,,ii #aai? ,,congress #a/ ,session ,s4 #agje ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,may #h1 #bjbe,mr4 ,cotton introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,bank+1 ,h\s+1 & ,urban ,affairs ,a ,,bill ,to require ! ,secret>y ( ,comm]ce to issue /&>ds ) respect to *ip security me*anisms = integrat$ circuit products1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,*ip ,security ,act4 #b4 ,s5se ( ,congress ,x is ! s5se ( ,congress t-- 7#a7 te*nology develop$ 9 ! ,unit$ ,/ates %\ld s]ve z ! f\ndation = ! global ecosy/em ( artificial intellig5ce to advance ! =eign policy & national security objectives ( ! ,unit$ ,/ates & allies & p>tn]s ( ! ,unit$ ,/ates2 7#b7 ! ,unit$ ,/ates c fo/] goodwill1 /r5g!n relation%ips1 & support innovative rese>* ar\nd ! _w by provid+ allies & p>tn]s ( ! ,unit$ ,/ates ) advanc$ comput+ capabilities2 7#c7 advanc$ integrat$ circuits & comput+ h>dw>e t is export$ f ! ,unit$ ,/ates mu/ be protect$ f div]sion1 !ft1 & o!r unau?oriz$ use or exploitation 9 ord] to bol/] ! competitiv5ess ( ! ,unit$ ,/ates & protect ! national security ( ! ,unit$ ,/ates2 7#d7 implem5t+ *ip security me*anisms w improve compliance ) ! export control laws ( ! ,unit$ ,/ates1 assi/ allies & p>tn]s ) gu>d+ comput+ h>dw>e1 & enhance protections f bad actors look+ to access1 div]t1 or tamp] ) advanc$ integrat$ circuits & comput+ h>dw>e2 & 7#e7 implem5t+ *ip security me*anisms may help ) ! detection ( smuggl+ or exploitation ( advanc$ integrat$ circuits & comput+ h>dw>e1 !reby all[+ = increas$ flexibility 9 export controls & op5+ ! door = m int]national p>tn]s to receive /reaml9$ & l>g] %ipm5ts ( advanc$ comput+ h>dw>e4 #c4 ,def9itions ,9 ?is ,act3 7#a7 ,appropriate congressional committees ,! t]m appropriate congressional committees means-- 7,a7 ! ,committee on ,bank+1 ,h\s+1 & ,urban ,affairs ( ! ,s5ate2 & 7,b7 ! ,committee on ,=eign ,affairs ( ! ,h\se ( ,repres5tatives4 7#b7 ,*ip ,security ,me*anism ,! t]m *ip security me*anism means a s(tw>e-1 firmw>e-1 or h>dw>e-enabl$ security me*anism or a physical security me*anism4 7#c7 ,cov]$ integrat$ circuit product ,! t]m cov]$ integrat$ circuit product means-- 7,a7 an integrat$ circuit classifi$ "u ,export ,control ,classification ,numb] #c;,a#jij or #c;,a#jja4z2 7,b7 a comput] or o!r product classifi$ "u ,export ,control ,classification ,numb] #d;,a#jij or #d;,a#jjc4z2 or 7,c7 an integrat$ circuit or comput] or a product conta9+ an integrat$ circuit or comput] t is classifi$ "u an ,export ,control ,classification ,numb] t is a successor or sub/antially simil> to ! numb]s li/$ 9 subp>agraphs 7,a7 & 7,b74 7#d7 ,export ,! t]m export has ! mean+ giv5 t t]m 9 section #agdb7c7 ( ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhja7c774 7#e7 ,9-c\ntry transf] ,! t]m 9-c\ntry transf] has ! mean+ giv5 t t]m 9 section #agdb7f7 ( ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhja7f774 7#f7 ,reexport ,! t]m reexport has ! mean+ giv5 t t]m 9 section #agdb7i7 ( ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhja7i774 7#g7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,comm]ce4 #d4 ,requirem5ts = security me*anisms = export ( integrat$ circuit products 7a7 ,prim>y requirem5ts = *ip security me*anisms 7#a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all require any cov]$ integrat$ circuit product to be outfitt$ ) *ip security me*anisms t implem5t location v]ification1 us+ te*niques t are feasible & appropriate on su* date ( enactm5t1 be=e x is export$1 reexport$1 or 9-c\ntry transf]r$ to or 9 a =eign c\ntry4 7#b7 ,notification requirem5t ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all require any p]son t has receiv$ a lic5se or o!r au?orization "u ! ,export ,control ,re=m ,act ( #bjah 7#ej ,u4,s4,c4 #dhaa et seq47 to export1 reexport1 or 9-c\ntry transf] a cov]$ integrat$ circuit product to promptly report to ! ,"u ,secret>y ( ,indu/ry & ,security1 if ! p]son obta9s cr$ible in=mation t ! product-- 7,a7 is 9 a location o!r ?an ! location specifi$ 9 ! application = ! lic5se or o!r au?orization2 7,b7 has be5 div]t$ to a us] o!r ?an ! us] specifi$ 9 ! application2 or 7,c7 has be5 subject$ to tamp]+ or an attempt at tamp]+1 includ+ ef=ts to disable1 spo(1 manipulate1 mislead or circumv5t location v]ification me*anisms or o!r *ip security me*anisms4 7b7 ,developm5t ( second>y requirem5ts = *ip security me*anisms 7#a7 ,assessm5t 7,a7 ,9 g5]al ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all1 9 coord9ation ) ! ,secret>y ( ,def5se-- 7i7 conduct an assessm5t to id5tify :at additional me*anisms1 if any1 %\ld be add$ to ! prim>y *ip security me*anisms requir$ "u subsection 7a77#a7-- 7,i7 to enhance compliance ) ! requirem5ts ( ! ,export ,control ,re=m ,act ( #bjah2 7,,ii7 to prev5t1 h9d]1 & detect ! unau?oriz$ use1 access1 or exploitation ( cov]$ integrat$ circuit products2 7,,iii7 to id5tify & monitor smuggl+ int]m$i>ies2 & 7,,iv7 to a*ieve any national security or =eign policy objective ( ! ,unit$ ,/ates t ! ,secret>y consid]s appropriate2 & 7ii7 if ! ,secret>y id5tifies any su* me*anism1 develop requirem5ts = outfitt+ cov]$ integrat$ circuit products ) t me*anism4 7,b7 ,elem5ts ,! assessm5t requir$ by p>agraph 7#a7 %all include-- 7i7 an exam9ation ( ! feasibility1 reliability1 & effectiv5ess (-- 7,i7 me?ods & /rategies t prev5t ! tamp]+1 disabl+1 or o!r manipulat+ ( cov]$ integrat$ circuit products2 7,,ii7 workload v]ification me?ods2 7,,iii7 me?ods to modify ! functionality ( cov]$ integrat$ circuit products t h be5 illicitly acquir$2 & 7,,iv7 any o!r me?od ! ,secret>y det]m9es appropriate = ! prev5tion ( unau?oriz$ use1 access1 or exploitation ( cov]$ integrat$ circuit products2 7ii7 an analysis (-- 7,i7 ! pot5tial co/s associat$ ) implem5t+ ea* me?od exam9$ "u clause 7i71 includ+ an analysis (-- 7aa7 ! pot5tial impact ( ! me?od on ! p]=mance ( cov]$ integrat$ circuit products2 & 7bb7 ! pot5tial = ! introduction ( new vuln]abilities into ! products2 7,,ii7 ! pot5tial b5efits ( implem5t+ ! me?ods exam9$ "u clause 7i71 includ+ an analysis ( ! pot5tial increase-- 7aa7 9 compliance ( cov]$ integrat$ circuit products ) ! requirem5ts ( ! ,export ,control ,re=m ,act ( #bjah2 & 7bb7 9 detect+1 