,,ii  #aaeth ,,congress  #b;d ,session  
,s4 #cghh  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,december #ai1 
#bjah,mr4 ,sasse introduced the         
following bill2 which was read twice and
 referred to the ,committee on ,homeland
 ,security and ,governmental ,affairs   
,a ,,bill  ,to require studies on       
cyberexploitation of employees of       
certain ,federal departments and their  
families1 and for other purposes4  #a4  
,study on cyberexploitation of employees
 of certain ,federal departments and    
their families  7a7 ,definitions ,in    
this section3 7#a7 ,covered department  
,the term covered department includes   
the following3  7,a7 ,the ,department of
 ,justice4  7,b7 ,the ,department of    
,energy4  7,c7 ,the ,department of      
,homeland ,security4  7,d7 ,the         
,department of ,state4  7,e7 ,the       
,department of the ,treasury4  7,f7 ,the
 ,united ,states ,agency for            
,international ,development4  7,g7 ,the 
civilian employees of the ,department of

 ,defense4  7#b7 ,cyberexploitation ,the
 term cyberexploitation means the use of
 digital means to knowingly access1 or  
conspire to access1 without             
authorization1 an individual's personal 
information to be employed 7or to be    
used for7 with malicious intent4  7#c7  
,deep fake ,the term deep fake means the
 digital insertion of a person's        
likeness into or digital alteration of a
 person's likeness in visual media1 such
 as photographs and videos1 without the 
person's permission and with malicious  
intent4  7b7 ,study required ,not later 
than #aej days after the date of the    
enactment of this ,act1 each head of a  
covered department shall complete a     
study on the cyberexploitation of the   
personal information and accounts of    
employees of the covered department and 
their families4  7c7 ,elements ,the     
study required by subsection 7b7 shall  
include1 with respect to a covered      
department1 the following3  7#a7 ,an    
assessment of the vulnerability of      

employees described in subsection 7b7   
and their families to inappropriate     
access to their personal information and
 accounts of such employees and their   
families1 including identification of   
particularly vulnerable subpopulations4 
7#b7 ,creation of a catalogue of past   
and current efforts by foreign          
governments and non-state actors at the 
cyberexploitation of the personal       
information and accounts of such        
employees and their families1 including 
an assessment of the purposes of such   
efforts and their degrees of success4   
7#c7 ,an assessment of the actions taken
 by the department or agency to educate 
employees and their families1 including 
particularly vulnerable subpopulations1 
about and actions that can be taken to  
otherwise reduce these threats4  7#d7   
,assessment of the potential for the    
cyberexploitation of misappropriated    
images and videos as well as deep fakes4
  7#e7 ,development of recommendations  
for policy changes to reduce the        

vulnerability of such employees and     
their families to cyberexploitation1    
including recommendations for           
legislative or administrative action4   
7d7 ,report  7#a7 ,in general ,each head
 of a covered department shall submit to
 ,congress a report on the findings of  
the head with respect to the study      
conducted by the head under subsection  
7b74  7#b7 ,form ,the report required by
 paragraph 7#a7 shall be submitted in   
unclassified form1 but may include a    
classified annex4