A minor adjustment to the bill. v2 expands the scope of the mandated study to explicitly include "cybersecurity vulnerabilities" alongside "national security risks" and updates a statutory cross-reference for the definition of "covered country." The core purpose of the bill remains unchanged.
ROUTERS Act
- Sponsor
- Sen. Blackburn, Marsha [R-TN]
- Committees
- Commerce, Science, and Transportation Committee (primary)
- Last action
- Jun 2, 2025
Bottom line
The ROUTERS Act mandates a study by the Commerce Department to identify national security risks from consumer internet hardware linked to foreign adversaries, aiming to inform future policy on supply chain security.
What it actually does
This bill directs the Secretary of Commerce, in consultation with the Assistant Secretary of Commerce for Communications and Information, to conduct a comprehensive study. The study will assess national security risks and cybersecurity vulnerabilities associated with consumer routers, modems, and combined devices that are designed, developed, manufactured, or supplied by entities influenced by a 'covered country'. The Secretary is then required to submit a report on the study's findings to relevant congressional committees within one year of the bill's enactment.
Proponents argue
Proponents argue that this bill is a critical, proactive step to safeguard national security and protect consumer data from potential exploitation by foreign adversaries. They contend that consumer networking devices, often overlooked, represent a significant vulnerability in the nation's digital infrastructure, making a thorough study essential to identify and mitigate these risks before they are exploited. This study will provide policymakers with the necessary data to make informed decisions regarding supply chain security.
Opponents contend
Opponents might argue that while the intent is valid, the bill could lead to unnecessary trade barriers or increased costs for consumers and internet service providers if certain widely used, affordable devices are flagged without clear, actionable alternatives. Some may also suggest that existing intelligence and cybersecurity frameworks are sufficient to address these concerns, or that the study's scope might be overly broad or difficult to implement effectively without causing market disruption.
The bill is very short and clear, making it highly accessible for a reader to understand its core directive and implications within minutes.
Section 2(a)
Mandate for National Security Risk Study
This section directs the Secretary of Commerce to conduct a study focused on the national security risks and cybersecurity vulnerabilities present in consumer-grade internet hardware. Specifically, it targets devices like routers, modems, and modem-router combos that originate from companies owned by, controlled by, or influenced by a 'covered country'. The goal is to identify potential backdoors, vulnerabilities, or other threats that could be exploited by foreign governments.
Supporters argue
Supporters argue that this study is crucial for identifying systemic vulnerabilities in the consumer technology supply chain, which could be exploited by hostile foreign governments. They believe it will provide essential data to protect critical infrastructure and personal data from espionage or disruption.
Critics contend
Critics might suggest that such a study could inadvertently stigmatize certain manufacturers based on their country of origin rather than proven security flaws, potentially leading to market distortions. They may also argue that the focus should be on universal security standards rather than country-specific restrictions.
Tradeoffs
The provision balances the imperative of national security with concerns about free market competition and potential impacts on consumer choice and device affordability. It also navigates the tension between identifying specific threats and avoiding broad generalizations based solely on national origin.
Section 2(b)
Report to Congress Requirement
This section mandates that the Secretary of Commerce submit a detailed report on the findings of the national security risk study to specific committees in both the House and Senate. This report must be delivered within one year after the bill becomes law. This ensures that the study's results are formally communicated to legislative bodies responsible for oversight and future policy decisions related to commerce, science, transportation, and energy.
Defines 'covered country' by referencing section 4872(f)(2) of title 10, United States Code. This is a critical definition as it specifies which countries' influence on device manufacturers triggers the study.
Section 2(c)(1)
Why it matters:This is standard legislative practice for brevity and consistency, avoiding re-listing specific countries in every bill. It ensures the definition aligns with existing national security frameworks.
Case for: Using an existing definition from Title 10 ensures consistency with broader national security policy and avoids creating redundant or conflicting lists of adversarial nations. It streamlines the legislative text.
Case against: A reader unfamiliar with Title 10, Section 4872(f)(2) would need to consult external legal resources to fully understand the scope of the bill, making it less accessible. The amendment from (d)(2) to (f)(2) also requires specific knowledge of Title 10 changes.
Estimated impact: The impact is high, as this definition directly determines the scope of the study, likely targeting countries such as China, Russia, Iran, and North Korea, which are commonly identified as foreign adversaries in U.S. law.