A substantive refinement of the Satellite Cybersecurity Act of 2025. v3 introduces new limitations on the scope of recommendations and regulatory authority, clarifies coordination partners, and adds specific restrictions on the content and purpose of the cybersecurity clearinghouse. The bill's core purpose remains, but its implementation and potential impact are more precisely defined.
Satellite Cybersecurity Act of 2025
- Sponsor
- Sen. Peters, Gary C. [D-MI]
- Committees
- Commerce, Science, and Transportation Committee (primary)
- Last action
- Sep 24, 2026
Bottom line
The bill aims to enhance the cybersecurity posture of commercial satellite systems through federal studies, resource consolidation, and interagency coordination, without imposing new regulations.
What it actually does
This bill, the "Satellite Cybersecurity Act of 2025," mandates two primary actions: first, it requires the Comptroller General to conduct a study and report on Federal efforts to support commercial satellite system cybersecurity, including their reliance on critical infrastructure and foreign entities. Second, it directs the Secretary of Commerce, in coordination with the Secretary of Homeland Security, to establish and maintain a public online clearinghouse for cybersecurity resources and consolidate voluntary recommendations for commercial satellite systems. The bill also requires a joint strategy from the Secretary of Commerce, National Space Council, and Office of the National Cyber Director on coordination and information sharing.
Proponents argue
Supporters argue that commercial satellite systems are increasingly vital for critical infrastructure and national security, making their cybersecurity a paramount concern. This bill provides a crucial framework for understanding existing federal efforts, identifying gaps, and providing accessible, voluntary resources to the private sector, especially small businesses, without burdening them with new regulations. It promotes essential coordination among federal agencies and private stakeholders to address evolving cyber threats to space assets.
Opponents contend
Critics might contend that while cybersecurity is important, this bill primarily focuses on reports and voluntary measures, which may not be sufficient to address the rapidly evolving and sophisticated threats to satellite systems. Some may argue that it creates new bureaucratic structures (like the clearinghouse and multiple reports) without clear enforcement mechanisms or sufficient funding, potentially leading to redundant efforts or an over-reliance on non-binding recommendations. Others might express concern about the scope of information collection, particularly regarding foreign ownership, even if framed as risk mitigation.
The bill is relatively concise and focused, making it accessible for a reader to understand its core provisions and implications within a reasonable timeframe.
Section 3
Federal Study on Commercial Satellite Cybersecurity
This section directs the Government Accountability Office (GAO) to study how the Federal Government currently supports the cybersecurity of commercial satellite systems. The study will assess the effectiveness of federal efforts, the resources available to the public, the reliance of critical infrastructure on satellites, and federal agencies' reliance on both domestic and foreign-owned satellite systems. The GAO must report its findings and recommendations (excluding new regulations) to Congress within two years.
Supporters argue
Supporters argue that a comprehensive GAO study is essential to understand the current landscape of federal support for satellite cybersecurity, identify gaps, and ensure efficient use of resources. It provides an objective assessment necessary for informed policymaking.
Critics contend
No specific opposition is typically raised against studies or reports, though some might argue that the scope is too broad or that the two-year timeline is too long given the urgency of cyber threats.
Tradeoffs
The tradeoff is between the time and resources required for a thorough study versus the immediate need for action. The bill balances this by setting a clear deadline and focusing on existing efforts.
Section 4(b)
Establishment of a Public Cybersecurity Clearinghouse
This provision requires the Secretary of Commerce, in coordination with the Secretary of Homeland Security, to create and maintain a public online clearinghouse within 180 days. This clearinghouse will serve as a central repository for publicly available resources, guidance, frameworks, and voluntary recommendations related to commercial satellite system cybersecurity. It must include materials specifically tailored for small businesses and may contain controlled unclassified information with appropriate access controls.
Section 4(c)
Development of Voluntary Cybersecurity Recommendations
The Secretary of Commerce, in coordination with the Secretary of Homeland Security, is tasked with consolidating voluntary cybersecurity recommendations. These recommendations are designed to assist in the secure development, maintenance, and operation of commercial satellite systems. They cover a wide range of topics, including risk-based engineering, incident recovery, protection against various cyber threats (e.g., jamming, spoofing, EMP), supply chain risks, and vulnerabilities related to foreign ownership or infrastructure location.
Section 5
Joint Federal Strategy for Satellite Cybersecurity Coordination
Within 120 days of enactment, the Secretary of Commerce, jointly with the National Space Council and the Office of the National Cyber Director, and in coordination with other relevant agencies, must submit a strategy to Congress. This strategy will outline how federal agencies and private sector stakeholders can better coordinate, share information, and adopt voluntary best practices for commercial satellite system cybersecurity. It will also identify proposed coordination roles and assess how satellite cyber threats are integrated into critical infrastructure risk analyses.
This section explicitly states that the Act does not designate commercial satellite systems as a critical infrastructure sector, does not authorize new rulemaking or regulatory requirements, and does not alter existing authorities of agencies like CFIUS.
Section 6
Why it matters:This is standard legislative practice to clarify the intent and limits of a bill, often included to address potential concerns about overreach or unintended consequences, and to gain broader support by assuring that the bill is not a "Trojan horse" for new regulations.
Case for: Supporters argue these clauses are essential to ensure the bill focuses on voluntary cooperation and information sharing, respecting existing agency jurisdictions and avoiding the imposition of new, potentially burdensome regulations on the private sector.
Case against: Critics might argue that by explicitly disallowing new regulations or critical infrastructure designation, the bill may limit the federal government's ability to respond effectively to severe or rapidly evolving threats, relying too heavily on voluntary compliance.
Estimated impact: This section fundamentally shapes the nature and impact of the entire Act, ensuring it remains a non-regulatory, supportive framework rather than a prescriptive one.