# 119-s-4939: Countering CCP Act

119-s-4939, Countering CCP Act, is a 119th Congress bill sponsored by Sen. Cotton, Tom [R-AR] (R-AR); status introduced; PRIA reads it as touching household money (as of 2026-08-06).

- Canonical: https://policyrisk.com/legislation/119-s-4939
- As of: 2026-08-06
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-s-4939
- Congress: 119
- Title: Countering CCP Act
- Status: introduced
- Introduced: 2026-06-24
- Sponsor: Sen. Cotton, Tom [R-AR] (R-AR)
- Cosponsors: 1
- Policy area: Health
- Touches household money: yes
- Last recorded action: 2026-08-06

## Summary

**Creates a targeted cybersecurity review and recall authority for networked medical devices made by manufacturers headquartered in the People’s Republic of China.** The bill would have HHS and the FDA, working with the Cybersecurity and Infrastructure Security Agency, demand software bills of materials, data maps, and server location details to spot cybersecurity risks and potential patient data exposure. - Patients and families could be notified if a device they use is judged risky and be instructed to stop using it. - Health care providers and facilities would get immediate orders and notices to cease use of recalled devices to protect patients and systems. - Manufacturers headquartered in the PRC would have 180 days to provide a device’s software bill of materials, data architecture, and server locations or face mandatory recall orders that could be issued within 18 months. - HHS, FDA, and CISA must consult on reviews and deliver a report within 2 years analyzing PRC-origin device market share, data protections, and recommendations to strengthen device cybersecurity.

## Cosponsors (1)

- Sen. Banks, Jim [R-IN] (R-IN), 2026-08-04T00:00:00.000Z

## Provisions PRIA read

- Which medical devices are covered: benefit, medium. This bill would define which devices and makers are subject to the review and recall rules. A "covered device" would be a networked medical device cleared, authorized, approved, or exempted under select FDA pathways on or before March 28, 2023. A "covered manufacturer" would be one headquartered in…
- FDA review and device recalls: mixed, high. This bill would make HHS (through the FDA, with CISA) review certain networked medical devices made by China-linked manufacturers for cybersecurity risks. Within 180 days of enactment, the FDA would ask each maker for a software bill of materials, data mapping and architecture, and locations of sys…

## Related bills

- 119-s-2342: Intelligence Authorization Act for Fiscal Year 2026
- 119-s-2142: GOLDEN DOME Act of 2025
- 119-s-4615: Intelligence Authorization Act for Fiscal Year 2027
- 119-s-1748: Kids Online Safety Act
- 119-s-292: Educational Choice for Children Act of 2025
- 119-s-554: United States-Israel Defense Partnership Act of 2025

## Sources
- [119-s-4939 on Congress.gov](https://www.congress.gov/bill/119th-congress/senate-bill/4939)

## Related
- [119-s-2342: Intelligence Authorization Act for Fiscal Year 2026](https://policyrisk.com/legislation/119-s-2342)
- [119-s-2142: GOLDEN DOME Act of 2025](https://policyrisk.com/legislation/119-s-2142)
- [119-s-4615: Intelligence Authorization Act for Fiscal Year 2027](https://policyrisk.com/legislation/119-s-4615)
- [119-s-1748: Kids Online Safety Act](https://policyrisk.com/legislation/119-s-1748)
- [119-s-292: Educational Choice for Children Act of 2025](https://policyrisk.com/legislation/119-s-292)
- [119-s-554: United States-Israel Defense Partnership Act of 2025](https://policyrisk.com/legislation/119-s-554)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-s-4939 (as of 2026-08-06).