The Mapping America’s Pharmaceutical Supply (MAPS) Act directs the Secretary of Health and Human Services to maintain and publish an Essential Medicines List of active pharmaceutical ingredients (APIs) and drugs that are critical for chemical/biological/nuclear response, high‑priority health care, chronic conditions, or military preparedness. The bill requires HHS to conduct recurring, comprehensive risk assessments of those supply chains and to build a mapping and analytics capability—coordinating across agencies and with industry—to identify vulnerabilities and inform mitigation actions.
The law also mandates recurring reporting: public summaries of risk assessments, an HHS mapping report, and biannual Department of Defense disclosures listing drugs purchased with components or finished products tied to the People’s Republic of China. The measures centralize federal visibility into pharmaceutical sourcing and tie intelligence to potential use of authorities such as the Defense Production Act, while carving out confidentiality and cybersecurity protections for shared commercial data.
At a Glance
What It Does
The bill requires HHS to maintain a living Essential Medicines List, run a supply‑chain risk assessment for items on that list, and create a mapping program that visualizes flows from starting materials through finished dosage forms using data analytics. It mandates coordination with Defense and other agencies, public reports on findings, and biannual DoD disclosures about China‑sourced inputs or finished drugs.
Who It Affects
HHS (including FDA) and Defense will be primary implementers; relevant federal agencies must share data. Pharmaceutical manufacturers, API and excipient suppliers, contract manufacturers, and distributors will be the private‑sector data providers and the subject of scrutiny. Hospitals, clinicians, and procurement officers will be downstream beneficiaries of improved shortage forecasting.
Why It Matters
This bill centralizes supply‑chain intelligence in HHS and links it explicitly to national security and public‑health decisionmaking, creating a single, recurring process to identify risks and inform use of procurement or domestic production incentives. For compliance officers and supply planners, the MAPS Act signals increased federal visibility into sourcing and a higher chance of policy interventions to shore up domestic capacity.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The MAPS Act directs the Secretary of Health and Human Services to take three connected steps: make and maintain an Essential Medicines List, assess the supply chains for those items, and build a mapping capability that uses data analytics to spot vulnerabilities. The Essential Medicines List must cover APIs and finished drugs tied to CBRN response, high‑priority clinical care, chronic disease outcomes, and items the Secretary of Defense deems critical for readiness.
HHS must publish the list and update it regularly.
Parallel to maintaining the list, the Secretary—working with the Secretary of Defense and other agencies—must conduct a comprehensive risk assessment for the listed items. The statute prescribes minimum content for that assessment: identification of starting materials and excipients, concentration of production with foreign suppliers (using the definition of a foreign entity of concern), drugs primarily sourced from foreign establishments, an inventory of domestic manufacturing capabilities (including advanced manufacturing), public‑health and national‑security risks (including cybersecurity), and gaps in federal authorities or processes.
The bill requires an initial assessment and annual follow‑ups, with a public version of the report to improve transparency where possible.For mapping, HHS must coordinate Department efforts and public‑private partnerships to visualize supply chains from raw materials through finished dosage forms and distribution. The mapping authority explicitly contemplates using FDA registration and inspection data (e.g., establishments registered under section 510) and other regulatory actions to populate the map and analytics.
The statute also requires HHS to describe internal roles and responsibilities, facilitate interagency information exchange, and produce an initial mapping report after a defined setup period and then annual updates.The Department of Defense has a separate, recurring reporting duty: every 180 days DOD must list drugs it purchased in the prior period that either contain key inputs or excipients from the People’s Republic of China or are finished there. Finally, the bill includes confidentiality and cybersecurity provisions: information exchanged among agencies for these tasks is shielded from certain disclosure statutes, but the bill preserves existing trade‑secret and FOIA protections and requires robust cybersecurity controls to protect the collected data.
The Five Things You Need to Know
HHS must publish and maintain an Essential Medicines List covering APIs and finished drugs tied to CBRN response, shortage risk, chronic‑care harm, or DoD‑identified military needs.
The statute requires an initial risk assessment and report within 180 days of enactment and then annual assessments identifying key starting materials, foreign concentration (using the 50% threshold tied to a 'foreign entity of concern'), domestic capacity, and mitigation options.
HHS must build a data‑driven supply‑chain mapping program and deliver an initial mapping report within 18 months of enactment, then provide annual updates that analyze vulnerabilities and predictive analytics for shortages.
The Department of Defense must submit a report every 180 days listing drugs it bought in the preceding period that use key materials or finished products sourced from the People’s Republic of China.
Information exchanges among HHS and other agencies for assessments and mapping are exempted from 18 U.S.C. 1905 disclosure liability, while the bill preserves trade secret and FOIA protections and mandates cybersecurity safeguards.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Create and update a federal Essential Medicines List
This section charges the HHS Secretary with producing a living list of essential medicines that includes APIs and finished drugs meeting four criteria: CBRN relevance, high shortage priority, significant impact on chronic-condition outcomes, or DOD criticality. The Secretary must update the list at least every two years and publish it after each update, and complete the first substantive update within 180 days of enactment. Practically, this formalizes an interagency, regularly refreshed catalog that will drive subsequent risk assessments, mapping priorities, and potential procurement or production actions.
