SAFE Supply Chains Act

The SAFE Supply Chains Act requires U.S. federal agencies to only purchase or use covered information and communications technology products (such as hardware, software, and firmware) from original equipment manufacturers (OEMs) or authorized resellers (entities with direct OEM contracts). It prohibits agencies from using non-compliant products except under limited waivers for scientific research or critical mission functions, which must be justified and reported to Congress annually. Agencies must also provide procurement guidance to help vendors become authorized resellers, and the Office of Management and Budget must submit yearly reports on waiver usage. The law takes effect one year after enactment and does not require new federal funding.