H.R. 5078 · Where this bill is now
In the Senate
Passed the House Nov 17, 2025. Received Nov 18, 2025; no Senate vote yet
What this bill does
In plain words · AI-written from the official summaryExpands cybersecurity grants for state and local governments
The bill extends a federal grant program that helps states, local governments, and Indian tribes protect their computer systems from cyber attacks through 2035. It broadens what kinds of systems the grants can protect, including systems that use artificial intelligence and equipment that runs physical operations like power grids. The grants can only be used to buy products that meet federal cybersecurity standards, and the bill offers extra funding to governments that set up stronger security tools like multifactor authentication.
How it affects you
If you live in a state or local area, this affects you indirectly by helping your city or county government protect its computer systems and the services they provide, from water systems to voting records. Small rural communities get special attention through a new outreach plan to learn about free cybersecurity help available to them. The law doesn't directly change anything you do as a person, but it aims to make government technology more secure.
Read the official summary (Introduced in House, Sep 2, 2025)
Protecting Information by Local Leaders for Agency Resilience Act or the PILLAR Act
This bill extends the State and Local Cybersecurity Grant Program through FY2035, expands the scope of the program, and imposes certain limits on the use of grant funds. (The program provides grants to states and Indian tribes to address cybersecurity risks to government information systems.)
The bill expands the scope of systems that may be secured using grant funds to include operational technology systems and specifies that systems using artificial intelligence are included. Such systems must be maintained, owned, or operated by or on behalf of state, local, or tribal governments.
The bill also specifies that grant funds may not be used to purchase software, hardware, or related products or services that do not align with relevant guidance provided by the Cybersecurity and Infrastructure Security Agency (CISA).
Further, the bill increases the federal share of costs available to entities that implement or enable multifactor authentication and identity and access management tools for critical infrastructure by a specified date.
The bill requires annual reports by grant recipients to include a description of recipients’ progress in assuming the cost of continuing cybersecurity programs after grant funds are fully expended.
The Government Accountability Office must periodically review the program. This effort must include a review of artificial intelligence adoption across a sample of grants.
Finally, CISA must implement an outreach plan to inform local governments, including governments in rural areas or areas with small populations, about CISA’s no-cost cybersecurity offerings.
Written by AI (Claude) using only the official summary by the Congressional Research Service, the Library of Congress’s nonpartisan research staff. It can miss nuance, so check the official summary and the bill text for details.
1st SessionH. R. 5078
AN ACT
PILLAR Act
Sponsor: Rep. Andrew Ogles (R-TN-5) · Introduced Sep 2, 2025 · Science, Technology, Communications · 4 versions of the text
Sources: Congress.gov actions and votes · bill text from GovInfo · latest official action Nov 18, 2025: “Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.”
Numbers that changed
Dollar amounts, dates and percentages, taken word for word from the text- Sec. 2 · Fiscal year · Committee version → Passed the HouseReauthorization of CISA State and local cybersecurity grant programfiscal year 2035→fiscal year 2033…entity, 60 percent for each fiscal year through fiscal year 2033; and (B) in the case of a…
- Sec. 2 · Fiscal year · Committee version → Passed the HouseReauthorization of CISA State and local cybersecurity grant programfiscal year 2035→fiscal year 2033…group, 70 percent for each fiscal year through fiscal year 2033. Notwithstanding subparagraphs (A) and (B), the Federal…
- Sec. 2 · Fiscal year · Committee version → Passed the HouseReauthorization of CISA State and local cybersecurity grant programfiscal year 2035→fiscal year 2033…fiscal year beginning with fiscal year 2028 through fiscal year 2033 if such entity or multi-entity group entity, as…
| Section | Where | Before | After |
|---|---|---|---|
| Sec. 2Fiscal year | Reauthorization of CISA State and local cybersecurity grant program…entity, 60 percent for each fiscal year through fiscal year 2033; and (B) in the case of a…Committee version → Passed the House | fiscal year 2035 | fiscal year 2033 |
| Sec. 2Fiscal year | Reauthorization of CISA State and local cybersecurity grant program…group, 70 percent for each fiscal year through fiscal year 2033. Notwithstanding subparagraphs (A) and (B), the Federal…Committee version → Passed the House | fiscal year 2035 | fiscal year 2033 |
| Sec. 2Fiscal year | Reauthorization of CISA State and local cybersecurity grant program…fiscal year beginning with fiscal year 2028 through fiscal year 2033 if such entity or multi-entity group entity, as…Committee version → Passed the House | fiscal year 2035 | fiscal year 2033 |
Listed only when one value replaced another and the surrounding words stayed the same. Open a section to read the full wording.