,i  #aac? ,,congress  #a/ ,session  ,h4 
,r4 #fbd  ,,9 ,,! ,,h\se ,,(            
,,repres5tatives  ,febru>y #ac1 #bjac   
,mr4 ,rog]s ( ,mi*igan 7= himself & ,mr4
 ,rupp]sb]g]7 introduc$ ! foll[+ bill2  
:i* 0 ref]r$ to ! ,select ,committee on 
,intellig5ce 7,p]man5t ,select7  ,a     
,,bill  ,to provide = ! %>+ ( c]ta9 cyb]
 ?reat intellig5ce & cyb] ?reat         
in=mation betwe5 ! intellig5ce community
 & cyb]security entities1 & = o!r       
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,cyb] ,intellig5ce ,%>+ &  
,protection ,act4  #b4 ,cyb] ?reat      
intellig5ce & in=mation %>+  7a7 ,9     
g5]al ,title ,,xi ( ! ,national         
,security ,act ( #aidg 7#ej ,u4,s4,c4   
#ddb et seq47 is am5d$ by add+ at ! end 
! foll[+ new section3  #aajd4 ,cyb]     
?reat intellig5ce & in=mation %>+  7a7  
,intellig5ce community %>+ ( cyb] ?reat 
intellig5ce ) private sector & utilities
  7#a7 ,9 g5]al ,! ,director ( ,national
 ,intellig5ce %all e/abli% proc$ures to 
all[ elem5ts ( ! intellig5ce community  

to %>e cyb] ?reat intellig5ce )         
private-sector entities & utilities & to
 enc\rage ! %>+ ( su* intellig5ce4  7#b7
 ,%>+ & use ( classifi$ intellig5ce ,!  
proc$ures e/abli%$ "u p>agraph 7#a7 %all
 provide t classifi$ cyb] ?reat         
intellig5ce may only be--  7,a7 %>$ by  
an elem5t ( ! intellig5ce community )-- 
7i7 a c]tifi$ entity2 or  7ii7 a p]son )
 an appropriate security cle>ance to    
receive su* cyb] ?reat intellig5ce2     
7,b7 %>$ consi/5t ) ! ne$ to protect !  
national security ( ! ,unit$ ,/ates2 &  
7,c7 us$ by a c]tifi$ entity 9 a mann]  
:i* protects su* cyb] ?reat intellig5ce 
f unau?oriz$ disclosure4  7#c7 ,security
 cle>ance approvals ,! ,director (      
,national ,intellig5ce %all issue       
guidel9es provid+ t ! head ( an elem5t (
 ! intellig5ce community may1 z ! head (
 su* elem5t consid]s necess>y to c>ry   
out ?is subsection--  7,a7 grant a      
security cle>ance on a tempor>y or      
p]man5t basis to an employee or (fic] ( 
a c]tifi$ entity2  7,b7 grant a security

 cle>ance on a tempor>y or p]man5t basis
 to a c]tifi$ entity & approval to use  
appropriate facilities2 &  7,c7 exp$ite 
! security cle>ance process = a p]son or
 entity z ! head ( su* elem5t consid]s  
necess>y1 consi/5t ) ! ne$ to protect ! 
national security ( ! ,unit$ ,/ates4    
7#d7 ,no "r or b5efit ,! provision (    
in=mation to a private-sector entity or 
a utility "u ?is subsection %all n      
create a "r or b5efit to simil>         
in=mation by su* entity or su* utility  
or any o!r private-sector entity or     
utility4  7#e7 ,re/riction on disclosure
 ( cyb] ?reat intellig5ce ,not)/&+ any  
o!r provision ( law1 a c]tifi$ entity   
receiv+ cyb] ?reat intellig5ce pursuant 
to ?is subsection %all n fur!r disclose 
su* cyb] ?reat intellig5ce to ano!r     
entity1 o!r ?an to a c]tifi$ entity or  
o!r appropriate ag5cy or dep>tm5t ( !   
,f$]al ,gov]nm5t au?oriz$ to receive su*
 cyb] ?reat intellig5ce4  7b7 ,use (    
cyb]security sy/ems & %>+ ( cyb] ?reat  
in=mation  7#a7 ,9 g5]al  7,a7          

