Coast Guard gains broad power to assess foreign equipment at U.S. ports

What it does

This bill requires the Coast Guard to assess cybersecurity risks in software and hardware used at major maritime facilities (ports, terminals, etc.), with a focus on equipment made by or controlled by foreign entities of concern. Facility owners must report annually on foreign-made systems they use and certify that equipment meets cybersecurity standards, or obtain a waiver from the Secretary. The Coast Guard and CISA coordinate assessments and report findings to Congress, while keeping detailed reports confidential.

Why we flagged it

The bill's core mechanism is a regulatory mandate requiring cybersecurity assessments and compliance standards for maritime facility equipment, with particular focus on foreign-sourced systems. It is neither a carve-out nor a deregulation, but a new compliance and reporting regime.

What the text implies

• The bill grants the Coast Guard authority to assess systems 'notwithstanding any provision of an end user licensing agreement' — effectively overriding vendor licensing terms and intellectual property protections without compensation or consent, which may trigger vendor disputes or software support withdrawal.
• Facility owners must report all foreign-made equipment annually, creating a detailed inventory of supply-chain dependencies that, while confidential to the public, is available to federal agencies and 'other entities with an agreement' — potentially enabling broader government leverage over private maritime operators.
• The 'foreign entity of concern' and 'foreign country of concern' definitions are cross-referenced to the Research and Development, Competition, and Innovation Act (RECIA § 10612), which is not included in this text — the actual scope of covered equipment depends on definitions in a separate statute, making compliance uncertainty high.
• Waiver authority is vested solely in the Secretary with a 'low risk to national security outweighed by benefit to commerce' standard — highly subjective and not subject to judicial review standards, giving the executive branch broad discretion to permit or deny equipment use without transparent criteria.
• Confidentiality of assessments and reports (FOIA exemption under 5 USC § 552(b)(3)) means the public cannot see what risks were identified, what equipment was flagged, or what waivers were granted — limiting democratic accountability for maritime security decisions.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Citizens benefit from strengthened cybersecurity oversight of critical maritime infrastructure, which protects ports and supply chains from foreign-controlled equipment vulnerabilities. However, the bill imposes significant compliance costs on facility operators (annual reporting, equipment replacement, assessments), which may be passed to consumers through higher shipping costs; the broad waiver authority and confidentiality of findings also limit public transparency about actual risks and gove

Who stands to gain

• Domestic maritime equipment manufacturers and software vendors (benefiting from restrictions on fore
• Cybersecurity consulting and compliance firms (hired by facility operators to conduct assessments an
• Port and terminal operators (if they can pass compliance costs to shippers and consumers)

Named in the bill

U.S. Coast Guard, Cybersecurity and Infrastructure Security Agency (CISA), Secretary of the Department of Homeland Security, Maritime facility owners and operators, Foreign entities of concern, National Institute of Standards and Technology (NIST), Senate Committee on Homeland Security and Governmental Affairs, House Committee on Homeland Security

Where it stands

1 cosponsor: 1 Democrats.

• May 19, 2026 — Introduced · Congress.gov: “Introduced in Senate”
• May 19, 2026 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.