PROTECT the Grid Act

This bill directs the Secretary of Commerce to submit a report assessing national security risks to the U.S. electric grid from foreign adversary-controlled applications that can control high-wattage Internet-connected devices, and to include recommendations for mitigation measures. It also codifies Executive Order 13873 on securing the information and communications technology supply chain.

Sec. 3, Definitions: Defines key terms used in the bill, including "consumer product," "covered entity" (an entity subject to a foreign adversary's jurisdiction or control), "critical infrastructure," "foreign adversary" (any covered nation under U.S. law plus Venezuela under Nicolas Maduro), "foreign adversary-controlled application" (a website, desktop, mobile, or augmented reality app operated by a covered entity), "high-wattage IoT device" (any Internet-connected appliance consuming or controlling over 500 watts), "IoT" (Internet of Things), and "relevant Federal official" (officials under Executive Order 13873 and others the Secretary deems relevant).

Sec. 4, Report on national security risks: Requires the Secretary of Commerce, within 270 days of enactment and in coordination with other relevant officials, to submit a report to specified congressional committees assessing risks from foreign adversary-controlled applications that could attack or undermine critical infrastructure. The report must consider the deployment of high-wattage IoT devices, risks from such applications in consumer products, potential impacts on national security (including frequency imbalances and cascading failures), and public input. It must include recommendations for mitigation, such as applying Executive Order 13873 to IoT devices, restricting federal procurement of products with foreign adversary-controlled applications, certification or labeling requirements, and other proposals.

Sec. 5, Codification of Executive Order 13873: Enacts into law the provisions of Executive Order 13873 (as in effect on the date of enactment) and requires the Archivist to include the text of that order as an appendix when publishing the bill.