Commerce Department ordered to assess Chinese smart-appliance grid-attack risk
H.R. 7208 — PROTECT the Grid Act · Filed by Dan Crenshaw (R-TX) · 2 cosponsors · Introduced Jan 22, 2026 · Referred to committee
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill directs the Secretary of Commerce to study and report on national security risks posed by internet-connected home appliances (like smart thermostats, EV chargers, and water heaters) controlled by foreign adversaries—particularly China—that could be remotely manipulated to destabilize the U.S. electric grid. The bill also codifies an existing executive order on securing the ICT supply chain and asks the Commerce Department to recommend protective measures, which may include restrictions on federal procurement, certification requirements, or transaction limits on foreign-controlled IoT devices.
Why we flagged it
The bill's operative mechanism is a directed study and report on IoT-based grid vulnerabilities, not immediate regulation or prohibition. It is a fact-finding and recommendation-building exercise aimed at protecting national security infrastructure, with potential future policy implications.
What the text implies
- Codification of Executive Order 13873 into law (Section 5) makes supply-chain security policy permanent and harder to reverse by future administrations, shifting power from executive discretion to statutory mandate.
- The 270-day reporting timeline and broad consultation requirement (industry, consumer groups, domestic producers) may create political pressure for restrictive measures before the report is even published.
- Defining 'covered entity' to include entities 'subject to the jurisdiction of a foreign adversary' or 'subject to the direction or influence of' a foreign adversary is expansive and may capture companies with only indirect ties to China.
- Recommendations may include federal procurement restrictions on consumer products, which could indirectly pressure private retailers and manufacturers to delist or restrict foreign-controlled IoT devices without explicit statutory prohibition.
- The bill focuses on 'high-wattage' devices (>500W) but does not address lower-wattage IoT devices (smart locks, cameras, thermostats <500W) that could also pose grid or data-security risks.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Ordinary citizens depend on grid stability and are vulnerable to coordinated cyberattacks on home appliances they own. A report assessing this risk and recommending protective measures—including potential restrictions on foreign-controlled devices—serves public safety and national security. The bill does not impose immediate restrictions or costs on consumers; it mandates study and recommendations, which is a precautionary step toward protecting critical infrastructure.
Who stands to gain
- U.S. domestic appliance manufacturers and IoT device makers (potential market protection from foreig
- Cybersecurity and grid-security consulting firms (likely to be hired for assessment and mitigation w
- Domestic IoT and smart-home technology providers (potential market consolidation if foreign competit
Named in the bill
Secretary of Commerce, Committee on Commerce, Science, and Transportation (Senate), Committee on Energy and Commerce (House), Executive Order 13873, People's Republic of China, Critical Infrastructures Protection Act of 2001, Consumer Product Safety Act, Princeton University, Georgia Institute of Technology, University of California, Santa Cruz
Where it stands
2 cosponsors: 2 Republicans.
- Jan 22, 2026 — Introduced · Congress.gov: “Introduced in House”
- Jan 22, 2026 — Referred to House Committee on Homeland Security and House Permanent Select Committee on Intelligence · Congress.gov: “Referred to the Committee on Energy and Commerce, and in addition to the Committees on Foreign Affairs…”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
2 lobbying clients named this bill on 3 disclosure filings across 2 quarters, Mar 2026 to Jun 2026. Those filings disclosed $790,000 in lobbying spend. A filing names 3 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 41% of bills with at least one filing.
Dan Crenshaw, the sponsor, reported $606,011 in PAC receipts in the 2026 cycle.
- Whirlpool Corporation — $490,000 on 2 filings
- Coalition for a Prosperous America — $300,000 on 1 filing
Lobbying Disclosure Act filings through Jul 17, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (9,687 characters) on Sep 27, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Mar 2026 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 17, 2026 · page rendered 2026-10-20.
“Commerce Department ordered to assess Chinese smart-appliance grid-attack risk” QuorumCivic. https://share.quorumcivic.app/bill/119/hr7208 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.