Comprehensive supply‑chain risk assessment and reporting
HHS, coordinated with DOD and other agencies, must perform a structured assessment that goes beyond existing shortage lists: it must map inputs (starting materials and excipients), quantify dependence on foreign suppliers—flagging items where a single foreign supplier or entity of concern provides over 50%—and catalog domestic manufacturing capabilities and available advanced manufacturing technologies. The assessment must also analyze cybersecurity and critical‑infrastructure risks and identify statutory or procedural gaps federal agencies face when addressing those risks. The Secretary must deliver a report to specified congressional committees and the Office of the Director of National Intelligence within 180 days and annually thereafter, with a public redacted version released within a year.
Data‑driven mapping and interagency information sharing
This section builds a mapping capability to visualize supply chains from raw materials to finished dosage forms and distribution for the Essential Medicines List. HHS must coordinate across departments, use public‑private partnerships, and leverage regulatory datasets (including FDA‑registered establishment locations and inspection or recall histories) to populate the maps. The statute requires HHS to document internal roles and responsibilities, identify data gaps and duplications among federal offices, and facilitate secure information exchange to enable predictive analytics for shortages and national‑security threats.
Biannual DOD disclosure of China‑linked sourcing in purchases
DOD must report every 180 days to key congressional committees listing all drugs it purchased in the preceding period that either contain key inputs, excipients, or APIs sourced from the People’s Republic of China or whose finished product was manufactured there. This operationalizes a visibility requirement for military procurement to highlight potential supply‑chain fragility tied to a specific foreign jurisdiction and to feed into broader federal mitigation planning.
Permitted interagency information sharing and data protections
The bill creates a non‑liability frame for interagency exchanges by stating that information shared among HHS and other agencies under the act is not a violation of 18 U.S.C. 1905, while explicitly not altering trade secret status or FOIA exemptions. It also directs HHS to implement robust cybersecurity measures to limit unauthorized disclosure. For implementers, this means the statute permits broad data sharing while preserving existing confidentiality regimes and imposing an operational cybersecurity requirement.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- HHS and Federal planners — Gain centralized, repeatable intelligence and analytic tools to prioritize mitigation, coordinate agency actions, and inform use of authorities like the Defense Production Act.
- Department of Defense — Receives regular, acquisition‑specific visibility into whether military purchases rely on PRC‑sourced inputs or finished products, improving readiness risk assessments.
- Hospitals and public‑health systems — Stand to benefit from better early warning and predictive analytics about impending shortages for drugs critical to chronic care and emergency response.
- Domestic manufacturers and advanced‑manufacturing investors — Will receive clearer government signals about priority products and potential mitigation incentives, which can de‑risk investments in reshoring or capacity expansion.
- Congress and oversight bodies — Obtain recurring, structured reporting and public summaries to support legislative or budgeting decisions tied to supply‑chain resilience.
Who Bears the Cost
- Pharmaceutical manufacturers and API/excipient suppliers — Face new compliance and data‑sharing pressure to support mapping and assessments, and potential scrutiny or procurement shifts if identified as single‑source or foreign‑concentrated.
- HHS and FDA — Must allocate staff, build new analytic and cybersecurity infrastructure, and manage interagency coordination; implementation will require funding and technical capacity that may not be fully provided in the statute.
- Foreign suppliers and contract manufacturers (particularly in PRC) — May face reduced demand or reputational and procurement consequences if identified in DoD reports or federal risk assessments.
- Legal and procurement teams at health systems and government purchasers — Will need to revise sourcing strategies, contracts, and contingency plans in response to mapped vulnerabilities and federal guidance.
- Industry stakeholders protecting trade secrets — Will bear the indirect cost of additional legal and procedural measures to preserve confidentiality while complying with mapping and data requests.
Key Issues
The Core Tension
The central dilemma is between achieving the granular transparency national security and public health planners need to foresee and mitigate critical drug shortages, and protecting commercial confidentiality, international trade relationships, and practical feasibility—forcing policymakers to trade some market secrecy for supply‑chain resilience without clear new enforcement authorities or funding to convert visibility into sustained domestic capacity.
The MAPS Act creates stronger federal visibility into pharmaceutical supply chains but leaves important implementation details open. The law directs HHS to obtain establishment‑level production volumes and starting‑material data, but it does not create an explicit statutory authority compelling private‑sector reporting beyond existing registries and regulatory submissions.
That gap means HHS will likely rely on voluntary public‑private partnerships, regulatory data (like FDA registrations and inspections), procurement reporting, and cooperative industry disclosures—approaches that can produce incomplete or biased coverage. The statute’s 50 percent concentration threshold (referencing the William M. (Mac) Thornberry Act definition of a foreign entity of concern) gives a clear trigger for concern, but many vulnerabilities arise well below that threshold when networks are tightly linked.
Publication obligations and the required public versions of reports create a second tension. Public transparency helps downstream users and Congress, but publicizing granular supplier locations or production volumes risks revealing competitively sensitive information and could prompt market disruption or geopolitical retaliation.
The bill attempts to thread this needle by exempting interagency exchanges from certain disclosure liability and preserving trade‑secret and FOIA protections; however, actual practice will depend on how agencies redact and classify information, and whether cybersecurity controls prevent leaks. Finally, the statute ties risk assessment outputs to mitigation options including the Defense Production Act, but it does not set funding for capacity expansion or procurement authorities, leaving a potential mismatch between diagnosis and the federal government’s capacity to act at scale.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.