IC Oversight & Policy — 2026-07-03

House Rules Committee Clears NDAA Amendments on 72-Hour Chinese Equipment Reporting and AI Data Center Espionage Assessment

BLUFHouse passage of the NDAA with its embedded Chinese-hardware reporting mandate is genuinely uncertain by mid-August, as intraparty disputes over the legislative vehicle stalled floor action before any substance was contested.

The House Rules Committee on June 29 approved a package clearing floor votes on over 300 of nearly 1,400 filed NDAA amendments, including a measure from Rep. Nick Begich (R-AK) adding a mandatory 72-hour reporting deadline for Chinese-linked hardware, software, or firmware found on operationally critical DoD contractor networks, on top of existing cyber incident reporting requirements 1. The package also advances a provision from Rep. Erin Houchin (R-IN) directing DOD to assess AI data center security frameworks for espionage risk from nation-state adversaries, a measure from Rep. Troy Nehls (R-TX) on post-quantum cryptography, and a Rep. August Pfluger (R-TX) pilot evaluating hardware and software to counter foreign supply-chain influence 1. Excluded from the package were Rep. Andy Ogles' (R-TN) cyber grant program reauthorization for CISA and FEMA, set to lapse September 30, and Rep. Delia Ramirez's (D-IL) unintroduced measure to codify CISA's Common Vulnerabilities and Exposures program 1. The Rules Committee reported the underlying bill, H.R. 8800, by an 8-4 vote, and the House rejected the resolution providing for its floor consideration, H. Res. 1398, by a vote of 198-224 on June 30 2. The rule's defeat was unrelated to the cyber and AI provisions: H. Res. 1398 would have paired H.R. 8800 with the Safeguard American Voter Eligibility (SAVE America) Act for joint transmission to the Senate under a procedure known as MIRVing, and roughly a dozen House Republicans voted with Democrats against the pairing, stalling NDAA floor action ahead of the July 4 recess 2.

Analysis
House passage of H.R. 8800 with the Begich 72-hour Chinese-hardware reporting mandate intact is genuinely uncertain by mid-August, given the chamber's 198-224 rejection of the H. Res. 1398 rule just a day after Rules cleared the amendment package. This reflects unresolved GOP disagreement over pairing the NDAA with the SAVE America Act rather than any objection to the cyber and AI provisions themselves, which drew no recorded opposition in markup. That procedural failure leaves the floor-ready reporting and AI-espionage assessment provisions exposed to renegotiation before any revote. Confidence in this assessment is low, resting on one primary record (the Rules Committee docket) and a single uncorroborated trade-press account. Enactment would force operationally critical DoD contractors to stand up 72-hour Chinese-hardware detection capability ahead of FY2027, while a stalled or stripped bill preserves the current reporting baseline and leaves CISA's state and local grant program exposed to its September 30 lapse regardless of outcome.

2 sources

House sets up votes on NDAA amendments addressing cyber incident reporting, AI for floor consideration - Inside Cybersecurity
H.R. 8800 – National Defense Authorization Act for Fiscal Year 2027 - House Committee on Rules