Protecting Military Bases from Connected Vehicles of Concern Act of 2025

After January 1, 2028, no connected vehicle on the list required under subsection (b) may be operated on a military installation or on any other property of the Department of Defense.

Not later than January 1, 2027, the Secretary of Defense shall establish and publish on a publicly available website of the Department of Defense a list of prohibited connected vehicles that—

(A) are designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction of a foreign entity of concern; and

(B) pose—

(i) an undue risk of sabotage to or subversion of the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of information and communications technology and services in the United States;

(ii) an undue risk of catastrophic effects on the security or resiliency of critical infrastructure in the United States or the digital economy of the United States; or

(iii) an unacceptable risk to the national security of the United States or the security and safety of United States persons.

In establishing the list required under paragraph (1), the Secretary shall incorporate existing Federal rules for identifying prohibited connected vehicles.

The Secretary shall review the list required under paragraph (1) not less frequently than once each year and shall make such additions, subtractions, supplements, or amendments to the list as the Secretary determines appropriate.

Any review under subparagraph (A) that makes subtractions from the list required under paragraph (1) shall include an explanation of why the subtraction was made.

The Secretary shall consult with the head of any Federal department or agency that the Secretary determines is appropriate in making the list required under paragraph (1) and conducting any annual review under paragraph (3).

The Secretary shall transmit a copy of the list required under paragraph (1), and any modification to that list, to the heads of each Federal department or agency determined appropriate under subparagraph (A).

Not later than June 1, 2027, the Secretary of Defense shall establish and provide to the congressional defense committees a briefing on an implementation plan for carrying out the prohibition under subsection (a).

The implementation plan required under paragraph (1) shall include—

(A) an identification of the lead organization within the Department of Defense responsible for implementing and overseeing the prohibition under subsection (a);

(B) a description of the process by which the Department will identify and assess prohibited connected vehicles;

(C) a description of the means by which the Department will conduct coordination with appropriate Federal departments and agencies;

(D) an identification of the metrics by which the Department will assess connected vehicles for threats to national security;

(E) a description of the means by which military installations will ensure compliance with such prohibition; and

(F) an assessment of resource requirements necessary to implement and maintain such prohibition.

In this section:

The term congressional defense committees has the meaning given that term in section 101(a)(16) of title 10, United States Code.

The term connected vehicle has the meaning given that term in section 791.301 of title 15, Code of Federal Regulations, or successor regulations.

The term foreign entity of concern has the meaning given that term in section 9901 of the William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021 (15 U.S.C. 4651).

The term military installation has the meaning given that term in section 2801(c) of title 10, United States Code.