,cyb]security provid]s ,not)/&+ any o!r 
provision ( law1 a cyb]security provid]1
 ) ! express cons5t ( a protect$ entity 
= :i* su* cyb]security provid] is       
provid+ goods or s]vices = cyb]security 
purposes1 may1 = cyb]security purposes--
  7i7 use cyb]security sy/ems to id5tify
 & obta9 cyb] ?reat in=mation to protect
 ! rights & prop]ty ( su* protect$      
entity2 &  7ii7 %>e su* cyb] ?reat      
in=mation ) any o!r entity designat$ by 
su* protect$ entity1 includ+1 if        
specifically designat$1 ! ,f$]al        
,gov]nm5t4  7,b7 ,self-protect$ entities
 ,not)/&+ any o!r provision ( law1 a    
self-protect$ entity may1 = cyb]security
 purposes--  7i7 use cyb]security sy/ems
 to id5tify & obta9 cyb] ?reat in=mation
 to protect ! rights & prop]ty ( su*    
self-protect$ entity2 &  7ii7 %>e su*   
cyb] ?reat in=mation ) any o!r entity1  
includ+ ! ,f$]al ,gov]nm5t4  7#b7 ,%>+ )
 ! ,f$]al ,gov]nm5t  7,a7 ,in=mation %>$
 ) ! ,national ,cyb]security &          
,communications ,integration ,c5t] ( !  

,dep>tm5t ( ,homel& ,security ,subject  
to ! use & protection ( in=mation       
requirem5ts "u p>agraph 7#c71 ! head ( a
 dep>tm5t or ag5cy ( ! ,f$]al ,gov]nm5t 
receiv+ cyb] ?reat in=mation 9          
accordance ) p>agraph 7#a7 %all provide 
su* cyb] ?reat in=mation to ! ,national 
,cyb]security & ,communications         
,integration ,c5t] ( ! ,dep>tm5t (      
,homel& ,security4  7,b7 ,reque/ to %>e 
) ano!r dep>tm5t or ag5cy ( ! ,f$]al    
,gov]nm5t ,an entity %>+ cyb] ?reat     
in=mation t is provid$ to ! ,national   
,cyb]security & ,communications         
,integration ,c5t] ( ! ,dep>tm5t (      
,homel& ,security "u subp>agraph 7,a7 or
 p>agraph 7#a7 may reque/ ! head ( su*  
,c5t] to1 & ! head ( su* ,c5t] may1     
provide su* in=mation to ano!r dep>tm5t 
or ag5cy ( ! ,f$]al ,gov]nm5t4  7#c7    
,use & protection ( in=mation ,cyb]     
?reat in=mation %>$ 9 accordance )      
p>agraph 7#a7--  7,a7 %all only be %>$ 9
 accordance ) any re/rictions plac$ on !
 %>+ ( su* in=mation by ! protect$      

entity or self-protect$ entity au?oriz+ 
su* %>+1 includ+ appropriate            
anonymization or m9imization ( su*      
in=mation2  7,b7 may n be us$ by an     
entity to ga9 an unfair competitive     
advantage to ! detrim5t ( ! protect$    
entity or ! self-protect$ entity        
au?oriz+ ! %>+ ( in=mation2  7,c7 if %>$
 ) ! ,f$]al ,gov]nm5t--  7i7 %all be    
exempt f disclosure "u section #eeb (   
title #e1 ,unit$ ,/ates ,code 7commonly 
kn[n z ! ,fre$om ( ,in=mation ,act72    
7ii7 %all be consid]$ propriet>y        
in=mation & %all n be disclos$ to an    
entity outside ( ! ,f$]al ,gov]nm5t     
except z au?oriz$ by ! entity %>+ su*   
in=mation2  7iii7 %all n be us$ by !    
,f$]al ,gov]nm5t = regulatory purposes2 
7iv7 %all n be provid$ by ! dep>tm5t or 
ag5cy ( ! ,f$]al ,gov]nm5t receiv+ su*  
cyb] ?reat in=mation to ano!r dep>tm5t  
or ag5cy ( ! ,f$]al ,gov]nm5t "u        
p>agraph 7#b77;,a7 if--  7,i7 ! entity  
provid+ su* in=mation det]m9es t !      
provision ( su* in=mation w und]m9e !   

