PILLAR Act
Latest action · Nov 18, 2025 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedSep 2, 2025
- Passed HouseNov 17, 2025
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Protecting Information by Local Leaders for Agency Resilience Act or the PILLAR Act
This bill extends the State and Local Cybersecurity Grant Program through FY2035, expands the scope of the program, and imposes certain limits on the use of grant funds. (The program provides grants to states and Indian tribes to address cybersecurity risks to government information systems.)
The bill expands the scope of systems that may be secured using grant funds to include operational technology systems and specifies that systems using artificial intelligence are included. Such systems must be maintained, owned, or operated by or on behalf of state, local, or tribal governments.
The bill also specifies that grant funds may not be used to purchase software, hardware, or related products or services that do not align with relevant guidance provided by the Cybersecurity and Infrastructure Security Agency (CISA).
Further, the bill increases the federal share of costs available to entities that implement or enable multifactor authentication and identity and access management tools for critical infrastructure by a specified date.
The bill requires annual reports by grant recipients to include a description of recipients’ progress in assuming the cost of continuing cybersecurity programs after grant funds are fully expended.
The Government Accountability Office must periodically review the program. This effort must include a review of artificial intelligence adoption across a sample of grants.
Finally, CISA must implement an outreach plan to inform local governments, including governments in rural areas or areas with small populations, about CISA’s no-cost cybersecurity offerings.
Cosponsors 4
Members who signed on, in the order they did. Signatures ran from Sep 2, 2025 to Oct 17, 2025, with 3 there on the day it was introduced.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| R-NY | Andrew R. Garbarino | Original | Sep 2, 2025 |
| D-CA | Eric Swalwell | Original | Sep 2, 2025 |
| R-CO | Gabe Evans | Original | Sep 2, 2025 |
| D-VA | Eugene Simon Vindman | Oct 17, 2025 |
Actions 18
Everything that happened, newest first.
- Nov 18, 2025Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
- Nov 17, 2025Considered under suspension of the rules.
- Nov 17, 2025Considered under suspension of the rules. (consideration: CR H4685-4688)
- Nov 17, 2025DEBATE - The House proceeded with forty minutes of debate on H.R. 5078.
- Nov 17, 2025Motion to reconsider laid on the table Agreed to without objection.
Subjects
Assigned by the Library of Congress. Policy area: Science, Technology, Communications.
- Advanced technology and technological innovations
- Computer security and identity theft
- Computers and information technology
- Congressional oversight
- Government information and archives
- Government lending and loan guarantees
- Government studies and investigations
- Internet, web applications, social media
- Science, Technology, Communications
- State and local government operations
Text 4
Each version as it was printed, newest first.
- Nov 18, 2025Referred in Senate
- Nov 17, 2025Engrossed in House
- Nov 12, 2025Reported in House
- Sep 2, 2025Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.
