Technology

HR 2683, the Remote Access Security Act, amends the Export Control Reform Act of 2018 to regulate how foreign entities remotely access U.S.-controlled technology. It defines "remote access" as foreign persons accessing U.S. items (like sensitive technology) via internet or cloud services from outside the item's physical location. The bill updates existing export control rules to include remote access as a regulated activity, requiring oversight similar to physical exports or in-country transfers. This primarily affects foreign companies, cloud providers, and technology firms handling U.S.-jurisdiction items.

HR 2659 creates a federal task force to address cyber threats from China's state-sponsored actors, specifically targeting groups like Volt Typhoon identified in a 2024 CISA advisory. The task force, led by CISA and FBI directors, coordinates federal agencies responsible for critical infrastructure security to detect and respond to cyberattacks. It must produce annual reports - including classified assessments of infrastructure risks and recommendations - to Congress within 540 days of formation and for five years after. These reports will guide federal efforts to protect critical infrastructure (like energy grids and transportation systems) and inform owners/operators through a public awareness campaign.

HRES 211 is a procedural resolution that allows the U.S. House of Representatives to debate and vote on three specific legislative measures. It enables consideration of H.J. Res. 25 (which would disapprove an IRS rule requiring brokers to report digital asset sales), H.R. 1156 (which would extend fraud statute of limitations for unemployment programs), and H.R. 1968 (which would fund government operations through September 2025). The resolution waives standard procedural objections and sets time limits for debate on each measure. This resolution itself does not change policy but facilitates the House’s review of these three bills.

