I skimmed the bill and I'm having a hard time determining what type of activity is prohibited once an entity is identified, except for

>(B) with respect to a transaction found to pose an undue or unacceptable risk and qualify as a covered transaction, determine whether—

>(i) the covered transaction should be prohibited; or

>(ii) any other action should be taken to mitigate the effects of the covered transaction.

I suppose the least charitable interpretation is that this gives them unlimited power to do whatever they want to "mitigate", but that seems like something that would be struck down by the courts for being too broad.

https://www.congress.gov/bill/118th-congress/senate-bill/686...

Yes, the mitigation action is completely variable and could include basically anything. It's intentionally vague because it might mean banning a service, seizing assets, who knows what.

> (12) MITIGATION MEASURE.—The term “mitigation measure” means a measure agreed to in an agreement between any relevant party and the Federal Government, or ordered by the Federal Government and of which any relevant party has been notified, in any matter addressed under this Act to address any risk arising from a covered transaction or associated with a covered holding.