purpose = :i* su* in=mation is %>$2 or  
7,,ii7 unless o!rwise direct$ by !      
,presid5t1 ! head ( ! dep>tm5t or ag5cy 
( ! ,f$]al ,gov]nm5t receiv+ su* cyb]   
?reat in=mation det]m9es t ! provision (
 su* in=mation w und]m9e ! purpose = :i*
 su* in=mation is %>$2 &  7v7 %all be   
h&l$ by ! ,f$]al ,gov]nm5t consi/5t ) ! 
ne$ to protect s\rces & me?ods & !      
national security ( ! ,unit$ ,/ates2 &  
7,d7 %all be exempt f disclosure "u a   
,/ate1 local1 or tribal law or          
regulation t requires public disclosure 
( in=mation by a public or quasi-public 
entity4  7#d7 ,exemption f liability ,no
 civil or crim9al cause ( action %all   
lie or be ma9ta9$ 9 ,f$]al or ,/ate c\rt
 aga9/ a protect$ entity1 self-protect$ 
entity1 cyb]security provid]1 or an     
(fic]1 employee1 or ag5t ( a protect$   
entity1 self-protect$ entity1 or        
cyb]security provid]1 act+ 9 good fai?--
  7,a7 = us+ cyb]security sy/ems to     
id5tify or obta9 cyb] ?reat in=mation or
 = %>+ su* in=mation 9 accordance ) ?is 

section2 or  7,b7 = decisions made bas$ 
on cyb] ?reat in=mation id5tifi$1       
obta9$1 or %>$ "u ?is section4  7#e7    
,relation%ip to o!r laws requir+ !      
disclosure ( in=mation ,! submission (  
in=mation "u ?is subsection to ! ,f$]al 
,gov]nm5t %all n satisfy or affect--    
7,a7 any requirem5t "u any o!r provision
 ( law = a p]son or entity to provide   
in=mation to ! ,f$]al ,gov]nm5t2 or     
7,b7 ! applicability ( o!r provisions ( 
law1 includ+ section #eeb ( title #e1   
,unit$ ,/ates ,code 7commonly kn[n z !  
,fre$om ( ,in=mation ,act71 ) respect to
 in=mation requir$ to be provid$ to !   
,f$]al ,gov]nm5t "u su* o!r provision ( 
law4  7c7 ,f$]al ,gov]nm5t use (        
in=mation  7#a7 ,limitation ,! ,f$]al   
,gov]nm5t may use cyb] ?reat in=mation  
%>$ ) ! ,f$]al ,gov]nm5t 9 accordance ) 
subsection 7b7--  7,a7 = cyb]security   
purposes2  7,b7 = ! inve/igation &      
prosecution ( cyb]security crimes2  7,c7
 = ! protection ( individuals f ! dang] 
( dea? or s]i\s bodily h>m & !          

inve/igation & prosecution ( crimes     
involv+ su* dang] ( dea? or s]i\s bodily
 h>m2  7,d7 = ! protection ( m9ors f    
*ild pornography1 any risk ( sexual     
exploitation1 & s]i\s ?reats to !       
physical safety ( m9ors1 includ+        
kidnapp+ & traffick+ & ! inve/igation & 
prosecution ( crimes involv+ *ild       
pornography1 any risk ( sexual          
exploitation1 & s]i\s ?reats to !       
physical safety ( m9ors1 includ+        
kidnapp+ & traffick+1 & any crime ref]r$
 to 9 section #bbeh;,a7a77#b7 ( title   
#ah1 ,unit$ ,/ates ,code2 or  7,e7 to   
protect ! national security ( ! ,unit$  
,/ates4  7#b7 ,affirmative se>*         
re/riction ,! ,f$]al ,gov]nm5t may n    
affirmatively se>* cyb] ?reat in=mation 
%>$ ) ! ,f$]al ,gov]nm5t "u subsection  
7b7 = a purpose o!r ?an a purpose ref]r$
 to 9 p>agraph 7#a77;,b74  7#c7         
,anti-task+ re/riction ,no?+ 9 ?is      
section %all be con/ru$ to p]mit !      
,f$]al ,gov]nm5t to--  7,a7 require a   
private-sector entity to %>e in=mation )

