Commerce Department to study foreign-made router security risks
H.R. 866 — ROUTERS Act · Filed by Robert Latta (R-OH) · 1 cosponsor · Introduced Jan 31, 2025 · Passed chamber
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill directs the Secretary of Commerce to study national security and cybersecurity risks posed by consumer routers, modems, and combined modem-router devices made by companies owned, controlled by, or influenced by countries designated as security threats (as defined in federal defense law). The Secretary must report findings to Congress within one year. The bill creates no new restrictions, enforcement powers, or regulatory authority—only a fact-finding mandate.
Why we flagged it
The bill's sole operative function is to commission a government study of supply-chain security risks in consumer networking hardware from foreign adversaries. It is a fact-finding and transparency measure, not a regulatory or enforcement action.
What the text implies
- Study scope is limited to devices from 'covered countries' (defined by reference to 10 U.S.C. § 4872(f)(2)), which may include China, Russia, Iran, North Korea, and other designated adversaries—but the bill does not restate that definition, so the precise scope is not transparent on its face.
- Report is due to Congress only; no requirement for public disclosure, so findings may remain classified or restricted, limiting citizen access to the study's conclusions.
- Study is purely advisory—Congress may ignore findings, and the bill contains no trigger for regulatory action, import restrictions, or mandatory security standards.
- Timing (1 year) may be insufficient for comprehensive supply-chain risk assessment across millions of devices and manufacturers, potentially limiting study depth.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Citizens benefit from transparency: a government study of supply-chain security risks in critical home-network devices is a legitimate public-interest investigation that may inform future policy. However, the bill creates no enforcement mechanism, no restrictions on sales, no mandatory security standards, and no remedy—it is purely informational. The civic value depends entirely on whether Congress acts on the report; the bill itself changes nothing about what devices citizens can buy or how the
Named in the bill
Secretary of Commerce, Assistant Secretary of Commerce for Communications and Information, House Committee on Energy and Commerce, Senate Committee on Commerce, Science, and Transportation, 10 U.S.C. § 4872(f)(2) (covered countries definition)
Where it stands
1 cosponsor: 1 Democrats.
- Jan 31, 2025 — Introduced · Congress.gov: “Introduced in House”
- Jan 31, 2025 — Referred to House Committee on Energy and Commerce · Congress.gov: “Referred to the House Committee on Energy and Commerce”
- Apr 8, 2025 — Markup held in committee · Congress.gov: “Committee Consideration and Mark-up Session Held”
- Apr 8, 2025 — Reported out of committee · Congress.gov: “Ordered to be Reported (Amended) by Voice Vote”
- Apr 28, 2025 — Passed the House · Congress.gov: “On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H1661)”
- Apr 28, 2025 — Floor vote scheduled · Congress.gov: “Mr. Bilirakis moved to suspend the rules and pass the bill, as amended”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
6 lobbying clients named this bill on 9 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $16,020,000 in lobbying spend. A filing names 25 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 82% of bills with at least one filing.
Robert Latta, the sponsor, reported $876,626 in PAC receipts in the 2026 cycle. $12,000 of that came from 2 PACs tied to these lobbying clients.
- Ncta - the Internet & Television Association — $6,870,000 on 2 filings
- Charter Communications Inc — $5,020,000 on 2 filings
- Microsoft Corporation — $2,690,000 on 1 filing
- Tp-link Systems Inc. (fka Tp-link Global Inc.) — $820,000 on 2 filings
- United States Telecom Assn — $620,000 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (1,428 characters) on May 21, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Commerce Department to study foreign-made router security risks” QuorumCivic. https://share.quorumcivic.app/bill/119/hr866 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.