,,ii  #aad? ,,congress  #a/ ,session    
,s4 #def  ,,9 ,,! ,,s5ate ,,( ,,!       
,,unit$ ,,/ates  ,febru>y #aa1 #bjae,mr4
 ,c>p] introduc$ ! foll[+ bill2 :i* 0   
read twice & ref]r$ to ! ,committee on  
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to codify me*anisms =     
enabl+ cyb]security ?reat indicator %>+ 
betwe5 private & gov]nm5t entities1 z   
well z among private entities1 to bett] 
protect in=mation sy/ems4  #a4 ,%ort    
title ,?is ,act may be cit$ z ! ,cyb]   
,?reat ,%>+ ,act ( #bjae4  #b4 ,cyb]    
?reat indicator %>+  7a7 ,9 g5]al       
,subtitle ,c ( title ,,ii ( ! ,homel&   
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#ada et seq47 is am5d$ by add+ at ! end 
! foll[+3  #bbi4 ,cyb] ?reat indicator  
%>+  7a7 ,def9itions ,9 ?is section1 !  
foll[+ def9itions %all apply3 7#a7 ,c5t]
 ,! t]m ,c5t] means ! national          
cyb]security & communications           
integration c5t] e/abli%$ "u ! second   
section designat$ z section #bbf4  7#b7 
,cyb] ?reat ,! t]m cyb] ?reat-- 7,a7    

means any action t may result 9-- 7i7   
unau?oriz$ access 9 ord] to damage or   
impair ! integrity1 confid5tiality1 or  
availability ( an in=mation sy/em2 or   
7ii7 unau?oriz$ exfiltration1 deletion1 
or manipulation ( in=mation t is /or$   
on1 process$ by1 or transit+ an         
in=mation sy/em2 &  7,b7 does n include 
exce$+ au?oriz$ access ( an in=mation   
sy/em1 if su* access solely involves a  
violation ( consum] t]ms ( s]vice or    
consum] lic5s+ agreem5ts4  7#c7 ,cyb]   
?reat indicator ,! t]m cyb] ?reat       
indicator means in=mation-- 7,a7 t is   
necess>y to indicate1 describe1 or      
id5tify-- 7i7 malici\s reconnaissance1  
includ+ communications t reasonably     
appe> to be transmitt$ = ! purpose (    
ga!r+ te*nical in=mation relat$ to a    
cyb] ?reat2  7ii7 a me?od ( defeat+ a   
te*nical control or an op]ational       
control2  7iii7 a te*nical vuln]ability2
  7iv7 a me?od ( caus+ a us] )          
legitimate access to an in=mation sy/em 
or in=mation t is /or$ on1 process$ by1 

or transit+ an in=mation sy/em          
inadv]t5tly to enable ! defeat ( a      
te*nical control or an op]ational       
control2  7v7 malici\s cyb] comm& &     
control2 or  7vi7 any comb9ation (      
clauses 7i7 ?r\gh 7v72 &  7,b7 f :i*    
reasonable ef=ts h be5 made to remove   
in=mation t may be us$ to id5tify       
specific p]sons reasonably believ$ to be
 unrelat$ to ! cyb] ?reat4  7#d7 ,f$]al 
entity ,! t]m ,f$]al entity means-- 7,a7
 an ag5cy or dep>tm5t ( ! ,unit$ ,/ates2
 or  7,b7 any compon5t1 (fic]1 employee1
 or ag5t ( su* an ag5cy or dep>tm5t1    
act+ 9 8 or h] (ficial capacity4  7#e7  
,gov]nm5tal entity ,! t]m gov]nm5tal    
entity means-- 7,a7 any ,f$]al entity2  
7,b7 any ag5cy or dep>tm5t ( a ,/ate1   
local1 tribal1 or t]ritorial gov]nm5t2  
or  7,c7 any compon5t1 (fic]1 employee1 
or ag5t ( su* an ag5cy or dep>tm5t1 act+
 9 8 or h] (ficial capacity4  7#f7      
,in=mation ,%>+ & ,analysis             
,organization ,! t]m ,in=mation ,%>+ &  
,analysis ,organization has ! mean+ giv5

