,i  #aaf? ,,congress  #a/ ,session  ,h4 
,r4 #cbgj  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,june #ac1 #bjai,mr4  
,graves ( ,georgia 7= himself1 ,mr4     
,got!im]1 ,mr4 ,au/9 ,scott ( ,georgia1 
,mr4 ,cuell>1 ,mr4 ,c>t] ( ,georgia1    
,mr4 ,f]guson1 ,mr4 ,riggleman1 ,mr4    
,l\d]milk1 ,mr4 ,/ew>t1 ,mr4 ,palazzo1  
,mr4 ,hill ( ,arkansas1 ,mr4 ,budd1 ,mr4
 ,=t5b]ry1 ,mrs4 ,murphy1 ,mr4          
,res*5?al]1 & ,miss ,rice ( ,new ,york7 
introduc$ ! foll[+ bill2 :i* 0 ref]r$ to
 ! ,committee on ! ,judici>y  ,a ,,bill 
,to am5d title #ah1 ,unit$ ,/ates ,code1
 to provide a def5se to prosecution =   
fraud & relat$ activity 9 connection )  
comput]s = p]sons def5d+ aga9/          
unau?oriz$ intrusions into _! comput]s1 
& = o!r purposes4  #a4 ,%ort title ,?is 
,act may be cit$ z ! ,active ,cyb]      
,def5se ,c]ta9ty ,act4  #b4             
,congressional f9d+s ,congress f9ds !   
foll[+3  7#a7 ,cyb] fraud & relat$      
cyb]-enabl$ crimes pose a sev]e ?reat to
 ! national security & economic vitality

 ( ! ,unit$ ,/ates4  7#b7 ,z a result ( 
! unique nature ( cyb]crime1 x is v     
difficult = law en=cem5t to respond to &
 prosecute cyb]crime 9 a timely mann]1  
lead+ to ! exi/+ l[ level ( det]r5ce & a
 rapidly gr[+ ?reat4 ,9 #bjag1 !        
,dep>tm5t ( ,ju/ice prosecut$ only #afe 
cases ( comput] fraud4 ,congress        
det]m9es t ?is /atus quo is unacceptable
 & t if left un*eck$1 ! tr5d 9 cyb]crime
 w only cont9ue to det]iorate4  7#c7    
,cyb]crim9als h develop$ new tactics =  
monetiz+ ! proce$s ( _! crim9al acts1   
mak+ x likely t ! crim9al activity w be 
fur!r inc5tiviz$ 9 ! abs5ce ( re=ms to  
curr5t law all[+ = new cyb] tools &     
det]r5ce me?ods = def5d]s4  7#d7 ,:5 a  
citiz5 or ,unit$ ,/ates bus9ess is      
victimiz$ z ! result ( su* crime1 ! fir/
 rec\rse %\ld be to report ! crime to   
law en=cem5t & seek to improve def5sive 
measures4  7#e7 ,congress also          
ackn[l$ges t _m cyb]attacks c\ld be     
prev5t$ ?r\gh improv$ cyb] def5sive     
practices1 includ+ enhanc$ tra9+1 /rong 

passwords1 & r\t9e updat+ & pat*+ to    
comput] sy/ems4  7#f7 ,congress det]m9es
 t ! use ( active cyb] def5se te*niques1
 :5 prop]ly appli$1 c also assi/ 9      
improv+ def5ses & det]r+ cyb]crimes4    
7#g7 ,congress also ackn[l$ges t _m     
private entities are increas+ly conc]n$ 
) /emm+ ! gr[? ( d>k web bas$           
cyb]-enabl$ crimes4 ,! ,dep>tm5t (      
,ju/ice %\ld attempt to cl>ify ! prop]  
protocol = entities :o are engag$ 9     
active cyb] def5se 9 ! d>k web s t ^!   
def5d]s c return private prop]ty su* z  
intellectual prop]ty & f9ancial records 
ga!r$ inadv]t5tly4  7#h7 ,congress also 
recognizes t :ile ,f$]al ag5cies w ne$  
to prioritize cyb] incid5ts ( national  
significance1 !re is ! pot5tial to assi/
 ! private sector by be+ m responsive to
 reports ( crime ?r\gh diff]5t report+  
me*anisms4 ,_m report$ cyb]crimes are n 
respond$ to 9 a timely mann] creat+     
significant unc]ta9ty = _m bus9esses &  
individuals4  7#i7 ,comput] def5d]s %\ld
 also ex]cise extreme caution to avoid  

