1. Short title This Act may be cited as the Protecting Against Compromised Internet of Things Technology Act . 2. Recommendations to include covered foreign persons on the Entity List (a) In general Not later than 90 days after the date of the enactment of this Act, the Secretary of Commerce, acting through the Bureau of Industry and Security, shall submit to the End-User Review Committee— (1) a list of covered foreign persons, if any, that the Secretary determines pose a threat to the security of supply chains of Internet of Things devices; and (2) a recommendation of whether or not to include each such covered foreign person on the Entity List or make other modifications to the Entity List as appropriate. (b) Updates of list The Secretary of Commerce shall submit to the End-User Review Committee an updated list and corresponding recommendations under paragraph (1)— (1) not later than 180 days after the date of the enactment of this Act, and every 180 days thereafter; and (2) as new information becomes available. 3. Consideration and vote to include covered foreign persons on the Entity List Not later than 90 days after receiving a list of covered foreign persons and corresponding recommendations required by section 2, the End-User Review Committee shall convene a meeting— (1) to consider such list of covered foreign persons and corresponding recommendations; and (2) to hold a vote with respect to including each such covered foreign person on the Entity List or make other modifications to the Entity List as appropriate. 4. Federal financial assistance prohibition In the event that any company is on the list described under section 3— (1) that company may not receive any Federal financial assistance; and (2) the Federal Government may not enter into any contract with such company for any Internet of Things device. 5. Definitions In this Act: (1) Covered foreign person The term covered foreign person — (A) means a foreign person that produces an Internet of Things device