 ! ,f$]al ,gov]nm5t2 or  7,b7 condition 
! %>+ ( cyb] ?reat intellig5ce ) a      
private-sector entity on ! provision (  
cyb] ?reat in=mation to ! ,f$]al        
,gov]nm5t4  7#d7 ,protection ( s5sitive 
p]sonal docum5ts ,! ,f$]al ,gov]nm5t may
 n use ! foll[+ in=mation1 conta9+      
in=mation t id5tifies a p]son1 %>$ ) !  
,f$]al ,gov]nm5t 9 accordance )         
subsection 7b73  7,a7 ,libr>y           
circulation records4  7,b7 ,libr>y      
patron li/s4  7,c7 ,book sales records4 
7,d7 ,book cu/om] li/s4  7,e7 ,fire>ms  
sales records4  7,f7 ,tax return        
records4  7,g7 ,educational records4    
7,h7 ,m$ical records4  7#e7             
,notification ( non-cyb] ?reat in=mation
 ,if a dep>tm5t or ag5cy ( ! ,f$]al     
,gov]nm5t receiv+ in=mation pursuant to 
subsection 7b77#a7 det]m9es t su*       
in=mation is n cyb] ?reat in=mation1 su*
 dep>tm5t or ag5cy %all notify ! entity 
or provid] %>+ su* in=mation pursuant to
 subsection 7b77#a74  7#f7 ,ret5tion &  
use ( cyb] ?reat in=mation ,no dep>tm5t 

or ag5cy ( ! ,f$]al ,gov]nm5t %all reta9
 or use in=mation %>$ pursuant to       
subsection 7b77#a7 = any use o!r ?an a  
use p]mitt$ "u subsection 7c77#a74  7#g7
 ,protection ( individual in=mation ,!  
,f$]al ,gov]nm5t may1 consi/5t ) ! ne$  
to protect ,f$]al sy/ems & critical     
in=mation infra/ructure f cyb]security  
?reats & to mitigate su* ?reats1        
und]take reasonable ef=ts to limit !    
impact on privacy & civil lib]ties ( !  
%>+ ( cyb] ?reat in=mation ) ! ,f$]al   
,gov]nm5t pursuant to ?is subsection4   
7d7 ,f$]al ,gov]nm5t liability =        
violations ( re/rictions on !           
disclosure1 use1 & protection (         
volunt>ily %>$ in=mation  7#a7 ,9 g5]al 
,if a dep>tm5t or ag5cy ( ! ,f$]al      
,gov]nm5t int5tionally or willfully     
violates subsection 7b77#c77;,c7 or     
subsection 7c7 ) respect to !           
disclosure1 use1 or protection (        
volunt>ily %>$ cyb] ?reat in=mation %>$ 
"u ?is section1 ! ,unit$ ,/ates %all be 
liable to a p]son adv]sely affect$ by   

su* violation 9 an am\nt equal to ! sum 
(--  7,a7 ! actual damages su/a9$ by !  
p]son z a result ( ! violation or       
#a1jjj1 :i*ev] is great]2 &  7,b7 ! co/s
 ( ! action toge!r ) reasonable attorney
 fees z det]m9$ by ! c\rt4  7#b7 ,v5ue  
,an action to en=ce liability creat$ "u 
?is subsection may be br\ght 9 ! di/rict
 c\rt ( ! ,unit$ ,/ates 9--  7,a7 !     
di/rict 9 :i* ! compla9ant resides2     
7,b7 ! di/rict 9 :i* ! pr9cipal place ( 
bus9ess ( ! compla9ant is locat$2  7,c7 
! di/rict 9 :i* ! dep>tm5t or ag5cy ( ! 
,f$]al ,gov]nm5t t disclos$ ! in=mation 
is locat$2 or  7,d7 ! ,di/rict (        
,columbia4  7#c7 ,/atute ( limitations  
,no action %all lie "u ?is subsection   
unless su* action is comm5c$ n lat] ?an 
two ye>s aft] ! date ( ! violation (    
subsection 7b77#c77;,c7 or subsection   
7c7 t is ! basis = ! action4  7#d7      
,exclusive cause ( action ,a cause (    
action "u ?is subsection %all be !      
exclusive means available to a          
compla9ant seek+ a rem$y = a violation (