violat+ ! law ( any o!r nation :]e an   
attack]'s comput] may reside4  7#aj7    
,congress holds t active cyb] def5se    
te*niques %\ld only be us$ by qualifi$  
def5d]s ) a high degree ( confid5ce 9   
attribution1 & t extreme caution %\ld be
 tak5 to avoid impact+ int]m$i>y        
comput]s or result+ 9 an escalatory     
cycle ( cyb] activity4  7#aa7 ,x is !   
purpose ( ?is ,act to provide legal     
c]ta9ty by cl>ify+ ! type ( tools &     
te*niques t def5d]s c use t exce$ !     
b\nd>ies ( _! own comput] network4  #c4 
,exception = ! use ( attributional      
te*nology ,section #ajcj ( title #ah1   
,unit$ ,/ates ,code1 is am5d$ by add+ at
 ! end ! foll[+3  7k7 ,exception = ! use
 ( attributional te*nology  7#a7 ,?is   
section %all n apply ) respect to ! use 
( attributional te*nology 9 reg>d to a  
def5d] :o uses a program1 code1 or comm&
 = attributional purposes t beacons or  
returns locational or attributional data
 9 response to a cyb] intrusion 9 ord]  
to id5tify ! s\rce ( an intrusion2 if-- 

7,a7 ! program1 code1 or comm& orig9at$ 
on ! comput] ( ! def5d] b is copi$ or   
remov$ by an unau?oriz$ us]2 &  7,b7 !  
program1 code1 or comm& does n result 9 
! de/ruction ( data or result 9 an      
impairm5t ( ! ess5tial op]at+           
functionality ( ! attack]'s comput]     
sy/em1 or int5tionally create a backdoor
 enabl+ intrusive access into !         
attack]'s comput] sy/em4  7#b7          
,def9ition ,! t]m attributional data    
means any digital in=mation su* z log   
files1 text /r+s1 "t /amps1 malw>e      
samples1 id5tifi]s su* z us] names &    
,int]net ,protocol addresses & metadata 
or o!r digital artifacts ga!r$ ?r\gh    
=5sic analysis4  4  #d4 ,exclusion f    
prosecution = c]ta9 comput] crimes = ^? 
tak+ active cyb] def5se measures        
,section #ajcj ( title #ah1 ,unit$      
,/ates ,code1 is am5d$ by add+ at ! end 
! foll[+3  7l7 ,active cyb] def5se      
measures n a violation  7#a7 ,g5]ally ,x
 is a def5se to a crim9al prosecution "u
 ?is section t ! conduct con/itut+ !    

(f5se 0 an active cyb] def5se measure4  
7#b7 ,inapplicability to civil action ,!
 def5se aga9/ prosecution creat$ by ?is 
section does n prev5t a ,unit$ ,/ates   
p]son or entity :o is t>get$ by an      
active def5se measure f seek+ a civil   
rem$y1 includ+ comp5satory damages or   
injunctive relief pursuant to subsection
 7g74  7#c7 ,def9itions ,9 ?is          
subsection-- 7,a7 ! t]m def5d] means a  
p]son or an entity t is a victim ( a    
p]si/5t unau?oriz$ intrusion ( !        
individual entity's comput]2  7,b7 ! t]m
 active cyb] def5se measure-- 7i7 means 
any measure--  7,i7 und]tak5 by1 or at !
 direction (1 a def5d]2 &  7,,ii7       
consi/+ ( access+ )\t au?orization !    
comput] ( ! attack] to ! def5d]'s own   
network to ga!r in=mation 9 ord] to--   
7aa7 e/abli% attribution ( crim9al      
activity to %>e ) law en=cem5t & o!r    
,unit$ ,/ates ,gov]nm5t ag5cies         
responsible = cyb]security2  7bb7       
disrupt cont9u$ unau?oriz$ activity     
aga9/ ! def5d]'s own network2 or  7cc7  

