Pub. L. 117-103, div. X, tit. IV, subtit. B, sec. 414 (as amended)
LIMITATION ON PROCUREMENT BY FEDERAL BUREAU OF INVESTIGATION OF PEOPLE’S REPUBLIC OF CHINA PRODUCTS AND SERVICES.
SEC. 414. [28 U.S.C. 532 note] LIMITATION ON PROCUREMENT BY FEDERAL BUREAU OF INVESTIGATION OF PEOPLE’S REPUBLIC OF CHINA PRODUCTS AND SERVICES.
(a) Security Assessment.—The Director of the Federal Bureau of Investigation may not procure a People’s Republic of China product or service unless, before such procurement—
(1) the Federal Bureau of Investigation conducts a security assessment of such product or service, including with respect to any physical, counterintelligence, or cyber vulnerabilities;
(2) there is included in the process of conducting such security assessment a formal mechanism through which input shall be submitted by the Counterintelligence Division and Cyber Division of the Federal Bureau of Investigation regarding such security assessment, including with respect to any such vulnerabilities; and
(3) the Director (or a designee of the Director) approves a recommendation, based on the results of such security assessment, to procure such product or service.
(b) Submission.—Not later than 30 days after the date on which the Director (or a designee of the Director, as applicable) approves a recommendation pursuant to subsection (a)(3), the Director shall submit to the appropriate congressional committees the recommendation and a copy of the security assessment upon which the recommendation was based.
(c) Definitions.—In this section:
(1) Appropriate congressional committees.—The term “appropriate congressional committees” means—
(A) the congressional intelligence committees; and
(B) the Subcommittees on Commerce, Justice, Science, and Related Agencies of the Committees on Appropriations of the House of Representatives and the Senate.
(2) People’s republic of china product or service.—The term “People’s Republic of China product or service” means an information or communication technology product manufactured in China, Hong Kong, or Macau, or a product or service provided by an entity that is fully or partially owned or controlled by, or otherwise connected to, the government of China.
- Cross-references to the US Code
- 28 U.S.C. 532 note