InsideGov
Congress · Laws

IoT Cybersecurity Improvement Act of 2020

Public Law 116-207 · H.R. 1668 · 116th Congress · began in the House

Signed by Donald Trump (R) on Dec 4, 2020 · Government Operations and Politics

Sponsor: Rep. Robin Kelly (D-IL-2)

Cosponsors (26): Rep. Will Hurd,

Passage votes

  • HouseVoice vote
  • SenateUnanimous consent
Data notes

The final version of the law, as each chamber passed it. A chamber that passed it by voice vote or unanimous consent has no count. “Method not stated” means the record does not say how the chamber voted. Where the record has a member-by-member vote, the “Who voted for it” section shows who voted yea.

Report a correction

Summary

The Congressional Research Service’s plain-language summary of what the law does.

Internet of Things Cybersecurity Improvement Act of 2020 or the IoT Cybersecurity Improvement Act of 2020

This bill requires the National Institute of Standards and Technology (NIST) and the Office of Management and Budget (OMB) to take specified steps to increase cybersecurity for Internet of Things (IoT) devices. IoT is the extension of internet connectivity into physical devices and everyday objects.

Specifically, the bill requires NIST to develop and publish standards and guidelines for the federal government on the appropriate use and management by agencies of IoT devices owned or controlled by an agency and connected to information systems owned or controlled by an agency, including minimum information security requirements for managing cybersecurity risks associated with such devices.

The bill requires the OMB to review agency information security policies and principles on the basis of the NIST standards and guidelines and issue such policies and principles as necessary to ensure the agency policies and principles are consistent with the NIST standards and guidelines.

NIST shall review and revise, as appropriate, the standards and guidelines every five years. The OMB shall update any policy or principle to be consistent with NIST revisions.

NIST shall develop and publish guidelines for agency, contractor, and subcontractor communications regarding security vulnerabilities.

The OMB shall develop and oversee the implementation of policies, principles, standards, or guidelines as necessary to address security vulnerabilities of information systems.

An agency is prohibited from procuring, obtaining, or using an IoT device if the agency determines during a review of a contract that the use of such device prevents compliance with the standards and guidelines, subject to a waiver where necessary for national security, for research purposes, or where such device is secured using alternative effective methods.

The Government Accountability Office shall report to Congress on broader IoT efforts.

Committees

The committees the bill was sent to, and what each did with it.

Data notes

A committee links to its page only where it exists in the current Congress; older and renamed committees are named without a link.

Report a correction

Related bills

1 bill the Library of Congress relates to this one.

  • S. 734Identical billRelated bill

    IoT Cybersecurity Improvement Act of 2019

Data notes

Related bills are identified by the Congressional Research Service, the House and the Senate: companion and identical bills, bills with similar text, bills that were folded into this law, and rules that brought it to the floor. A bill that is itself a public law in this site’s data links here; the others link to Congress.gov.

Report a correction

Timeline

From introduction to signing, newest first: the committees, the floor and the president. 20 actions.

  1. Dec 4, 2020Became lawBecame law · Became Public Law No: 116-207.
  2. Became lawBecame law · Signed by President.
  3. Nov 24, 2020FloorFloor · Presented to President.
  4. Nov 18, 2020FloorFloor · Message on Senate action sent to the House.
  5. Nov 17, 2020FloorFloor · Passed Senate without amendment by Unanimous Consent.
  6. Sep 15, 2020CommitteeCommittee · Received in the Senate, read twice.
  7. Sep 14, 2020FloorFloor · The title of the measure was amended. Agreed to without objection.
  8. FloorFloor · Motion to reconsider laid on the table Agreed to without objection.
  9. FloorFloor · On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote.
  10. FloorFloor · DEBATE - The House proceeded with forty minutes of debate on H.R. 1668.
  11. FloorFloor · Considered under suspension of the rules.
  12. FloorFloor · Mrs. Maloney, Carolyn B. moved to suspend the rules and pass the bill, as amended.
  13. CalendarCalendar · Placed on the Union Calendar, Calendar No. 402.
  14. CommitteeCommittee · Committee on Science, Space, and Technology discharged.
  15. CommitteeCommittee · Reported (Amended) by the Committee on Oversight and Reform. H. Rept. 116-501, Part I.
  16. Jun 12, 2019CommitteeCommittee · Ordered to be Reported in the Nature of a Substitute by Voice Vote.
  17. CommitteeCommittee · Committee Consideration and Mark-up Session Held.
  18. Mar 11, 2019CommitteeCommittee · Referred to the Subcommittee on Research and Technology.
  19. CommitteeCommittee · Referred to the Committee on Oversight and Reform, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee co…
  20. IntroducedIntroduced · Introduced in House
Data notes

Every action the Library of Congress lists for the bill, from introduction to signing, plus the dated committee hearings. The source lists many steps twice (the chamber’s own entry and the Library of Congress copy, or a presidential and a became-law entry with the same words); those are shown once. Amendments are listed in their own section.

Report a correction

Amendments

No amendments to this bill are on record.

Data notes

Amendments offered to this bill in either chamber, as the Library of Congress records them: each with a status read from its last recorded step: agreed to, rejected, withdrawn, ruled out of order, fell with another amendment, or offered with no vote recorded (most Senate amendments are only ever offered). The wording of each amendment is the source’s. Amendments to amendments and amendments to other bills are not listed.

Report a correction

Official record

The bill’s full text is on Congress.gov. Data through Oct 7, 2026.