 t t]m 9 section #bab4  7#g7 ,in=mation 
sy/em ,! t]m in=mation sy/em means a    
discrete set ( h>dw>e & s(tw>e in=mation
 res\rces t collects1 processes1        
ma9ta9s1 uses1 %>es1 dissem9ates1 or    
disposes ( in=mation & communications4  
7#h7 ,malici\s cyb] comm& & control ,!  
t]m malici\s cyb] comm& & control means 
a me?od = remote id5tification (1 access
 to1 or use (1 an in=mation sy/em or    
in=mation t is /or$ on1 process$ by1 or 
transit+ an in=mation sy/em t is kn[n or
 reasonably suspect$ ( be+ associat$ ) a
 kn[n or suspect$ cyb] ?reat4  7#i7     
,malici\s reconnaissance ,! t]m malici\s
 reconnaissance' means a me?od = prob+  
or monitor+ an in=mation sy/em = !      
purpose ( disc]n+ te*nical              
vuln]abilities ( ! in=mation sy/em1 if  
su* me?od is kn[n or reasonably suspect$
 ( be+ associat$ ) a kn[n or suspect$   
cyb] ?reat4  7#aj7 ,non-,f$]al entity ,!
 t]m non-,f$]al entity means a private  
entity or a gov]nm5tal entity o!r ?an a 
,f$]al entity4  7#aa7 ,op]ational       

control ,! t]m op]ational control means 
a security control = an in=mation sy/em 
t is prim>ily implem5t$ & execut$ by p4 
7#ab7 ,private entity ,! t]m private    
entity-- 7,a7 has ! mean+ giv5 ! t]m    
p]son 9 section #a ( title #a1 ,unit$   
,/ates ,code2 &  7,b7 does n include a  
gov]nm5tal entity or a =eign gov]nm5t1  
or any compon5t !re(4  7#ac7            
,sector-specific ag5cy ,! t]m           
sector-specific ag5cy has ! mean+ giv5 t
 t]m 9 section #b7;e7 ( ! ,national     
,in/itute ( ,/&>ds & ,te*nology ,act    
7#ae ,u4,s4,c4 #bgb7;e774  7#ad7        
,te*nical control ,! t]m te*nical       
control means a h>dw>e or s(tw>e        
re/riction on1 or audit (1 access or use
 ( an in=mation sy/em or in=mation t is 
/or$ on1 process$ by1 or transit+ an    
in=mation sy/em t is int5d$ to ensure ! 
confid5tiality1 integrity1 or           
availability ( t in=mation sy/em or !   
in=mation process$ or /or$ by t         
in=mation sy/em4  7#ae7 ,te*nical       
vuln]ability ,! t]m te*nical            

vuln]ability means any attribute (      
h>dw>e1 firmw>e1 or s(tw>e t c\ld enable
 or facilitate ! defeat ( a te*nical    
control4  7b7 ,volunt>y disclosure &    
receipt ( cyb] ?reat indicators  7#a7 ,9
 g5]al ,not)/&+ any o!r provision ( law1
 a private entity may-- 7,a7 disclose a 
lawfully obta9$ cyb] ?reat indicator    
to-- 7i7 a private ,in=mation ,%>+ &    
,analysis ,organization2 &  7ii7 !      
,c5t]2 &  7,b7 receive a cyb] ?reat     
indicator disclos$ "u ?is section by a  
,f$]al or non-,f$]al entity4  7#b7      
,volunt>y %>+ ) law en=cem5t ,any entity
 may disclose a lawfully obta9$ cyb]    
?reat indicator to a ,f$]al entity =    
inve/igative purposes consi/5t ) !      
lawful au?orities ( ! ,f$]al entity4    
7#c7 ,use & protection ( in=mation ,a   
private entity t discloses or receives a
 cyb] ?reat indicator "u p>agraph 7#a7--
 7,a7 may only use1 reta91 or fur!r     
disclose ! cyb] ?reat indicator = !     
purpose (-- 7i7 protect+ an in=mation   
sy/em or in=mation t is /or$ on1        