monitor ! behavior ( an attack] to assi/
 9 develop+ future intrusion prev5tion  
or cyb] def5se te*niques2 b  7ii7 does n
 include conduct t-- 7,i7 int5tionally  
de/roys or r5d]s inop]able in=mation t  
does n belong to ! victim t is /or$ on  
ano!r p]son or entity's comput]2  7,,ii7
 recklessly causes physical injury or   
f9ancial loss z describ$ "u subsection  
7c77#d72  7,,iii7 creates a ?reat to !  
public heal? or safety2  7,,iv7         
int5tionally exce$s ! level ( activity  
requir$ to p]=m reconnaissance on an    
int]m$i>y comput] to all[ = attribution 
( ! orig9 ( ! p]si/5t cyb] intrusion2   
7,v7 int5tionally results 9 intrusive or
 remote access into an int]m$i>y's      
comput]2  7,,vi7 int5tionally results 9 
! p]si/5t disruption to a p]son or      
entities int]net connectivity result+ 9 
damages def9$ "u subsection 7c77#d72 or 
7,,vii7 impacts any comput] describ$ "u 
subsection 7a77#a7 reg>d+ access to     
national security in=mation1 subsection 
7a77#c7 reg>d+ gov]nm5t comput]s1 or to 

subsection 7c77#d77;,a77i77,v7 reg>d+ a 
comput] sy/em us$ by or = a ,gov]nm5t   
entity = ! fur!rance ( ! adm9i/ration ( 
ju/ice1 national def5se1 or national    
security2  7,c7 ! t]m attack] means a   
p]son or an entity t is ! s\rce ( !     
p]si/5t unau?oriz$ intrusion into !     
victim's comput]2 &  7,d7 ! t]m         
int]m$i>y comput] means a p]son or      
entity's comput] t is n "u ! own]%ip or 
prim>y control ( ! attack] b has be5 us$
 to laun* or obscure ! orig9 ( ! p]si/5t
 cyb]-attack4  4  #e4 ,notification     
requirem5t = ! use ( active cyb] def5se 
measures ,section #ajcj ( title #ah1    
,unit$ ,/ates ,code1 is am5d$ by add+ ! 
foll[+3  7m7 ,notification requirem5t = 
! use ( active cyb] def5se measures     
7#a7 ,g5]ally ,a def5d] :o uses an      
active cyb] def5se measure "u ! prec$+  
section mu/ notify ! ,,fbi ,national    
,cyb] ,inve/igative ,jo9t ,task ,=ce &  
receive a response f ! ,,fbi ackn[l$g+  
receipt ( ! notification prior to us+ ! 
measure4  7#b7 ,requir$ in=mation       

,notification mu/ include ! type ( cyb] 
brea* t ! p]son or entity 0 a victim (1 
! int5d$ t>get ( ! active cyb] def5se   
measure1 ! /eps ! def5d] plans to take  
to pres]ve evid5ce ( ! attack]'s crim9al
 cyb] intrusion1 z well z ! /eps !y plan
 to prev5t damage to int]m$i>y comput]s 
n "u ! own]%ip ( ! attack] & o!r        
in=mation reque/$ by ! ,,fbi to assi/ ) 
ov]sight4  4  #f4 ,volunt>y preemptive  
review ( active cyb] def5se measures    
7a7 ,pilot program ,! ,f$]al ,bureau (  
,inve/igation 7h]e9aft] 9 ?is section   
ref]r$ to z ! ,,fbi71 9 coord9ation )   
o!r ,f$]al ag5cies1 %all create a pilot 
program to la/ = #b ye>s aft] ! date (  
enactm5t ( ?is ,act1 to all[ = a        
volunt>y preemptive review ( active     
def5se measures4  7b7 ,advance review ,a
 def5d] :o int5ds to prep>e an active   
def5se measure "u section #d may submit 
_! notification to ! ,,fbi ,national    
,cyb] ,inve/igative ,jo9t ,task ,=ce 9  
advance ( its use s t ! ,,fbi & o!r     
ag5cies c review ! notification &       

