Doubling the compliance deadline eases administrative burdens and may improve review quality, but it delays enforcement and extends the period during which Americans could be exposed to risks from foreign-adversary-controlled apps.
State governments and regulated entities get 540 days (instead of 270) to comply, reducing short-term administrative strain and staffing/backlog pressures for agencies and tech teams.
Regulators and technical reviewers have more time to conduct thorough reviews of foreign-adversary-controlled apps, which may improve the quality of cybersecurity assessments and reduce rushed decisions.
Taxpayers and the public face delayed implementation of protections or enforcement because extending the deadline slows when new restrictions or mitigations take effect.
Longer compliance timelines could prolong public exposure to risks from foreign-adversary-controlled applications before restrictive measures are applied.
Based on analysis of 2 sections of legislative text.
Extends a specified statutory deadline in the Protecting Americans from Foreign Adversary Controlled Applications Act from 270 days to 540 days.
Doubles a statutory deadline in the Protecting Americans from Foreign Adversary Controlled Applications Act by changing a 270‑day deadline to 540 days. The change lengthens the period available for whatever action, review, or compliance the original provision required under that subsection of the law.
Introduced January 14, 2025 by Ro Khanna · Last progress January 14, 2025