the integrity of the bill's scope regarding which countries' entities are subject to the study.
Before
v1 defined "covered country" by referencing "section 4872(d)(2) of title 10, United States States Code."
After
v2 defines "covered country" by referencing "section 4872(f)(2) of title 10, United States Code."
Scope
Minor adjustment within existing scope — Changes are concentrated within Section 2, specifically modifying the scope of the study and a related definition. — The policy direction remains consistent; the changes refine and slightly broaden the scope of the mandated study without altering its fundamental purpose. — The change to Section 2(c)(1) directly impacts the interpretation of "covered country" as used in Section 2(a), ensuring consistency with updated statutory references. The addition of "cybersecurity vulnerabilities" expands the investigative mandate without altering other provisions.
Impact analysis
The Secretary of Commerce and the Assistant Secretary of Commerce for Communications and Information
Increased responsibility and a more detailed scope of work for the mandated study.
The scope of the study they are directed to conduct has been expanded to include cybersecurity vulnerabilities.
Persons owned by, controlled by, or subject to the influence of a covered country who design, develop, manufacture, or supply consumer routers, modems, and combined devices
Increased specificity in the type of scrutiny their products will undergo.
Their products will now be explicitly scrutinized for "cybersecurity vulnerabilities" in addition to "national security risks" as part of the study.