The bill creates a new NTIA office to coordinate cybersecurity and communications policy — improving national security, resilience, and support for small/rural providers and sharing research — while increasing federal costs and creating risks that policy could favor large firms, raise privacy/proprietary concerns, and concentrate discretionary authority.
Federal agencies and policymakers: a dedicated NTIA office will coordinate cybersecurity and communications policy, strengthening the nation's cybersecurity posture and incident response.
Consumers and businesses (including small businesses): improved coordination should lead to stronger network security and greater resilience against cyber incidents.
Federal and state governments: NTIA will have a clearer, more consistent role representing cybersecurity policy before the FCC, Congress, and others, improving interagency coordination and regulatory clarity.
Small businesses and consumers: NTIA advocacy for broadly 'market-based' policies could favor large private firms and shape rules that disadvantage some competitors or consumers depending on how policy is implemented.
Federal and state governments: broad, discretionary duties (e.g., actions 'as the Assistant Secretary considers appropriate') could centralize decision-making at NTIA and reduce transparency about priorities and use of authority.
Tech workers and small businesses: public release of data and research, even with classified protections, may raise privacy or proprietary-competition concerns for companies and researchers.
Based on analysis of 2 sections of legislative text.
Creates an NTIA Office of Policy Development and Cybersecurity led by an Associate Administrator to coordinate communications policy, cybersecurity guidance, market studies, and stakeholder engagement.
Creates a new Office of Policy Development and Cybersecurity inside the National Telecommunications and Information Administration (NTIA) and establishes an Associate Administrator to lead it. The office will analyze communications and internet policy, coordinate multistakeholder cybersecurity and privacy processes, promote collaboration between security researchers and service providers, support programs to prevent vulnerabilities, advocate for resilient communications networks and supply chains, and make certain nonclassified data publicly available. The bill also converts the current Associate Administrator for Policy Analysis and Development into the new Associate Administrator position on enactment, transferring responsibilities to the newly created office to centralize policy and cybersecurity coordination within NTIA.
Introduced June 12, 2025 by John Wright Hickenlooper · Last progress June 12, 2025