process$ by1 or transit+ an in=mation   
sy/em f cyb] ?reats2  7ii7 id5tify+ or  
mitigat+ su* cyb] ?reats2 or  7iii7     
report+ a crime2  7,b7 %all take        
reasonable ef=ts-- 7i7 to m9imize       
in=mation t may be us$ to id5tify       
specific p]sons & is reasonably believ$ 
to be unrelat$ to a cyb] ?reat2 &  7ii7 
to safegu>d in=mation t may be us$ to   
id5tify specific p]sons f un9t5d$       
disclosure & unau?oriz$ access or       
acquisition2 &  7,c7 %all comply )      
reasonable re/rictions t a private      
entity places on ! subsequ5t disclosure 
or ret5tion ( a cyb] ?reat indicator t !
 private entity discloses to o!r private
 entities4  7#d7 ,be/ practices =       
private ,in=mation ,%>+ & ,analysis     
,organizations ,! ,secret>y1 9          
consultation ) ! ,secret>y ( ,comm]ce1 !
 ,attorney ,g5]al1 ! ,director ( !      
,(fice ( ,managem5t & ,budget1 & ! heads
 ( sector-specific ag5cies & o!r        
appropriate ,f$]al ag5cies1 %all-- 7,a7 
?r\gh an op5 & competitive process1     

select a private entity to id5tify a    
common set ( be/ practices = ! creation 
& op]ation ( private ,in=mation ,%>+ &  
,analysis ,organizations2 or  7,b7 if   
necess>y1 develop ?r\gh an op5 &        
consultative process ! common set ( be/ 
practices describ$ 9 subp>agraph 7,a74  
7c7 ,f$]al cyb] ?reat indicator %>+     
7#a7 ,civilian portal ,! ,secret>y %all 
designate ! ,c5t] to receive & disclose 
cyb] ?reat indicators to ,f$]al &       
non-,f$]al entities 9 z close to real "t
 z practicable1 consi/5t )1 & 9         
accordance ) ! purposes (1 ?is section4 
7#b7 ,%>+ ) ,non-,f$]al entities  7,a7  
,9 g5]al ,to protect in=mation sy/ems or
 in=mation t is /or$ on1 process$ by1 or
 transit+ an in=mation sy/em f cyb]     
?reats1 ! ,secret>y %all coord9ate      
,f$]al ef=ts to ensure t useful         
classifi$ & unclassifi$ cyb] ?reat      
indicators are %>$ 9 a timely mann] )   
non-,f$]al entities4  7,b7 ,report  7i7 
,9 g5]al ,n lat] ?an #a ye> aft] ! date 
( enactm5t ( ?is section1 & e ye>       

!reaft] = #b ye>s1 ! ,secret>y1 9       
consultation ) ! ,attorney ,g5]al1 !    
,director ( ! ,(fice ( ,managem5t &     
,budget1 ! ,director ( ,national        
,intellig5ce1 ! ,secret>y ( ,def5se1 & !
 heads ( sector-specific ag5cies & o!r  
appropriate ,f$]al ag5cies1 %all submit 
to ,congress a report includ+-- 7,i7 a  
review ( all ,f$]al ef=ts to %>e        
classifi$ & unclassifi$ cyb] ?reat      
indicators to protect in=mation sy/ems f
 cyb] ?reats1 includ+ summ>ies ( !      
nature ( ^? ef=ts & ! quantities (      
in=mation %>$2  7,,ii7 *all5ges to !    
appropriate %>+ ( cyb] ?reat indicators2
 &  7,,iii7 recomm5dations to enhance ! 
appropriate %>+ ( cyb] ?reat indicators4
  7ii7 ,=m ( report ,ea* report submitt$
 "u clause 7i7 %all be 9 unclassifi$ =m1
 b may include a classifi$ annex4  7#c7 
,%>+ among ,f$]al entities  7,a7 ,9     
g5]al ,! ,secret>y1 9 consultation ) !  
heads ( appropriate ag5cies1 %all       
coord9ate & e/abli% proc$ures = ! %>+ ( 
cyb] ?reat indicators among ,f$]al      