 subsection 7b77#c77;,c7 or subsection  
7c74  7e7 ,report on in=mation %>+  7#a7
 ,report ,! ,inspector ,g5]al ( !       
,intellig5ce ,community %all annually   
submit to ! congressional intellig5ce   
committees a report conta9+ a review ( !
 use ( in=mation %>$ ) ! ,f$]al         
,gov]nm5t "u ?is section1 includ+--     
7,a7 a review ( ! use by ! ,f$]al       
,gov]nm5t ( su* in=mation = a purpose   
o!r ?an a cyb]security purpose2  7,b7 a 
review ( ! type ( in=mation %>$ ) !     
,f$]al ,gov]nm5t "u ?is section2  7,c7 a
 review ( ! actions tak5 by ! ,f$]al    
,gov]nm5t bas$ on su* in=mation2  7,d7  
appropriate metrics to det]m9e ! impact 
( ! %>+ ( su* in=mation ) ! ,f$]al      
,gov]nm5t on privacy & civil lib]ties1  
if any2  7,e7 a li/ ( ! dep>tm5ts or    
ag5cies receiv+ su* in=mation2  7,f7 a  
review ( ! %>+ ( su* in=mation )9 !     
,f$]al ,gov]nm5t to id5tify             
inappropriate /ovepip+ ( %>$ in=mation2 
&  7,g7 any recomm5dations ( !          
,inspector ,g5]al = improvem5ts or      

modifications to ! au?orities "u ?is    
section4  7#b7 ,=m ,ea* report requir$  
"u p>agraph 7#a7 %all be submitt$ 9     
unclassifi$ =m1 b may include a         
classifi$ annex4  7f7 ,f$]al preemption 
,?is section sup]s$es any /atute ( a    
,/ate or political subdivision ( a ,/ate
 t re/ricts or o!rwise expressly        
regulates an activity au?oriz$ "u       
subsection 7b74  7g7 ,sav+s clauses     
7#a7 ,exi/+ au?orities ,no?+ 9 ?is      
section %all be con/ru$ to limit any o!r
 au?ority to use a cyb]security sy/em or
 to id5tify1 obta91 or %>e cyb] ?reat   
intellig5ce or cyb] ?reat in=mation4    
7#b7 ,limitation on milit>y &           
intellig5ce community involvem5t 9      
private & public sector cyb]security    
ef=ts ,no?+ 9 ?is section %all be       
con/ru$ to provide additional au?ority  
to1 or modify an exi/+ au?ority (1 !    
,dep>tm5t ( ,def5se or ! ,national      
,security ,ag5cy or any o!r elem5t ( !  
intellig5ce community to control1       
modify1 require1 or o!rwise direct !    

cyb]security ef=ts ( a private-sector   
entity or a compon5t ( ! ,f$]al         
,gov]nm5t or a ,/ate1 local1 or tribal  
gov]nm5t4  7#c7 ,in=mation %>+          
relation%ips ,no?+ 9 ?is section %all be
 con/ru$ to--  7,a7 limit or modify an  
exi/+ in=mation %>+ relation%ip2  7,b7  
prohibit a new in=mation %>+            
relation%ip2  7,c7 require a new        
in=mation %>+ relation%ip betwe5 !      
,f$]al ,gov]nm5t & a private-sector     
entity2 or  7,d7 modify ! au?ority ( a  
dep>tm5t or ag5cy ( ! ,f$]al ,gov]nm5t  
to protect s\rces & me?ods & ! national 
security ( ! ,unit$ ,/ates4  7#d7       
,limitation on ,f$]al ,gov]nm5t use (   
cyb]security sy/ems ,no?+ 9 ?is section 
%all be con/ru$ to provide additional   
au?ority to1 or modify an exi/+ au?ority
 (1 any entity to use a cyb]security    
sy/em own$ or controll$ by ! ,f$]al     
,gov]nm5t on a private-sector sy/em or  
network to protect su* private-sector   
sy/em or network4  7#e7 ,no liability = 
non-p>ticipation ,no?+ 9 ?is section    

