22 U.S.C. § 2679e — List of certain telecommunications providers

**(a) List of covered contractors** Not later than 30 days after December 27, 2021, the Secretary, in consultation with the Director of National Intelligence and other appropriate Federal agencies as determined jointly by the Secretary and the Director of National Intelligence, shall develop or maintain, as the case may be, and update as frequently as the Secretary determines appropriate, a list of covered contractors with respect to which the Department should seek to avoid entering into contracts. Not later than 30 days after the initial development of the list under this subsection, any update thereto, and annually thereafter for 5 years after such initial 30 day period, the Secretary shall submit to the appropriate congressional committees a copy of such list. **(b) Covered contractor defined** In this section, the term “covered contractor” means a provider of telecommunications, telecommunications equipment, or information technology equipment, including hardware, software, or services, that has knowingly assisted or facilitated a cyber attack or conducted surveillance, including passive or active monitoring, carried out against— (1) the United States by, or on behalf of, any government, or persons associated with such government, listed as a cyber threat actor in the intelligence community’s 2017 assessment of worldwide threats to United States national security or any subsequent worldwide threat assessment of the intelligence community; or (2) individuals, including activists, journalists, opposition politicians, or other individuals for the purposes of suppressing dissent or intimidating critics, on behalf of a country included in the annual country reports on human rights practices of the Department for systematic acts of political repression, including arbitrary arrest or detention, torture, extrajudicial or politically motivated killing, or other gross violations of human rights.