procurementindependentNewsThe Broadside3 min read

NDAA Would Make 1260H Listings Automatic Procurement Bans

Section 1812 would convert designation into a mandatory FASC exclusion referral within 90 days, no discretion, no case-by-case screening, and the bar can outlast the listing itself.


TL;DR

The FY 2027 NDAA proposes roughly 200 China-related provisions, but one stands apart: Section 1812 would require DoW to refer every Section 1260H Chinese military company designee to the Federal Acquisition Security Council within 90 days for a government-wide exclusion order. The FASC gets 270 days to review; if it recommends exclusion, the President gets 90 more. The bar covers a listed entity, its subsidiaries, and affiliates, and survives removal from the 1260H list. The definition of "covered article" sweeps in IT, telecom, cloud services, and any hardware or software with embedded IT, reaching deep into the defense supply chain.

NDAA Would Make 1260H Listings Automatic Procurement Bans
Editorial illustration · drawn by The Broadside

The FY 2027 National Defense Authorization Act is still moving through Congress, but the direction is clear: China provisions are no longer a subsection. They're the floor plan. Across the House-passed bill (H.R. 8800) and the SASC-reported bill (S. 4784), nearly 200 provisions address China directly or through the statutory shorthand of "country of concern," "covered nation," or "foreign adversary." Most are reporting requirements and studies. A handful are structural.

Section 1812 of the House-passed bill is the structural one.

The mechanism

Current law requires DoW to publish an annual Section 1260H list naming Chinese military companies operating in the United States. The list has been a reputational cudgel and an input to investment restrictions, but its direct procurement consequences have been limited, agencies could act on the information or not. Section 1812 changes that. Within 90 days of adding an entity to the 1260H list, the Secretary of War must refer the designee to the Federal Acquisition Security Council with a recommendation for a government-wide exclusion order barring every executive agency from procuring "covered articles" from that entity.

The FASC then has 270 days to review the referral. If the FASC finds grounds, it must transmit a recommendation to the President within 90 days.

The exclusion reaches beyond the listed entity to its identified subsidiaries and affiliates. And it applies retroactively, every entity already on the list when the bill becomes law gets the same referral treatment. Removal from the 1260H list does not automatically rescind an exclusion order. The bar can outlast the designation.

What "covered article" means

The term pulls from 41 U.S.C. §§ 1321 and 4713: information technology (including cloud computing), telecommunications equipment and services, processing of information subject to the Controlled Unclassified Information program, and any hardware, systems, devices, software, or services that include embedded or incidental IT. That definition is broad enough to capture a significant fraction of what flows through the defense acquisition system.

What else changes

The 1260H reporting requirement itself gets extended. Both chambers would push the sunset from 2030 to 2035 (House Sec. 1243; SASC Sec. 849(2)(A)). The House would also loosen the update frequency from "at least annually" to "as the Secretary determines appropriate," while both chambers would require implementing regulations and sharper definitions for identifying entities that belong on the list.

Separately, Section 353 and 354 of the House bill would require motor carriers transporting DoW freight to certify they aren't owned, controlled by, or in significant business relationships with any 1260H entity, a screening requirement that flows down through subcontracts and leases at every tier.

And Section 1508 adds a new trigger to 10 U.S.C. § 391's cyber incident reporting requirements for operationally critical contractors: within 72 hours of discovery, those contractors must report any hardware, software, firmware, or embedded technology in their systems tied to a 1260H entity.

None of these provisions are final. The House and Senate versions differ, and conference negotiations will determine what survives. But the architecture is taking shape, and Section 1812, by removing the gap between designation and procurement consequence, would mark a material shift in how 1260H shapes the defense industrial base.


Published ·Deep Fathom

NDAA Would Make 1260H Listings Automatic Procurement Bans — The Broadside