ROUTERS Act
Click any stage to learn more about the legislative process.
Would require the Department of Commerce to study the national security and cybersecurity risks posed by consumer routers, modems, and combination devices made by companies tied to China, Iran, North Korea, or Russia, and deliver findings to Congress within one year.
What this bill would do
What it would do
The bill would direct the Secretary of Commerce, working through the Assistant Secretary for Communications and Information, to conduct a study examining the national security risks and cybersecurity vulnerabilities posed by consumer routers, modems, and devices that combine both functions. The study would focus specifically on such devices designed, developed, manufactured, or supplied by individuals or companies that are owned by, controlled by, or subject to the influence of a "covered country" — defined by reference to a provision of federal defense law that identifies China, Iran, North Korea, and Russia.
The bill would not itself restrict the sale or use of any devices, and it would not authorize any enforcement action. Its sole operative requirement is a one-time study and a written report to two congressional committees no later than one year after enactment.
Key provisions
- 1Would direct the Secretary of Commerce to study national security risks and cybersecurity vulnerabilities of consumer routers, modems, and combo devices from covered-country-linked suppliers.
- 2Would require the Secretary to submit a report on study findings to two congressional committees within one year of enactment.
- 3Would define 'covered country' by cross-reference to 10 U.S.C. § 4872(f)(2), which identifies China, Iran, North Korea, and Russia.
Who would be affected
The Department of Commerce and the National Telecommunications and Information Administration, which would be responsible for conducting and delivering the study. American consumers who use routers and modems at home are the underlying subject population, but the bill places no direct requirements on them, retailers, or manufacturers.
Why it matters
If enacted, the study could give Congress and federal agencies a structured factual record about whether widely used home networking hardware from certain foreign-linked suppliers poses cybersecurity risks — potentially informing future restrictions or procurement rules. The bill itself imposes no ban or requirement on industry; its impact depends entirely on how Congress acts on the findings.
What would change
Agencies directed to act
Effective dates
- Report on study results due to Congress
Funding and costs
Congressional Budget Office estimate
CBO estimates the ROUTERS Act would cost approximately $1 million over the 2025–2030 period, subject to appropriations, with no effect on direct spending, revenues, or the deficit.
CBO estimates that S. 244, the ROUTERS Act, would have no effect on direct (mandatory) spending or revenues, leaving the deficit unchanged over the 2025–2035 period. The bill would require the Department of Commerce to study national security risks and cybersecurity vulnerabilities posed by consumer routers, modems, and combination devices made by entities linked to North Korea, China, Russia, or Iran, and to report the findings to Congress. Based on the cost of similar prior studies, CBO estimates roughly $1 million in discretionary spending (funds that must be provided through the annual appropriations process) over the 2025–2030 period. CBO identified no intergovernmental or private-sector mandates in the bill.
How implementation would work
The Secretary of Commerce, in consultation with the Assistant Secretary for Communications and Information, would carry out the study and must submit a written report to the House Committee on Energy and Commerce and the Senate Committee on Commerce, Science, and Transportation within one year of enactment. The bill specifies no rulemaking, grant program, or enforcement mechanism; the entire obligation is a single study-and-report cycle with no phase-ins or additional oversight machinery.
Legislative status & sources
Latest action
Placed on Senate Legislative Calendar under General Orders. Calendar No. 87.
Official CRS summary
Show the CRS summaryHide the CRS summary
This bill requires the Department of Commerce, in consultation with the National Telecommunications and Information Administration, to conduct a study on the national security risks posed by consumer routers and modems (including devices that combine a modem and router) and provide the results of the study to Congress. The study must address devices developed, manufactured, or supplied by persons (i.e., individuals and entities) owned by, controlled by, or subject to the influence of China, Iran, North Korea, or Russia.
Legislative subjects
Computer security and identity theft; Computers and information technology; Congressional oversight; Internet, web applications, social media; Science, Technology, Communications
Committee report
S. Rept. 119-25