If you're a federal prime contractor or a small business pursuing federal work, you've probably seen alarming headlines about executive orders and supplier diversity. Some of the alarm is warranted. Most of it isn't.
Here's the distinction that matters: two separate legal frameworks govern contractor obligations. Statutes are passed by Congress and require an act of Congress to change. Executive orders are issued by the President and can be rescinded by the next President. EO 14173, signed January 20, 2025, made real changes. It did not touch the Small Business Act.
What Congress wrote and cannot be undone by executive order
The Small Business Act (15 U.S.C. § 631 et seq.) created the federal small business contracting system. The law, not any executive order, establishes the following:
The 23% prime contracting goal. Federal agencies are required by statute to award at least 23% of prime contract dollars to small businesses each year. In FY2023, the government awarded $178.6 billion to small businesses, representing 27.2% of eligible spending. That goal exists because Congress wrote it into law.
Category-specific goals. Within that 23%, Congress set sub-goals: 5% to small disadvantaged businesses (SDBs), 5% to women-owned small businesses (WOSBs), 3% to HUBZone-certified firms, and 3% to service-disabled veteran-owned small businesses (SDVOSBs). These percentages are in the statute.
Set-aside programs. The 8(a) Business Development Program, HUBZone program, WOSB Federal Contracting Program, and SDVOSB set-aside program are all creatures of statute. Agencies use them because the law directs them to. No executive order changes that.
Subcontracting plan requirements at FAR 52.219-8 and FAR 52.219-9. If you're a large business holding a federal contract expected to exceed $750,000 (or $1.5 million for construction), you are required by law to have a subcontracting plan that includes small business participation goals. This is not discretionary. The thresholds and requirements are codified in the Federal Acquisition Regulation, which implements statutory authority.
What EO 14173 actually changed
EO 14173 ("Ending Illegal Discrimination and Restoring Merit-Based Opportunity") made two changes that are real and consequential.
It eliminated DEIA offices at federal agencies. Federal agencies were directed to close their dedicated Diversity, Equity, Inclusion, and Accessibility offices and disband related programs. This affects the internal operations of agencies, not the law governing contractors.
It rescinded EO 11246. Executive Order 11246, issued by President Johnson in 1965, required federal contractors to take affirmative action in their hiring and employment practices on the basis of race, color, religion, sex, and national origin. That requirement is gone. The OFCCP (Office of Federal Contract Compliance Programs) had enforced it; its mandate is now narrowed to enforcing Title VII, the Equal Pay Act, Section 503 of the Rehabilitation Act, and VEVRAA.
To be specific about what rescinding EO 11246 means: contractors are no longer required to maintain written affirmative action programs (AAPs) for women and minorities. The OFCCP will no longer audit those programs. You still cannot discriminate in hiring under Title VII, but the affirmative obligation to set numerical placement goals and track workforce utilization is gone.
It required contractors to certify they don't operate "illegal DEI" programs. New contracts include a certification that the contractor does not engage in programs that constitute illegal discrimination. What qualifies as illegal is not fully defined in the order itself; legal guidance is still developing. Contractors should work with counsel on what this means for existing diversity-focused employee resource groups, mentorship programs, and supplier development initiatives.
What did not change for supplier diversity compliance
The practical effect of EO 14173 on your subcontracting obligations is close to zero.
Your subcontracting plan is still required if you hold a large prime contract over $750,000. The goals in that plan, which you negotiate with the contracting officer and then report against through the Electronic Subcontracting Reporting System (eSRS), are still legally binding. Failing to make good-faith efforts to meet those goals can result in liquidated damages under FAR 52.219-16.
The certifications that define who qualifies as a small disadvantaged business, WOSB, SDVOSB, or HUBZone firm are still operational. SBA still runs the 8(a) program. SBA still certifies WOSBs and SDVOSBs. VA still runs VetCert (transferred to SBA in January 2023). HUBZone certifications still require meeting geographic and employee residency criteria. None of the certification programs were created by executive order.
When you're sourcing subcontractors to meet your plan, the same pool of certified firms exists. SAM.gov's dynamic small business search still returns the same certified businesses. The legal preference for using them has not changed.
The practical impact: less outreach, not less obligation
The real change is behavioral, not legal. Federal agencies that previously ran supplier diversity outreach events, maintained supplier development programs, or proactively marketed set-aside opportunities to minority-owned businesses are less likely to do so now. The DEIA staff who organized those programs no longer have agency resources behind them.
For small and diverse businesses, this means less hand-holding and fewer formal networking events sponsored by agencies. The opportunities remain. The pipeline of set-aside contracts remains. The certification programs remain. But businesses that relied on agency outreach to find opportunities will need to substitute their own sourcing activity: GSA Advantage, beta.SAM.gov, agency procurement forecasts, APEX Accelerator assistance.
For large prime contractors, the obligation to find and use small business subcontractors has not changed. If anything, the reduced agency outreach may make it harder to find certified subcontractors passively. Building your own supplier relationships and maintaining an active small business sourcing process is more important now, not less.
Open legal questions as of mid-2025
Several things remain unsettled:
The "illegal DEI" certification language in new contracts is vague. Contractors have filed lawsuits challenging EO 14173's contractor certification requirement. As of June 2025, courts have issued conflicting rulings on preliminary injunctions. If you have an active large prime contract with a certification clause you're uncertain about, get legal advice before your next compliance filing.
State and local law still applies. Many state governments and localities have their own supplier diversity requirements that are independent of federal executive orders. California, New York, Illinois, and others have statutes that require supplier diversity plans from contractors doing state business. Federal rollback does not affect those.
Corporate buyer programs are not governed by any of this. Fortune 500 supplier diversity programs, NMSDC certification, WBENC certification, and related corporate diversity sourcing initiatives are private-sector activities. They may face their own pressure, but EO 14173 does not reach them.
What to do now
If you're a large prime contractor, audit your current subcontracting plans. Confirm your eSRS reporting is current. Review your plan goals against actual spend and document your good-faith efforts, because that documentation is your defense if a contracting officer questions performance.
If you're a small or diverse business, confirm your certifications are current and properly listed in SAM.gov. If you've let a certification lapse, renew it. The set-aside programs are still running and agencies still have statutory goals to meet.
If you're a compliance officer trying to interpret the "illegal DEI" certification, the safest framing is this: programs that don't use race or gender as a deciding factor in individual employment decisions are unlikely to be the target. Programs that set demographic quotas for hiring or promotion carry more risk. This is a space where the law will develop over the next 12 to 24 months.
The bottom line is simple. Congress wrote the small business contracting system into law, and it's still there. What changed is the political environment and the internal agency machinery that had been built around proactive outreach. The contracts, the certifications, and the subcontracting requirements are intact.