Guiding and Establishing National Innovation for U.S. Stablecoins Act or the GENIUS Act This act establishes a regulatory framework for payment stablecoins (digital assets which an issuer must redeem for a fixed value). Under the act, only permitted issuers may issue a payment stablecoin for use by U.S. persons, subject to certain exceptions and safe harbors. Permitted issuers must be a subsidiary of an insured depository institution, a federal-qualified nonbank payment stablecoin issuer, or a state-qualified payment stablecoin issuer. Permitted issuers must be regulated by the appropriate federal or state regulator. Permitted issuers may choose federal or state regulation; however, state regulation is limited to those with a stablecoin issuance of $10 billion or less. Permitted issuers must maintain reserves backing the stablecoin on a one-to-one basis using U.S. currency or other similarly liquid assets, as specified. Permitted issuers must also publicly disclose their redemption policy and publish monthly the details of their reserves. The act specifies requirements for (1) reusing reserves; (2) providing safekeeping services for stablecoins; and (3) supervisory, examination, and enforcement authority over federal-qualified issuers. The act allows foreign issuers of stablecoins to offer, sell, or make available in the United States stablecoins using digital asset service providers, subject to requirements, including a determination by the Department of Treasury that they are subject to comparable foreign regulations. Under the act, permitted payment stablecoins are not considered securities or commodities under law. However, permitted issuers are subject to the Bank Secrecy Act for anti-money laundering and related purposes. (Sec. 3) This section establishes that only payment stablecoin issuers permitted under this act are allowed to issue a payment stablecoin in the United States. Knowing violations of this requirement shall be subject to a fine of up to $1 million for each violation, up to 5 years imprisonment, or both. Treasury may issue regulations establishing limited safe harbors from this requirement that are consistent with the act's purposes, limited in scope, and apply to a de minimus volume of transactions.  Three years after the date of enactment, digital asset service providers are prohibited from offering or selling stablecoins that are not issued by permitted issuers. Providers are also prohibited from offering, selling, or otherwise making available in the United States a foreign-issued payment stablecoin, unless it complies with requirements provided in section 18 of the act. (Sec. 4) This section establishes requirements for permitted issuers. Issuers must maintain reserves on a one-to-one basis. Reserves must be comprised of U.S. coins and currency; demand deposits or shares at an insured depository institution; certain Treasury acts, notes, or bonds; money received under certain repurchase agreements or reverse repurchase agreements; certain investment company securities and money market funds invested in certain approved assets on this list; similarly liquid federal assets approved by regulators; or certain listed reserves in tokenized forms.  Issuers must comply with redemption requirements, such as establishing timely redemption procedures and disclosing such procedures and associated fees. Issuers must also report on the monthly composition of the issuer's reserves. These reports must be examined by a registered public accounting firm and certified by the chief executive officer and chief financial officer of the issuer. The section prohibits the rehypothecation, or reuse, of reserves with limited exceptions. Primary federal payment stablecoin regulators (federal regulators) and state payment stablecoin regulators (state regulators), where applicable, must issue regulations to implement capital requirements, liquidity reserve standards, reserve asset diversification standards, and risk management standards. Issuers are subject to the anti-money laundering and counterterrorism requirements that are applicable to financial institutions. The section sets forth requirements regarding activities of a permitted issuer, including by prohibiting issuers from providing services on the condition that a customer obtains an additional paid product or service from the issuer or a subsidiary. Large issuers (those with more than $50 billion in consolidated total outstanding issuance) must publish an audited annual financial statement in accordance with generally accepted accounting principles. The section prohibits a public nonfinancial services company from issuing payment stablecoins unless the company obtains unanimous approval from the Stablecoin Certification Review Committee. A state qualified payment stablecoin issuer with a consolidated total outstanding issuance of not more than $10 billion may opt for state regulation if such regulation is substantially similar to the federal regulatory framework under this act. If the issuance exceeds that amount, the issuer must transition to federal regulation, receive a waiver from the federal regulator to remain under state regulation, or stop issuing stablecoins until the issuance is under the threshold. (Sec. 5) This section establishes requirements for stablecoins issued by subsidiaries of insured depository institutions and certain entities chartered by the Office of the Comptroller of the Currency (OCC) to issue payment stablecoins. Federal regulators must establish an application process and a supervision framework for such entities. The section sets forth requirements for the review of applications, explanations for denials, and an appeals process. (Sec. 6) This section sets forth supervision, examination, and enforcement requirements for payment stablecoin issuers under federal supervision. The provisions include reporting on financial conditions, risk management, compliance with the act, and compliance with sanctions and anti-money laundering requirements. The section specifies that payment stablecoin issuers with less than $10 billion in consolidated total outstanding issuance are subject to federal supervision if they are not state qualified payment stablecoin issuers. The section establishes civil penalties for violations of this act that are committed by those subject to federal supervision. (Sec. 7) This section establishes state regulatory authority over issuers that qualify for and elect state regulation. The Federal Reserve Board may exercise enforcement authority over state issuers in unusual and exigent circumstances. The OCC must exercise enforcement authority over nonbank state issuers in these circumstances. (Sec. 8) This section requires foreign issuers to comply with the terms of lawful orders to be allowed to offer, sell, or make available for trading a payment stablecoin in the United States. The section sets forth enforcement and appeal provisions. Treasury may waive the prohibition against the secondary trading of foreign payment stablecoins in the United States from noncompliant foreign issuers on a case-by-case basis if certain criteria are met. (Sec. 9) Treasury must seek public comment regarding methods, techniques, or strategies for financial institutions to detect illicit activities involving digital assets and perform research and risk assessments on such methods, techniques, or strategies. Treasury must report their legislative recommendations to Congress and the Financial Crimes Enforcement Network must issue rules based on the results. (Sec. 10) This section establishes requirements for custodial or safekeeping services for payment stablecoin reserves, collateral, and the private keys used to issue stablecoins. Among other requirements, such property must be separately accounted for and not comingled with other assets of the custodian. (Sec. 11) This section addresses the treatment of payment stablecoins and stablecoin issuers in bankruptcy and insolvency proceedings, including their claim priority, conditions for an automatic stay, and the treatment of reserves as property of the estate. Federal regulators must also report on topics regarding potential insolvency proceedings of issuers. (Sec. 12) Federal regulators may, if determined necessary after an assessment, prescribe technical standards for issuers to promote compatibility and interoperability with other issuers and the broader digital finance system. (Sec. 13) This section requires regulators to issue regulations to carry out the act, with federal and state regulators and Treasury coordinating as appropriate. (Sec. 14) This section requires Treasury to study and report on nonpayment stablecoins, including endogenously collateralized payment stablecoins (a digital asset the originator of which has represented will be converted, redeemed, or repurchased for a fixed amount of monetary value and that relies solely on the value of another digital asset created or maintained by the same originator to maintain the fixed price). (Sec. 15) This section requires federal regulators to annually report on payment stablecoin activity trends, the number of payment stablecoin issuer applicants, and the potential financial stability risks to the safety and soundness of the broader financial system posed by payment stablecoin activities. (Sec. 16) This section defines authorities related to the act, such as by providing that the act does not limit the authority of a depository institution, credit union, national bank, or trust company to issue digital assets to represent deposits or shares. Federal financial regulators may not require a financial institution to include certain digital assets held in its custody as a liability on financial statements or balance sheets. (Sec. 17) This section establishes that payment stablecoins issued by permitted issuers are not securities or commodities under federal law. (Sec. 18) This section provides an exception to the act's prohibition on foreign-issued payment stablecoins. For the exception to apply, foreign issuers must be subject to regulation and supervision by a foreign country that is comparable to the requirements under this act, as determined by Treasury. The foreign issuer must also be registered with the OCC, hold sufficient reserves in a U.S. financial institution (subject to exceptions), and the country where the issuer is domiciled must not be subject to U.S. sanctions. The section sets forth requirements for Treasury's determination as to whether a foreign country has comparable regulatory and supervisory requirements, including the process of requesting a determination, the deadline for Treasury to render a decision, and the process by which Treasury may rescind a previous determination. The section also sets forth OCC registration requirements. Treasury may implement reciprocal or bilateral agreements between the United States and jurisdictions with comparable regulatory requirements. (Sec. 19) This section requires certain federal employees to disclose holdings over $5,000 of permitted payment stablecoins as part of required financial disclosures. (Sec. 20) The act takes effect on the earlier of (1) 18 months after the date of enactment, or (2) 120 days after federal regulators issue final regulations implementing the act.

