What the 2026 SBIR Reauthorization (S.3971)
changed for Phase III.

What S.3971 is, in one paragraph.

S.3971 is the SBIR/STTR Reauthorization Act of 2026. It was signed into law on April 13, 2026, extending the SBIR and STTR programs that had been operating under short-term reauthorizations for several years. Beyond the extension itself, S.3971 introduced changes in three policy areas that matter to current and prospective awardees: contracting officer training on Phase III, foreign-risk and ownership scrutiny, and program performance metrics.

What did not change.

The most important thing to understand about S.3971 is what it left in place. The Phase III sole-source authority — the legal foundation of every Phase III contract — is unchanged. So is the rest of the Phase III framework:

• 15 U.S.C. § 638(r) sole-source authority — intact.
• No dollar cap on Phase III — intact.
• No time limit on Phase III — intact.
• Any federal agency can issue a Phase III — intact.
• 20-year SBIR data-rights protection under DFARS 252.227-7018 — intact.
• Phase III can be any work type and any contract vehicle — intact.

Anyone you encounter claiming that S.3971 "changed the rules" for Phase III is almost always conflating it with other recent regulatory changes (the 2024 DFARS final rule, FY26 NDAA provisions, or agency-specific implementation guidance).

Change 1 — New contracting officer training on Phase III.

S.3971 includes a mandate for new contracting officer training on Phase III sole-source authority. This is one of the most consequential pieces of the statute for actual awardees, even though it does not change the law itself. The mandate is a recognition that confusion about the Phase III pathway — particularly the J&A question and the DEC standard — has been a structural barrier to SBIR commercialization for years.

The practical implication: over the next several years, the contracting workforce should become measurably more comfortable with the Phase III pathway. That should reduce the friction that today's awardees still experience when they walk into a contracting shop that has never awarded a Phase III. It does not change the underlying legal framework; it should reduce the speed at which an awardee has to educate a contracting officer in the room.

Change 2 — Foreign-risk and ownership scrutiny.

S.3971 strengthens the SBIR program's foreign-risk provisions. Companies with foreign ownership, control, or influence above defined thresholds face additional review before SBIR awards (Phase I, II, or III). The exact thresholds and the review mechanism vary by agency implementation; most agencies are still operationalizing the requirement.

For most domestically-owned small businesses with no foreign equity or contractual ties to certain foreign entities, this is a paperwork change — certifications and disclosures — rather than a substantive barrier. For companies with material foreign investment or partnership exposure, the new screening can be a meaningful pre-award checkpoint and should be planned around.

Change 3 — Program performance metrics and transparency.

S.3971 updates the performance metrics agencies are required to track and report on for SBIR/STTR. Commercialization rates, transition statistics, and Phase III outcomes are reported more granularly than before. For awardees, the immediate effect is mostly the kind of metrics SBA and individual agency SBIR offices ask about as part of post-award reporting; for the program over time, it is intended to surface where commercialization is and is not happening so policy can adjust.

What did not change but is often misattributed.

A few items came up in policy conversation but did not make it into S.3971:

• The 20-year SBIR data-rights protection period. Unchanged. The 2024 DFARS final rule is the document that clarified marking and scope; S.3971 did not touch the duration.
• The Phase II dollar cap. Adjusted in earlier reauthorizations, not by S.3971.
• Phase III itself being capped or competed. Did not happen. Periodic proposals to require Phase III competition or impose dollar ceilings did not survive into the enacted bill.

What this means in practice for an awardee right now.

For Phase II awardees preparing for Phase III, the operational guidance is largely unchanged. The contracting pathway, documentation requirements, and data-rights position you were preparing for last year are the same ones you should be preparing for now. The two things worth doing differently:

1. If you have foreign-equity exposure, check the new disclosures. A pre-award certification you used to file in one paragraph may now require several pages of detail.
2. If you walk into a contracting shop on Phase III over the next year or two, expect the CO to be marginally better trained on the pathway. That is good news. It does not eliminate the need to bring the source materials (statute, Policy Directive, agency guidebook, draft DEC) into the room; it does mean the conversation should run smoother than it did before.

The window for content about this.

S.3971 is recent enough that most published commentary has not caught up with what actually changed versus what got proposed and dropped. Over the next 6–12 months expect substantial corrective reporting as agencies issue implementation guidance. This page will be updated as material implementation details emerge.

Frequently asked questions.