ag5cies1 ) appropriate consid]ation (   
privacy & civil lib]ties & ag5cy        
equities4  7,b7 ,%>+ by ! ,c5t] ,!      
,secret>y1 9 consultation ) ! ,attorney 
,g5]al1 ! ,director ( ! ,(fice (        
,managem5t & ,budget1 ! ,director (     
,national ,intellig5ce1 ! ,secret>y (   
,def5se1 & ! heads ( sector-specific    
ag5cies & o!r appropriate ,f$]al        
ag5cies1 %all ensure t cyb] ?reat       
indicators receiv$ & disclos$ by ! ,c5t]
 "u p>agraph 7#a7 are %>$ ) o!r ,f$]al  
entities 9 z close to real "t z         
practicable4  7#d7 ,real "t %>+  7,a7 ,9
 g5]al ,! ,secret>y1 9 coord9ation ) !  
,director ( ! ,national ,in/itute =     
,/&>ds & ,te*nology1 & consi/5t ) !     
,cyb]security ,enhancem5t ,act ( #bjad  
7,public ,law #aac-bgd2 #abh ,/at4      
#biga71 %all develop a program t        
supports & rapidly advances !           
developm5t1 adoption1 & implem5tation ( 
automat$ me*anisms = ! real "t %>+ (    
cyb] ?reat indicators4  7,b7 ,be/       
practices ,to ! maximum ext5t feasible1 

! ,secret>y %all ensure t ! program     
develop$ "u subp>agraph 7,a7 relies on  
op5 s\rce s(tw>e developm5t be/         
practices4  7d7 ,limitation ( liability 
7#a7 ,liability = disclosure ( cyb]     
?reat indicators  7,a7 ,9 g5]al ,a civil
 or crim9al action may n be fil$ or     
ma9ta9$ 9 a ,f$]al or ,/ate c\rt aga9/  
an entity = ! volunt>y disclosure or    
receipt "u ?is section ( a lawfully     
obta9$ cyb] ?reat indicator1 t ! entity 
0 n o!rwise requir$ to disclose1 to or  
f-- 7i7 ! ,c5t]2 or  7ii7 a private     
,in=mation ,%>+ & ,analysis             
,organization1 if ! organization ma9ta9s
 a publicly-available self-c]tification 
t ! organization has adopt$ ! be/       
practices id5tifi$ or develop$ "u       
subsection 7b77#d74  7,b7 ,effective    
date ,subp>agraph 7,a7 %all take effect 
on ! date on :i* ! policies & proc$ures 
are develop$ "u subsection 7e77#a74     
7#b7 ,protection f public disclosure    
7,a7 ,9 g5]al ,a cyb] ?reat indicator t 
is submitt$ by a non-,f$]al entity to ! 

,c5t] %all be exempt f disclosure "u--  
7i7 section #eeb7;b77#c7 ( title #e1    
,unit$ ,/ates ,code2  7ii7 section      
#eeb;a7d7 ( title #e1 ,unit$ ,/ates     
,code2 &  7iii7 any ,/ate law o!rwise   
requir+ disclosure4  7,b7 ,application (
 section #bad  7i7 ,9 g5]al ,except z   
provid$ "u clause 7ii71 a cyb] ?reat    
indicator t is submitt$ by a non-,f$]al 
entity to ! ,c5t] %all be treat$ 9 !    
same mann] z volunt>ily submitt$        
critical infra/ructure in=mation is     
treat$ "u section #bad4  7ii7 ,exception
 ,= purposes ( clause 7i71 ! requirem5ts
 "u subsection 7a77#b7 7reg>d+ an       
express /atem5t7 & subsection           
7e77#b77;,a7 7reg>d+ ackn[l$gm5t (      
receipt7 ( section #bad %all n apply4   
7#c7 ,limitation ( regulatory en=cem5t  
actions  7,a7 ,9 g5]al ,a ,f$]al entity 
may n use a cyb] ?reat indicator receiv$
 "u ?is section z evid5ce 9 a regulatory
 en=cem5t action aga9/ an entity t      
disclos$ ! cyb] ?reat indicator to !    
,f$]al ,gov]nm5t "u subsection 7c74     

