SAFE Supply Chains Act

This bill requires the Department of Defense to only procure or use information and communications technology products from the original equipment manufacturer or an authorized reseller, with certain exceptions. It aims to secure supply chains for federal equipment.

Sec. 2, Agency use of IT products: Defines key terms like 'authorized reseller' (a reseller with a direct contract or written authority from the original manufacturer) and 'covered product' (an information and communications technology end-use hardware product or component, including its software and firmware, but not other software or products where ICT is embedded and not the principal function). The Secretary of Defense is prohibited from procuring, obtaining, renewing contracts for, or using a covered product from any entity other than an original equipment manufacturer or an authorized reseller.

Sec. 2(c), Waiver: The Secretary may waive this prohibition for scientifically valid research or to avoid jeopardizing mission critical functions, after notifying congressional defense committees. The notice must include the justification, any security mitigations, and a declaration the product is not from a foreign adversary. A research waiver lasts for the duration of the research.

Sec. 2(d), Vendor technical assistance: The Secretary must establish procurement guidance to help entities ineligible for procurements become authorized resellers.

Sec. 2(e), Reports to Congress: For six years, the Secretary must annually report the number and types of covered products for which waivers were granted, the legal authority for each waiver, and actions taken to reduce waivers. Reports are unclassified but may include a classified annex.

Sec. 2(f)-(g), No new funds and effective date: No additional funds are authorized, and the section takes effect one year after enactment.