h9d]+1 & prev5t+ unau?oriz$ use1 access1 or exploitation ( ! products2 & 7,,iii7 ! susceptibility ( ! me?ods exam9$ "u clause 7i7 to tamp]+1 disabl+1 or o!r =ms ( manipulation2 & 7iii7 an e/imate ( ! expect$ co/s to implem5t at-scale me?ods to tamp] )1 disable1 or manipulate a cov]$ integrat$ circuit product1 or o!rwise circumv5t ! me?ods exam9$ "u clause 7i74 7#b7 ,report to ,congress 7,a7 ,9 g5]al ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y1 9 coord9ation ) ! ,secret>y ( ,def5se1 %all submit to ! appropriate congressional committees a report on ! results ( ! assessm5t requir$ by p>agraph 7#a71 includ+-- 7i7 an id5tification ( ! *ip security me*anisms1 if any1 to be includ$ 9 ! requirem5ts = second>y *ip security me*anisms2 & 7ii7 if applicable1 a roadmap = ! timely implem5tation ( ! second>y *ip security me*anisms4 7,b7 ,=m ,! report requir$ by p>agraph 7#a7 %all be submitt$ 9 unclassifi$ =m1 b may include a classifi$ annex4 7#c7 ,implem5tation 7,a7 ,9 g5]al ,if any me*anisms are det]m9$ by ! ,secret>y to be appropriate1 ! ,secret>y %all1 n lat] ?an #b ye>s aft] ! date on :i* ! ,secret>y completes ! assessm5t requir$ by p>agraph 7#a71 require any cov]$ integrat$ circuit product to be outfitt$ ) ! second>y *ip security me*anisms id5tifi$ pursuant to p>agraph 7#a77;,a7 be=e ! product is export$1 reexport$1 or 9-c\ntry transf]r$ to or 9 a =eign c\ntry4 7,b7 ,privacy ,9 implem5t+ requirem5ts = second>y *ip security me*anisms "u subp>agraph 7,a71 ! ,secret>y %all prioritize confid5tiality4 7c7 ,en=cem5t au?ority ,9 c>ry+ out ?is section1 ! ,secret>y may-- 7#a7 v]ify1 9 a mann] ! ,secret>y det]m9es appropriate1 ! own]%ip & location ( a cov]$ integrat$ circuit product t has be5 export$1 reexport$1 or 9-c\ntry transf]r$ to or 9 a =eign c\ntry2 7#b7 ma9ta9 a record ( cov]$ integrat$ circuit products & include 9 ! record ! location & curr5t end-us] ( ea* su* product2 & 7#c7 require any p]son :o has be5 grant$ a lic5se or o!r au?orization "u ! ,export ,control ,re=m ,act ( #bjah to export1 reexport1 or 9-c\ntry transf] a cov]$ integrat$ circuit product to provide ! in=mation ne$$ to ma9ta9 ! record4 7d7 ,annual assessm5t & report on new *ip security me*anisms ,n lat] ?an #b ye>s aft] ! date ( ! enactm5t ( ?is ,act1 & annually !reaft] = #c ye>s1 ! ,secret>y %all-- 7#a7 9 coord9ation ) ! ,secret>y ( ,def5se1 conduct an assessm5t ( new *ip security me*anisms t h be5 develop$ 9 ! ye> prec$+ ! date ( ! assessm5t2 & 7#b7 submit to ! appropriate congressional committees a report t includes-- 7,a7 a summ>y ( ! results ( ! assessm5t requir$ by p>agraph 7#a72 7,b7 an evaluation ( :e!r any ( ! new me*anisms assess$ "u p>agraph 7#a7 %\ld be add$ to or replace any ( ! exi/+ requirem5ts = second>y *ip security me*anisms develop$ "u subsection 7b77#a72 & 7,c7 any recomm5dations = modifications to relevant export controls to all[ = m flexibility ) respect to ! c\ntries to or 9 :i* cov]$ integrat$ circuit products may be export$1 reexport$1 or 9-c\ntry transf]r$ if ! products include *ip security me*anisms t meet ! requirem5ts develop$ "u subsection 7b77#a74