7,b7 ,exception ,no?+ 9 subp>agraph 7,a7
 %all be con/ru$ to prev5t a ,f$]al     
entity f us+ a cyb] ?reat indicator     
receiv$ ?r\gh lawful means o!r ?an "u   
?is section z evid5ce 9 a regulatory    
en=cem5t action1 ev5 if ! ,f$]al entity 
also receives ! cyb] ?reat indicator "u 
?is section4  7#d7 ,rule ( con/ruction  
,no?+ 9 ?is section %all be con/ru$ to  
prohibit or o!rwise limit an ,in=mation 
,%>+ & ,analysis ,organization1         
in=mation %>+ & analysis c5t]1 or o!r   
non-,f$]al entity f self-c]tify+ "u     
p>agraph 7#a77;,a77ii7 t ! entity has   
adopt$ ! be/ practices id5tifi$ or      
develop$ "u subsection 7b77#d74  7e7    
,privacy protections  7#a7 ,policies &  
proc$ures  7,a7 ,9 g5]al ,! ,secret>y1 9
 consultation ) ! ,attorney ,g5]al1 !   
,*ief ,privacy ,(fic] ( ! ,dep>tm5t1 !  
,*ief ,privacy & ,civil ,lib]ties ,(fic]
 ( ! ,dep>tm5t ( ,ju/ice1 ! ,secret>y ( 
,comm]ce1 ! ,director ( ,national       
,intellig5ce1 ! ,secret>y ( ,def5se1 !  
,director ( ! ,(fice ( ,managem5t &     

,budget1 ! heads ( sector-specific      
ag5cies & o!r appropriate ag5cies1 & !  
,privacy & ,civil ,lib]ties ,ov]sight   
,bo>d1 %all develop & p]iodically review
 policies & proc$ures gov]n+ ! receipt1 
ret5tion1 use1 & disclosure ( a cyb]    
?reat indicator obta9$ by a ,f$]al      
entity "u ?is section4  7,b7            
,requirem5ts ,! policies & proc$ures    
develop$ "u subp>agraph 7,a7 %all-- 7i7 
reasonably limit ! acquisition1         
int]ception1 ret5tion1 use1 & disclosure
 ( a cyb] ?reat indicator t is          
reasonably likely to id5tify specific   
p]sons1 includ+ by e/abli%+ a process-- 
7,i7 = ! timely de/ruction ( in=mation t
 is kn[n n to be directly relat$ to a   
purpose or use au?oriz$ "u ! section2 & 
7,,ii7 to anonymize & safegu>d in=mation
 receiv$ & disclos$ t may be us$ to     
id5tify specific p]sons unrelat$ to a   
cyb] ?reat2  7ii7 except z provid$ "u   
clause 7iii71 limit ! reception1 use1 & 
ret5tion ( a cyb] ?reat indicator by a  
,f$]al entity only to protect in=mation 

sy/ems f cyb] ?reats2  7iii7 = cyb]     
?reat indicators receiv$ by ! ,c5t] "u  
subsection 7c77#a71 e/abli% publicly    
available guidel9es t au?orize law      
en=cem5t use ( a cyb] ?reat indicator   
receiv$ by a ,f$]al entity "u subsection
 7c7 only to inve/igate1 prosecute1     
disrupt1 or o!rwise respond to-- 7,i7 a 
comput] crime2  7,,ii7 a ?reat ( dea? or
 s]i\s bodily h>m2  7,,iii7 a s]i\s     
?reat to a m9or1 includ+ sexual         
exploitation & ?reats to physical       
safety2 or  7,,iv7 an attempt or        
conspiracy to commit an (f5se describ$ 9
 subclause 7,i71 7,,ii71 or 7,,iii72    
7iv7 pres]ve ! confid5tiality ( disclos$
 propriet>y in=mation to ! greate/ ext5t
 practicable1 & require recipi5ts ( su* 
in=mation to be in=m$ t ! cyb] ?reat    
indicator disclos$ may only be us$ = !  
purposes au?oriz$ "u ?is section2 &  7v7
 provide = appropriate p5alties = any   
(fic]1 employee1 or ag5t ( an ag5cy or  
dep>tm5t ( ! ,unit$ ,/ates :o violates !
 provisions ( ?is section ) respect to !

