VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

H.R. 1668 · 116th Congress

IoT Cybersecurity Improvement Act of 2020

Law · 116-207 · Dec 4, 2020
Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Became law without a recorded vote. It passed by voice vote or unanimous consent, which don't record how each member voted.

  1. House Introduced Mar 11, 2019
  2. House Passed Sep 14, 2020
  3. Senate Passed Nov 17, 2020
  4. President To the President Nov 24, 2020
  5. President Signed Dec 4, 2020
  6. Law Dec 4, 2020

Internet of Things Cybersecurity Improvement Act of 2020 or the IoT Cybersecurity Improvement Act of 2020

What it does: CRS summary · Public Law · Dec 4, 2020

Internet of Things Cybersecurity Improvement Act of 2020 or the IoT Cybersecurity Improvement Act of 2020

This bill requires the National Institute of Standards and Technology (NIST) and the Office of Management and Budget (OMB) to take specified steps to increase cybersecurity for Internet of Things (IoT) devices. IoT is the extension of internet connectivity into physical devices and everyday objects.

Specifically, the bill requires NIST to develop and publish standards and guidelines for the federal government on the appropriate use and management by agencies of IoT devices owned or controlled by an agency and connected to information systems owned or controlled by an agency, including minimum information security requirements for managing cybersecurity risks associated with such devices.

The bill requires the OMB to review agency information security policies and principles on the basis of the NIST standards and guidelines and issue such policies and principles as necessary to ensure the agency policies and principles are consistent with the NIST standards and guidelines.

NIST shall review and revise, as appropriate, the standards and guidelines every five years. The OMB shall update any policy or principle to be consistent with NIST revisions.

NIST shall develop and publish guidelines for agency, contractor, and subcontractor communications regarding security vulnerabilities.

The OMB shall develop and oversee the implementation of policies, principles, standards, or guidelines as necessary to address security vulnerabilities of information systems.

An agency is prohibited from procuring, obtaining, or using an IoT device if the agency determines during a review of a contract that the use of such device prevents compliance with the standards and guidelines, subject to a waiver where necessary for national security, for research purposes, or where such device is secured using alternative effective methods.

The Government Accountability Office shall report to Congress on broader IoT efforts.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: IoT Cybersecurity Improvement Act of 2020

Also known as: Internet of Things Cybersecurity Improvement Act of 2019; Internet of Things Cybersecurity Improvement Act of 2020; IoT Cybersecurity Improvement Act of 2019

Latest action (Dec 4, 2020): Became Public Law No: 116-207.

Policy area: Government Operations and Politics · Origin: House · Introduced: Mar 11, 2019

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

  1. House Introduced Mar 11, 2019
  2. House Passed Sep 14, 2020
  3. Senate Passed Nov 17, 2020
  4. President To the President Nov 24, 2020
  5. President Signed Dec 4, 2020
  6. Law Dec 4, 2020

No recorded floor vote found.