%all be con/ru$ to subject a protect$   
entity1 self-protect$ entity1 cyb]      
security provid]1 or an (fic]1 employee1
 or ag5t ( a protect$ entity1           
self-protect$ entity1 or cyb]security   
provid]1 to liability = *oos+ n to      
engage 9 ! volunt>y activities au?oriz$ 
"u ?is section4  7#f7 ,use & ret5tion ( 
in=mation ,no?+ 9 ?is section %all be   
con/ru$ to au?orize1 or to modify any   
exi/+ au?ority (1 a dep>tm5t or ag5cy ( 
! ,f$]al ,gov]nm5t to reta9 or use      
in=mation %>$ pursuant to subsection    
7b77#a7 = any use o!r ?an a use p]mitt$ 
"u subsection 7c77#a74  7h7 ,def9itions 
,9 ?is section3  7#a7 ,availability ,!  
t]m availability means ensur+ timely &  
reliable access to & use ( in=mation4   
7#b7 ,c]tifi$ entity ,! t]m c]tifi$     
entity means a protect$ entity1         
self-protect$ entity1 or cyb]security   
provid] t--  7,a7 possesses or is       
eligible to obta9 a security cle>ance1 z
 det]m9$ by ! ,director ( ,national     
,intellig5ce2 &  7,b7 is able to        

demon/rate to ! ,director ( ,national   
,intellig5ce t su* provid] or su* entity
 c appropriately protect classifi$ cyb] 
?reat intellig5ce4  7#c7 ,confid5tiality
 ,! t]m confid5tiality means pres]v+    
au?oriz$ re/rictions on access &        
disclosure1 includ+ means = protect+    
p]sonal privacy & propriet>y in=mation4 
7#d7 ,cyb] ?reat in=mation  7,a7 ,9     
,g5]al ,! t]m cyb] ?reat in=mation means
 in=mation directly p]ta9+ to--  7i7 a  
vuln]ability ( a sy/em or network ( a   
gov]nm5t or private entity2  7ii7 a     
?reat to ! integrity1 confid5tiality1 or
 availability ( a sy/em or network ( a  
gov]nm5t or private entity or any       
in=mation /or$ on1 process$ on1 or      
transit+ su* a sy/em or network2  7iii7 
ef=ts to d5y access to or degrade1      
disrupt1 or de/roy a sy/em or network ( 
a gov]nm5t or private entity2 or  7iv7  
ef=ts to ga9 unau?oriz$ access to a     
sy/em or network ( a gov]nm5t or private
 entity1 includ+ to ga9 su* unau?oriz$  
access = ! purpose ( exfiltrat+         

in=mation /or$ on1 process$ on1 or      
transit+ a sy/em or network ( a gov]nm5t
 or private entity4  7,b7 ,exclusion    
,su* t]m does n include in=mation p]ta9+
 to ef=ts to ga9 unau?oriz$ access to a 
sy/em or network ( a gov]nm5t or private
 entity t solely involve violations (   
consum] t]ms ( s]vice or consum] lic5s+ 
agreem5ts & d n o!rwise con/itute       
unau?oriz$ access4  7#e7 ,cyb] ?reat    
intellig5ce  7,a7 ,9 g5]al ,! t]m cyb]  
?reat intellig5ce means intellig5ce 9 ! 
possession ( an elem5t ( ! intellig5ce  
community directly p]ta9+ to--  7i7 a   
vuln]ability ( a sy/em or network ( a   
gov]nm5t or private entity2  7ii7 a     
?reat to ! integrity1 confid5tiality1 or
 availability ( a sy/em or network ( a  
gov]nm5t or private entity or any       
in=mation /or$ on1 process$ on1 or      
transit+ su* a sy/em or network2  7iii7 
ef=ts to d5y access to or degrade1      
disrupt1 or de/roy a sy/em or network ( 
a gov]nm5t or private entity2 or  7iv7  
ef=ts to ga9 unau?oriz$ access to a     