 receipt1 ret5tion1 or disclosure ( a   
cyb] ?reat indicator4  7#b7 ,ov]sight by
 ,f$]al entities ,! head ( ea* ,f$]al   
entity t receives or discloses a cyb]   
?reat indicator "u ?is section %all     
e/abli% a program to monitor & ov]see   
compliance ) ! policies & proc$ures     
develop$ "u p>agraph 7#a77;,a74  7#c7   
,publication ,! policies & proc$ures    
develop$ "u p>agraph 7#a77;,a7 %all--   
7,a7 be provid$ to ! appropriate        
congressional committees2 &  7,b7 to !  
maximum ext5t practicable1 %all be po/$ 
on ! ,int]net website ( ea* ,f$]al      
entity t receives or discloses a cyb]   
?reat indicator "u ?is section4  7#d7   
,reports  7,a7 ,annual report on privacy
 & civil lib]ties ,! ,*ief ,privacy     
,(fic] ( ! ,dep>tm5t & ! ,*ief ,privacy 
& ,civil ,lib]ties ,(fic] ( ! ,dep>tm5t 
( ,ju/ice1 9 consultation ) ! privacy & 
civil lib]ties (fic]s ( o!r appropriate 
,f$]al ag5cies1 %all submit to ,congress
 an annual report assess+ ! privacy &   
civil lib]ties impact ( ! gov]nm5tal    

activities conduct$ "u ?is section4     
7,b7 ,additional report  7i7 ,9 g5]al ,n
 lat] ?an #b ye>s aft] ! date ( enactm5t
 ( ?is section1 & e ye> !reaft] = #b    
ye>s1 ! ,secret>y1 ! ,director (        
,national ,intellig5ce1 ! ,attorney     
,g5]al1 & ! ,secret>y ( ,def5se %all    
jo9tly submit to ,congress a report t-- 
7,i7 describes ! ext5t to :i* !         
au?orities provid$ "u ?is section h     
enabl$ ! ,f$]al ,gov]nm5t & ! private   
sector to mitigate cyb] ?reats2  7,,ii7 
discloses any significant acts (        
noncompliance by a non-,f$]al entity )  
?is section1 ) special emphasis on      
privacy & civil lib]ties1 & any measures
 tak5 by ! ,f$]al ,gov]nm5t to uncov]   
su* noncompliance2  7,,iii7 describes 9 
g5]al t]ms ! nature & quantity (        
in=mation disclos$ & receiv$ by         
gov]nm5tal entities & private entities  
"u ?is section2  7,,iv7 describes ! uses
 by ,f$]al ag5cies ( in=mation receiv$  
"u ?is section1 includ+ ! g5]al quantity
 ( in=mation be+ us$ = ea* purpose2 &   

7,v7 id5tifies ! em]g5ce ( new ?reats or
 te*nologies t *all5ge ! adequacy ( ?is 
section1 includ+ ! def9itions1          
au?orities1 & requirem5ts ( ?is section1
 = keep+ pace ) ! ?reat4  7ii7 ,=m (    
report ,ea* report submitt$ "u clause   
7i7 %all be submitt$ 9 unclassifi$ =m1 b
 may include a classifi$ annex4  7f7    
,con/ruction & ,f$]al preemption  7#a7  
,con/ruction ,no?+ 9 ?is section may be 
con/ru$-- 7,a7 except z provid$ 9       
subsection 7d77#b71 to limit any law or 
regulation t requires ! disclosure1     
receipt1 or ret5tion ( in=mation2  7,b7 
to limit ! au?ority ( an entity to %>e  
in=mation conc]n+ pot5tial crim9al      
activity or inve/igations ) law en=cem5t
 entities2  7,c7 to limit or prohibit   
o!rwise lawful disclosures ( in=mation  
by a private entity to any gov]nm5tal or
 private entity n conduct$ "u ?is       
section2  7,d7 to all[ ! o!rwise        
unau?oriz$ disclosure by a private      
entity ( in=mation or mat]ial t has be5 
det]m9$ by ! ,f$]al ,gov]nm5t pursuant  

to an ,executive ord]1 /atute1 or       
regulation to require protection aga9/  
unau?oriz$ disclosure = reasons (       
national def5se or =eign relations ( !  
,unit$ ,/ates1 includ+-- 7i7 any        
re/rict$ data1 z def9$ 9 section #aa7y7 
( ! ,atomic ,en]gy ,act ( #aied 7#db    
,u4,s4,c4 #bjad7y772  7ii7 in=mation    
relat$ to intellig5ce s\rces & me?ods2 &
  7iii7 in=mation t is specifically     
subject to a c\rt ord] or a             
c]tification1 directive1 or o!r au?ority
 preclud+ su* disclosure2  7,e7 to      
au?orize or limit liability = actions t 
w\ld-- 7i7 violate ! ,report & ,ord] ( !
 ,f$]al ,communications ,commission )   
reg>d to ,pres]v+ ! ,op5 ,int]net2      
,broadb& ,indu/ry ,practices 7,,gn      
,docket ,no4 #ji-aia1 ,,wc ,docket ,no4 
#jg-eb7 7adopt$ ,decemb] #ba1 #bjaj7 or 
any successor ,report or ,ord] !reto2 or
  7ii7 modify or alt] ! obligations (   
private entities "u ,report or ,ord]    
describ$ 9 clause 7i72 or  7,f7 to all[ 
price-fix+1 allocat+ a m>ket betwe5     