HR 1919, the "Anti-CBDC Surveillance State Act," prohibits the Federal Reserve from developing, testing, or issuing any central bank digital currency (CBDC) or similar digital assets. It specifically bans the Fed from offering direct financial products to individuals, maintaining individual accounts, or issuing CBDCs directly or indirectly through intermediaries like banks. The bill also blocks the Fed from using any digital asset for monetary policy and clarifies that physical currency's privacy protections remain intact. This policy directly affects the Federal Reserve System's ability to create or manage digital monetary tools.

HR 1717, the Communications Security Act, requires the Federal Communications Commission (FCC) to establish a council within 90 days to advise on securing, reliably operating, and ensuring interoperability of communications networks. The council must include industry representatives (excluding entities deemed a national security threat by the FCC Chair), public interest groups/academia (also excluding "not trusted" entities), and government representatives from federal, state, local, and tribal levels. Council members serve two-year terms, and the group must submit biennial reports to the FCC Chair, which will be made publicly available online. This bill directly affects FCC operations and entities potentially excluded from council membership under national security criteria.

HR 1770, the Consumer Safety Technology Act, requires federal agencies to study and pilot new technologies to improve consumer safety. Title I mandates the Consumer Product Safety Commission to run a one-year AI pilot program to track product injuries, identify hazards, monitor recalls, and check imports, then report findings to Congress. Title II directs the Commerce Secretary to study how blockchain technology can prevent fraud in consumer transactions, including public input and a 6-month report to Congress. Title III requires the Federal Trade Commission to report on its enforcement actions against deceptive practices involving digital tokens and recommend improvements to protect consumers. The bill affects the Consumer Product Safety Commission, Commerce Department, and FTC, focusing on research and reporting rather than immediate regulatory changes.

HR 1709, the "Understanding Cybersecurity of Mobile Networks Act," requires the Assistant Secretary of Commerce to produce a report within one year of enactment examining cybersecurity vulnerabilities in mobile service networks and devices. The report must assess how mobile providers address security risks, customer awareness of cybersecurity when purchasing services, encryption practices, barriers to adopting stronger security measures, and the prevalence of surveillance technologies like cell site simulators. It specifically excludes 5G networks and focuses on real-world vulnerabilities affecting U.S. mobile networks and devices used by consumers, businesses, and government agencies. The study aims to inform future policy by gathering data from providers, industry experts, and government agencies, without mandating immediate changes to security standards.

The ANCHOR Act requires the National Science Foundation to develop a plan within 18 months to improve cybersecurity and telecommunications for the U.S. Academic Research Fleet - comprising university- and lab-operated oceanographic research vessels. The plan must assess each vessel's specific needs for internet speed, data transfer, telemedicine, and remote expert access during missions, alongside cost estimates for upgrades like satellite equipment and staff training. It also mandates evaluating shared solutions to reduce costs and outlining funding strategies involving NSF, Navy research offices, and vessel operators. The bill directly affects research vessels conducting ocean science, aiming to modernize their digital infrastructure without altering scientific methods.

The TAKE IT DOWN Act requires major social media platforms and websites hosting user-generated content to establish a 48-hour removal process for nonconsensual intimate visual depictions (including deepfakes) upon verified request. It defines "nonconsensual intimate visual depictions" as images or videos of identifiable people shared without consent, with criminal penalties for sharing such content with intent to cause harm. The law exempts law enforcement activities, medical purposes, and content shared for legitimate educational reasons. Platforms must remove these materials quickly but are protected from liability if they act in good faith. This law directly affects social media companies and individuals whose intimate images are shared without consent.