provide its assessm5t on h[ ! propos$   
active def5se measure may be am5d$ to   
bett] con=m to ,f$]al law1 ! t]ms (     
section #d1 & improve ! te*nical        
op]ation ( ! measure4  7c7              
,prioritization ( reque/s ,! ,,fbi may  
decide h[ to prioritize ! issuance ( su*
 guidance to def5d]s bas$ on !          
availability ( res\rces4  #g4 ,annual   
report on ! ,f$]al ,gov]nm5t's progress 
9 det]r+ cyb] fraud & cyb]-enabl$ crimes
 ,! ,dep>tm5t ( ,ju/ice1 aft]           
consultation ) ! ,dep>tm5t ( ,homel&    
,security & o!r relevant ,f$]al ag5cies1
 %all deliv] an annual report to        
,congress n lat] ?an ,m>* #ca ( ea* ye>1
 detail+ ! results ( law en=cem5t       
activities p]ta9+ to cyb]crim9al        
det]r5ce = ! previ\s cal5d> ye>4 ,!     
report %all include--  7#a7 ! numb] (   
comput] fraud cases report$ by ,unit$   
,/ates citiz5s & ,unit$ ,/ates bus9esses
 to ,,fbi ,field ,(fices1 ! ,secret     
,s]vice ,electronic ,crimes ,task ,=ce1 
! ,int]net ,crimes ,compla9t ,c5t]      

7,,ic#c7 website1 & o!r ,f$]al law      
en=cem5t ag5cies2  7#b7 ! numb] (       
inve/igations op5$ z a result ( public  
report+ ( comput] fraud crimes1 & !     
numb] ( inve/igations op5 indep5d5tly ( 
any specific crimes be+ report$2  7#c7 !
 numb] ( cyb] fraud cases prosecut$ "u  
section #ajcj ( title #ah1 ,unit$ ,/ates
 ,code1 & o!r relat$ /atutes involv+    
cyb]crime1 includ+ ! resolution ( !     
cases2  7#d7 ! numb] ( comput] fraud    
crimes det]m9$ to h orig9at$ f ,unit$   
,/ates suspects & ! numb] det]m9$ to h  
orig9at$ f =eign suspects1 & details ( !
 c\ntry ( orig9 ( ! suspect$ =eign      
suspects2  7#e7 ! numb] ( d>k web       
cyb]crim9al m>ketplaces & cyb]crim9al   
networks disabl$ by law en=cem5t        
activities2  7#f7 an e/imate ( ! total  
f9ancial damages suff]$ by ,unit$ ,/ates
 citiz5s & bus9esses result+ f ransomw>e
 & o!r fraudul5t cyb]attacks2  7#g7 !   
numb] ( law en=cem5t p]sonnel assign$ to
 inve/igate & prosecute cyb]crimes2 &   
7#h7 ! numb] ( active cyb] def5se       

notifications fil$ z requir$ by ?is ,act
 & a compreh5sive evaluation ( !        
notification process & volunt>y         
preemptive review pilot program4  #h4   
,requirem5t = ! ,dep>tm5t ( ,ju/ice to  
update ! manual on ! prosecution (      
cyb]crimes  7a7 ,! ,dep>tm5t ( ,ju/ice  
%all update ! ,prosecut+ ,comput]       
,crimes ,manual to reflect ! *anges made
 by ?is legislation4  7b7 ,! ,dep>tm5t (
 ,ju/ice is enc\rag$ to seek additional 
opportunities to cl>ify ! manual & o!r  
guidance to ! public to reflect evolv+  
def5sive te*niques & cyb] te*nology t c 
be us$ 9 mann] t does n violate section 
#ajcj ( title #ah1 ,unit$ ,/ates ,code1 
or o!r ,f$]al law & int]national        
treaties4  #i4 ,sunset ,! exclusion f   
prosecution creat$ by ?is ,act %all     
expire #b ye>s aft] ! date ( enactm5t ( 
?is ,act4