1. (a) Oversight, Deconfliction, and Risk Assessment Capability.— The Secretary of Defense shall establish, maintain, continuously update, and use a secure, centralized technical capability to facilitate oversight, deconfliction, and risk assessments of all commercial vendor support to the Department of Defense for clandestine activities. Such capability shall—

   1. (1) enable the Department of Defense to perform oversight, deconfliction, and risk assessments of past, ongoing, or planned clandestine activity involving support from commercial vendors, including all subcontractors; and

   2. (2) include use of the minimum information required to—

      1. (A) identify potential conflicts between clandestine activities;
      2. (B) identify the need for additional coordination with respect to clandestine activities; and
      3. (C) conduct aggregate risk assessments of clandestine activities involving support from commercial vendors; and ¹

2. (b) Exclusions.—

   1. (1) Notwithstanding subsection (a), if the Secretary of Defense determines that information concerning a commercial vendor should not be used by the centralized technical capability required by subsection (a) due to operational, counterintelligence, or other national security concerns, the Secretary may exclude such information from use by such centralized technical capability.

   2. (2) Not later than 7 days after making a determination under paragraph (1), the Secretary shall submit to the congressional defense committees, the Select Committee on Intelligence of the Senate, and the Permanent Select Committee on Intelligence of the House of Representatives notice of the determination that includes the following information disaggregated by the element of the Department of Defense with respect to which such commercial vendor provides support:

      1. (A) The number of commercial vendors with respect to which the Secretary made the determination under paragraph (1).
      2. (B) A description of the types of activities supported by such commercial vendors.
      3. (C) The rationale for excluding the information concerning such commercial vendors from such capability.

3. (c) Deconfliction.— The Secretary of Defense shall ensure the centralized technical capability required by subsection (a) is used in each case where a commercial vendor is expected to provide support to a clandestine activity to—

   1. (1) deconflict the use of commercial vendors in support of clandestine activities of the Department of Defense; and
   2. (2) assess operational risk and counterintelligence exposure attributable to the use of commercial vendors in support of clandestine activities of the Department of Defense.
4. (d) Clandestine Activity Defined.— In this section, the term “clandestine activity” means any activity where it is intended that the role of the United States Government will not be apparent or acknowledged publicly.

(Added Pub. L. 119–60, div. A, title XVI, § 1621(a), Dec. 18, 2025, 139 Stat. 1180.)

Statutory Notes and Related Subsidiaries

Implementation Deadline and Reports

Pub. L. 119–60, div. A, title XVI, § 1621(b), Dec. 18, 2025, 139 Stat. 1181, provided that:

1. “(1) Implementation deadline and certification.— Not later than one year after the date of the enactment of this Act [Dec. 18, 2025], the Secretary of Defense shall—

   1. “(A) implement the requirements of section 430e of title 10, United States Code, as added by subsection (a) of this section; and
   2. “(B) submit to the congressional defense committees [Committees on Armed Services and Appropriations of the Senate and the House of Representatives], the Select Committee on Intelligence of the Senate, and the Permanent Select Committee on Intelligence of the House of Representatives a certification that such requirements have been implemented.

2. “(2) Submission of plan.— Not later than 120 days after the date of the enactment of this Act, the Secretary of Defense shall—

   1. “(A) submit to the committees described in paragraph (1)(B) a report containing the plan to implement the requirements of such section 430e; and
   2. “(B) provide to such committees a briefing with respect to such plan.
3. “(3) Progress report.— Not later than 270 days after the date of the enactment of this Act, the Secretary of Defense shall provide to the committees described in paragraph (1)(B) a briefing describing the progress of the Secretary towards implementing the requirements of such section 430e.”

¹ So in original.