sy/em or network ( a gov]nm5t or private
 entity1 includ+ to ga9 su* unau?oriz$  
access = ! purpose ( exfiltrat+         
in=mation /or$ on1 process$ on1 or      
transit+ a sy/em or network ( a gov]nm5t
 or private entity4  7,b7 ,exclusion    
,su* t]m does n include intellig5ce     
p]ta9+ to ef=ts to ga9 unau?oriz$ access
 to a sy/em or network ( a gov]nm5t or  
private entity t solely involve         
violations ( consum] t]ms ( s]vice or   
consum] lic5s+ agreem5ts & d n o!rwise  
con/itute unau?oriz$ access4  7#f7      
,cyb]security crime ,! t]m cyb]security 
crime means--  7,a7 a crime "u a ,f$]al 
or ,/ate law t involves--  7i7 ef=ts to 
d5y access to or degrade1 disrupt1 or   
de/roy a sy/em or network2  7ii7 ef=ts  
to ga9 unau?oriz$ access to a sy/em or  
network2 or  7iii7 ef=ts to exfiltrate  
in=mation f a sy/em or network )\t      
au?orization2 or  7,b7 ! violation ( a  
provision ( ,f$]al law relat+ to comput]
 crimes1 includ+ a violation ( any      
provision ( title #ah1 ,unit$ ,/ates    

,code1 creat$ or am5d$ by ! ,comput]    
,fraud & ,abuse ,act ( #aihf 7,public   
,law #ii-dgd74  7#g7 ,cyb]security      
provid] ,! t]m cyb]security provid]     
means a non-gov]nm5tal entity t provides
 goods or s]vices int5d$ to be us$ =    
cyb]security purposes4  7#h7            
,cyb]security purpose  7,a7 ,9 g5]al ,! 
t]m cyb]security purpose means ! purpose
 ( ensur+ ! integrity1 confid5tiality1  
or availability (1 or safegu>d+1 a sy/em
 or network1 includ+ protect+ a sy/em or
 network f--  7i7 a vuln]ability ( a    
sy/em or network2  7ii7 a ?reat to !    
integrity1 confid5tiality1 or           
availability ( a sy/em or network or any
 in=mation /or$ on1 process$ on1 or     
transit+ su* a sy/em or network2  7iii7 
ef=ts to d5y access to or degrade1      
disrupt1 or de/roy a sy/em or network2  
or  7iv7 ef=ts to ga9 unau?oriz$ access 
to a sy/em or network1 includ+ to ga9   
su* unau?oriz$ access = ! purpose (     
exfiltrat+ in=mation /or$ on1 process$  
on1 or transit+ a sy/em or network4     

7,b7 ,exclusion ,su* t]m does n include 
! purpose ( protect+ a sy/em or network 
f ef=ts to ga9 unau?oriz$ access to su* 
sy/em or network t solely involve       
violations ( consum] t]ms ( s]vice or   
consum] lic5s+ agreem5ts & d n o!rwise  
con/itute unau?oriz$ access4  7#i7      
,cyb]security sy/em  7,a7 ,9 g5]al ,!   
t]m cyb]security sy/em means a sy/em    
design$ or employ$ to ensure !          
integrity1 confid5tiality1 or           
availability (1 or safegu>d1 a sy/em or 
network1 includ+ protect+ a sy/em or    
network f--  7i7 a vuln]ability ( a     
sy/em or network2  7ii7 a ?reat to !    
integrity1 confid5tiality1 or           
availability ( a sy/em or network or any
 in=mation /or$ on1 process$ on1 or     
transit+ su* a sy/em or network2  7iii7 
ef=ts to d5y access to or degrade1      
disrupt1 or de/roy a sy/em or network2  
or  7iv7 ef=ts to ga9 unau?oriz$ access 
to a sy/em or network1 includ+ to ga9   
su* unau?oriz$ access = ! purpose (     
exfiltrat+ in=mation /or$ on1 process$  