competitors1 monopoliz+ or attempt+ to  
monopolize a m>ket1 boycott+ or ex*anges
 ( price or co/ in=mation1 cu/om] li/s1 
or in=mation reg>d+ future competitive  
plann+4  7#b7 ,f$]al preemption ,?is    
section sup]s$es any law or requirem5t (
 a ,/ate or political subdivision ( a   
,/ate t re/ricts or o!rwise expressly   
regulates ! ret5tion1 use1 or disclosure
 ( a cyb] ?reat indicator by a private  
entity4  7#c7 ,pres]vation ( o!r ,/ate  
law ,except z expressly provid$1 no?+ 9 
?is section %all be con/ru$ to preempt !
 applicability ( any o!r ,/ate law or   
requirem5t4  7#d7 ,no creation ( a "r to
 in=mation ,! provision ( in=mation to a
 non-,f$]al entity "u ?is section does n
 create a "r or b5efit to simil>        
in=mation by any o!r non-,f$]al entity4 
7#e7 ,no ,waiv] ( ,privilege ,no o!rwise
 privileg$ communication obta9$ 9       
accordance )1 or 9 violation (1 !       
provisions ( ?is section %all lose its  
privileg$ "*4  7#f7 ,prohibition on     
requirem5t to provide in=mation to !    

,f$]al ,gov]nm5t ,no?+ 9 ?is section    
%all be con/ru$ to au?orize a ,f$]al    
entity-- 7,a7 to require a non-,f$]al   
entity to %>e in=mation ) ! ,f$]al      
,gov]nm5t2  7,b7 to condition !         
disclosure ( a cyb] ?reat indicator "u  
to ?is section to a non-,f$]al entity on
 ! provision ( cyb] ?reat in=mation to !
 ,f$]al ,gov]nm5t2 or  7,c7 to condition
 ! aw>d ( any ,f$]al grant1 contract or 
pur*ase on ! provision ( a cyb] ?reat   
indicator to a ,f$]al entity1 if !      
provision ( ! cyb] ?reat indicator does 
n reasonably relate to ! protection ( ! 
in=mation sy/em ( ! ,f$]al entity or    
in=mation1 goods1 or s]vices cov]$ by ! 
aw>d4  4  7b7 ,te*nical & con=m+ am5dm5t
 ,! table ( cont5ts 9 section #a7;b7 ( !
 ,homel& ,security ,act ( #bjjb 7#f     
,u4,s4,c4 #aja note7 is am5d$ by ins]t+ 
aft] ! item relat+ to section #bbh !    
foll[+3  ,sec4 #bbi4 ,cyb] ?reat %>+4  4
  7c7 ,sunset ,effective on ! date t is 
#e ye>s aft] ! date ( enactm5t ( ?is    
,act-- 7#a7 section #bbi ( ! ,homel&    

,security ,act ( #bjjb1 z add$ by       
subsection 7a71 is repeal$2 &  7#b7 !   
table ( cont5ts 9 section #a7;b7 ( !    
,homel& ,security ,act ( #bjjb 7#f      
,u4,s4,c4 #aja note7 is am5d$ by /rik+ !
 item relat+ to section #bbi4  #c4 ,s5se
 ( ,congress ,x is ! s5se ( ,congress t 
! /atem5t issu$ by ! ,dep>tm5t ( ,ju/ice
 & ! ,f$]al ,trade ,commission on ,april
 #aj1 #bjad entitl$ ,antitru/ ,policy   
,/atem5t ,on ,%>+ ,( ,cyb]security      
,in=mation provides protections aga9/   
antitru/ conc]ns = ! legitimate %>+ (   
cyb] ?reat indicators 7z def9$ 9 section
 #bbi ( ! ,homel& ,security ,act ( #bjjb
 7z add$ by section #b774