NIST sets cloud safety rules for federal agencies to use.
H.R. 10915 — Common-Sense Cloud Security Act · Filed by Rich McCormick (R-GA) · Introduced Oct 26, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
The bill tells NIST to write new rules for cloud safety within 180 days. The rules cover who people are online, safety checks, and AI threat spotting. Cloud companies can choose to get certified to show they follow the rules. Federal agencies must use these rules when they buy cloud services.
Who it affects
Citizens benefit because federal data stored in the cloud gets safer. Cloud companies can choose to get certified. Federal agencies must follow the new rules when they pick cloud services.
One thing to notice
Cloud companies that want to sell to the federal government will likely have to follow these rules. The rules ask cloud companies to share details about their safety setup with the federal government.
From the analysis of the bill text, linked under Primary records below.
Where it stands
- Oct 26, 2026 — Introduced · Congress.gov: “Introduced in House”
- Oct 26, 2026 — Referred to House Committee on Oversight and Government Reform and House Committee on Science, Space, and Technology · Congress.gov: “Referred to the Committee on Science, Space, and Technology, and in addition to the Committee on Oversight…”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Words to know
- NIST — The National Institute of Standards and Technology, a federal agency that writes technical rules.
- cloud — Computer systems and data stored on servers run by companies over the internet.
- federal agencies — Departments and offices of the federal government, like the VA or the IRS.
- certified — Officially approved as meeting a set of rules or standards.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (8,831 characters) on Oct 28, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,595 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
As of — page rendered 2026-10-28.
“NIST sets cloud safety rules for federal agencies to use.” QuorumCivic. https://share.quorumcivic.app/bill/119/hr10915/simple Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.