on1 or transit+ a sy/em or network4     
7,b7 ,exclusion ,su* t]m does n include 
a sy/em design$ or employ$ to protect a 
sy/em or network f ef=ts to ga9         
unau?oriz$ access to su* sy/em or       
network t solely involve violations (   
consum] t]ms ( s]vice or consum] lic5s+ 
agreem5ts & d n o!rwise con/itute       
unau?oriz$ access4  7#aj7 ,integrity ,! 
t]m integrity means gu>d+ aga9/ improp] 
in=mation modification or de/ruction1   
includ+ ensur+ in=mation nonrepudiation 
& au!nticity4  7#aa7 ,protect$ entity ,!
 t]m protect$ entity means an entity1   
o!r ?an an individual1 t contracts ) a  
cyb]security provid] = goods or s]vices 
to be us$ = cyb]security purposes4      
7#ab7 ,self-protect$ entity ,! t]m      
self-protect$ entity means an entity1   
o!r ?an an individual1 t provides goods 
or s]vices = cyb]security purposes to   
itself4  7#ac7 ,utility ,! t]m utility  
means an entity provid+ ess5tial s]vices
 7o!r ?an law en=cem5t or regulatory    
s]vices71 includ+ electricity1 natural  

gas1 propane1 telecommunications1       
transportation1 wat]1 or wa/ewat]       
s]vices4  4  7b7 ,proc$ures & guidel9es 
,! ,director ( ,national ,intellig5ce   
%all--  7#a7 n lat] ?an #fj days aft] ! 
date ( ! enactm5t ( ?is ,act1 e/abli%   
proc$ures "u p>agraph 7#a7 ( section    
#aajd7;a7 ( ! ,national ,security ,act (
 #aidg1 z add$ by subsection 7a7 ( ?is  
section1 & issue guidel9es "u p>agraph  
7#c7 ( su* section #aajd7;a72  7#b7 9   
e/abli%+ su* proc$ures & issu+ su*      
guidel9es1 consult ) ! ,secret>y (      
,homel& ,security to ensure t su*       
proc$ures & su* guidel9es p]mit ! own]s 
& op]ators ( critical infra/ructure to  
receive all appropriate cyb] ?reat      
intellig5ce 7z def9$ 9 section          
#aajd7;h77#c7 ( su* ,act1 z add$ by     
subsection 7a77 9 ! possession ( !      
,f$]al ,gov]nm5t2 &  7#c7 foll[+ !      
e/abli%m5t ( su* proc$ures & ! issuance 
( su* guidel9es1 exp$iti\sly di/ribute  
su* proc$ures & su* guidel9es to        
appropriate dep>tm5ts & ag5cies ( !     

,f$]al ,gov]nm5t1 private-sector        
entities1 & utilities 7z def9$ 9 section
 #aajd7;h77#i7 ( su* ,act1 z add$ by    
subsection 7a774  7c7 ,initial report ,!
 fir/ report requir$ to be submitt$ "u  
subsection 7e7 ( section #aajd ( !      
,national ,security ,act ( #aidg1 z add$
 by subsection 7a7 ( ?is section1 %all  
be submitt$ n lat] ?an #a ye> aft] !    
date ( ! enactm5t ( ?is ,act4  7d7      
,table ( cont5ts am5dm5t ,! table (     
cont5ts 9 ! fir/ section ( ! ,national  
,security ,act ( #aidg is am5d$ by add+ 
at ! end ! foll[+ new item3  ,sec4      
#aajd4 ,cyb] ?reat intellig5ce &        
in=mation %>+4  4  #c4 ,sunset          
,effective on ! date t is #e ye>s aft] !
 date ( ! enactm5t ( ?is ,act--  7#a7   
section #aajd ( ! ,national ,security   
,act ( #aidg1 z add$ by section #b7;a7 (
 ?is ,act1 is repeal$2 &  7#b7 ! table (
 cont5ts 9 ! fir/ section ( ! ,national 
,security ,act ( #aidg1 z am5d$ by      
section #b7;d7 ( ?is ,act1 is am5d$ by  
/rik+ ! item relat+ to section #aajd1 z 

add$ by su* section #b7;d74