10 U.S.C. § 4873 — Additional requirements pertaining to printed circuit boards

**(a) In General.—** (1) Beginning on the date determined under paragraph (3), the Secretary of Defense may not acquire a covered printed circuit board from a covered nation. (2) Paragraph (1) shall not apply with respect to any acquisition of supplies or services below the micro-purchase threshold under [section 3573 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section3573&num=0&edition=prelim). (3) Paragraph (1) shall take effect on January 1, 2027. **(b) Waiver.—** (1) The Secretary may waive the prohibition under subsection (a) if the Secretary determines in writing that— (A) there are no significant national security concerns regarding counterfeiting, quality, or unauthorized access created by such waiver; (B) the waiver is required to support national security; and (C) a covered printed circuit board of satisfactory quality and sufficient quantity, in the required form, cannot be procured as and when needed from nations other than a covered nation at reasonable cost, excluding comparisons with non-market economies. (2) Not later than 10 days after the Secretary provides a waiver under paragraph (1), the Secretary shall submit to the Committee on Armed Services of the Senate and the Committee on Armed Services of the House of Representatives a written notice setting forth the reasoning for the waiver, together with a copy of the waiver itself. **(c) Definitions.—** In this section: (1) **Covered nation.—** — The term “covered nation” means— (A) the Democratic People’s Republic of North Korea; (B) the People’s Republic of China; (C) the Russian Federation; and (D) the Islamic Republic of Iran. (2) **Covered printed circuit board.—** — The term “covered printed circuit board” means any specified type of partially manufactured or complete bare printed circuit board or fully or partially assembled printed circuit board that— (A) performs a mission critical function in any product or service that is not a commercial product or commercial service; or (B) is a component of— (i) a defense security system; or (ii) a system, other than a defense security system, that transmits or stores information and which the Secretary identifies as national security sensitive in the contract under which such printed circuit board is acquired. (3) **Secretary.—** — The term “Secretary” means the Secretary of Defense. (4) **Commercial product; commercial service; commercially available off-the shelf item.—** — The terms “commercial product”, “commercial service”, and “commercially available off-the-shelf item” have the meanings given such terms in sections 103, 103a, and 104 of title 41, respectively. (5) **Defense security system.—** (A) The term “defense security system” means an information system (including a telecommunications system) used or operated by the Department of Defense, by a contractor of the Department, or by another organization on behalf of the Department, the function, operation, or use of which— (i) involves command and control of an armed force; (ii) involves equipment that is an integral part of a weapon or weapon system; or (iii) subject to subparagraph (B), is critical to the direct fulfillment of military missions. (B) Subparagraph (A)(iii) does not include a system that is to be used for routine administrative and business applications (including payroll, finance, logistics, and personnel management applications). (6) **Specified type.—** — The term “specified type” means a printed circuit board that is— (A) a component of an electronic device that facilitates the routing, connecting, transmitting or securing of data and is commonly connected to a network, and (B) any other end item, good, or product specified by the Secretary in accordance with subsection (d)(2). **(d) Rulemaking.—** (1) The Secretary may issue rules providing that subsection (a) may not apply with respect to an acquisition of commercial products, commercial services, and commercially available off-the-shelf items if— (A) the contractor is capable of meeting minimum requirements that the Secretary deems necessary to provide for the security of national security networks and weapon systems; including, at a minimum, compliance with section 224 of the National Defense Authorization Act for Fiscal Year 2020 (Public Law 116–92; [10 U.S.C. 2302](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section2302&num=0&edition=prelim) note); and (B) either— (i) the Government and the contractor have agreed to a contract requiring the contractor to take certain actions to ensure the integrity and security of the item, including protecting the item from unauthorized access, use, disclosure, disruption, modification, or destruction; or (ii) the Secretary has determined that the contractor has adopted such procedures, tools, and methods for identifying the sources of components of such item, based on commercial best practices, that meet or exceed the applicable trusted supply chain and operational security standards of the Department of Defense. (2) The Secretary may issue rules specifying end items, goods, and products for which a printed circuit board that is a component thereof shall be a specified type if the Secretary has promulgated final regulations, after an opportunity for notice and comment that is not less than 12 months, implementing this section. (3) In carrying out this section, the Secretary shall, to the maximum extent practicable, avoid imposing contractual certification requirements with respect to the acquisition of commercial products, commercial services, or commercially available off-the-shelf items. **(e) Applicability.—** This section shall apply only with respect to contracts entered into after the issuance of a final rule implementing this section. **(f) Rule of Construction.—** Nothing in this section shall be construed to prohibit the Department of Defense from entering into a contract with an entity that connects to the facilities of a third party, for the purposes of backhaul, roaming, or interconnection arrangements, on the basis of the noncompliance by the third party with the provisions of this section or use of equipment or services that do not route or redirect user data traffic or permit visibility into any user data or packets that such equipment transmits or otherwise handles.