Tennessee Senate Bill SB0378

Tennessee 2025-2026 Regular Session

• Introduced: 1/28/25

Caption

AN ACT to amend Tennessee Code Annotated, Title 4, relative to critical infrastructure.

Impact

If enacted, SB0378 will considerably influence how critical infrastructure services are managed within the state. It delineates clear prohibitions against utilizing software or equipment from foreign adversary companies, thereby affecting contracts that governmental entities can enter into for various technologies. Further, the bill introduces stringent measures to ensure that companies are not only aware of their obligations but also align their operations with state security needs to avoid penalties, which may include hefty fines for noncompliance. This reshaping of the regulatory landscape may lead to a reassessment of existing contracts and partnerships involving critical infrastructure services.

Summary

Senate Bill 0378, known as the 'Tennessee Critical Infrastructure Protection Act,' is designed to protect the state's critical infrastructure from foreign adversaries. The bill seeks to prohibit access to state critical infrastructure by entities from identified foreign adversary nations and establishes requirements for the use of communications and software technologies. It mandates a registration and certification process for companies that have significant access to critical infrastructure, ensuring that they comply with various security protocols and do not use prohibited equipment. Additionally, the bill emphasizes the department's role in investigating and potentially blocking transactions that could threaten critical infrastructure security.

Sentiment

The sentiment surrounding SB0378 appears to be mixed, reflecting concerns about both national security and potential overreach. Proponents argue that the bill is a necessary step to safeguard critical infrastructure from espionage and sabotage by foreign actors, emphasizing the need for a robust response to ever-evolving threats. However, there are apprehensions about the implications for businesses that may find compliance burdensome or jeopardizing their operational relationships. Critics worry that excessive regulation might limit access to necessary technologies and impede effective governance over critical services.

Contention

The most prominent points of contention regarding SB0378 center on its restrictions and implementation measures. Opponents highlight concerns about the broad definitions of prohibited technologies and the potential to impede efficient operations and maintenance of critical infrastructure. Questions also arise regarding the feasibility of compliance, the administrative burden on companies seeking to navigate the new regulatory framework, and the overall impact on technology vendors that may be inadvertently affected by changes to contracts that are now disallowed due to ownership structures. These points indicate a deep divide over how best to balance security and operational efficiency in the face of potential threats.