,i #aafth ,,congress #ast ,session ,h4 ,r4 #gci ,,in ,,the ,,house ,,of ,,representatives ,january #bd1 #bjai,mr4 ,mc,caul 7for himself and ,mr4 ,engel7 introduced the following bill2 which was referred to the ,committee on ,foreign ,affairs ,a ,,bill ,to support ,united ,states international cyber diplomacy1 and for other purposes4 #a4 ,short title2 table of contents 7a7 ,short title ,this ,act may be cited as the ,cyber ,diplomacy ,act of #bjai4 7b7 ,table of contents ,the table of contents for this ,act is as follows3 ,sec4 #a4 ,short title2 table of contents4 ,sec4 #b4 ,findings4 ,sec4 #c4 ,definitions4 ,sec4 #d4 ,united ,states ,international ,cyberspace ,policy4 ,sec4 #e4 ,department of ,state responsibilities4 ,sec4 #f4 ,international cyberspace executive arrangements4 ,sec4 #g4 ,international strategy for cyberspace4 ,sec4 #h4 ,annual country reports on human rights practices4 ,sec4 #i4 ,,gao report on cyber threats and data misuse4 ,sec4 #aj4 ,sense of ,congress on cybersecurity sanctions against ,north ,korea and cybersecurity legislation in ,vietnam4 ,sec4 #aa4 ,rule of construction4 #b4 ,findings ,congress makes the following findings3 7#a7 ,the stated goal of the ,united ,states ,international ,strategy for ,cyberspace1 launched on ,may #af1 #bjaa1 is to work internationally to promote an open1 interoperable1 secure1 and reliable information and communications infrastructure that supports international trade and commerce1 strengthens international security1 and fosters free expression and innovation ''' in which norms of responsible behavior guide states' actions1 sustain partnerships1 and support the rule of law in cyberspace4 7#b7 ,in its ,june #bd1 #bjac report1 the ,group of ,governmental ,experts on ,developments in the ,field of ,information and ,telecommunications in the ,context of ,international ,security 7referred to in this section as ,,gge71 established by the ,united ,nations ,general ,assembly1 concluded that ,state sovereignty and the international norms and principles that flow from it apply to ,states' conduct of information and communications technology ,,ict-related activities and to their jurisdiction over ,,ict infrastructure with their territory4 7#c7 ,in ,january #bjae1 ,china1 ,kazakhstan1 ,kyrgyzstan1 ,russia1 ,tajikistan1 and ,uzbekistan proposed a troubling international code of conduct for information security1 which could be used as a pretext for restricting political dissent1 and includes curbing the dissemination of information that incites terrorism1 separatism or extremism or that inflames hatred on ethnic1 racial or religious grounds4 7#d7 ,in its ,july #bb1 #bjae consensus report1 ,,gge found that norms of responsible ,state behavior can reduce risks to international peace1 security and stability4 7#e7 ,on ,september #be1 #bjae1 the ,united ,states and ,china announced a commitment that neither country's government will conduct or knowingly support cyber-enabled theft of intellectual property1 including trade secrets or other confidential business information1 with the intent of providing competitive advantages to companies or commercial sectors4 7#f7 ,at the ,antalya ,summit on ,november #ae and #af1 #bjae1 the ,group of #bj ,leaders' communiqu-- 7,a7 affirmed the applicability of international law to state behavior in cyberspace2 7,b7 called on states to refrain from cyber-enabled theft of intellectual property for commercial gain2 and 7,c7 endorsed the view that all states should abide by norms of responsible behavior4 7#g7 ,the ,march #bjaf ,department of ,state ,international ,cyberspace ,policy ,strategy noted that the ,department of ,state anticipates a continued increase and expansion of our cyber-focused diplomatic efforts for the foreseeable future4 7#h7 ,on ,december #a1 #bjaf1 the ,commission on ,enhancing ,national ,cybersecurity1 which was established within the ,department of ,commerce by ,executive ,order #acgah 7#ha ,fed4 ,reg4 #gdda71 recommended that the ,president should appoint an ,ambassador for ,cybersecurity to lead ,u4,s4 engagement with the international community on cybersecurity strategies1 standards1 and practices4 7#i7 ,on ,april #aa1 #bjag1 the #bjag ,group of #g ,declaration on ,responsible ,states ,behavior in ,cyberspace-- 7,a7 recognized the urgent necessity of increased international cooperation to promote security and stability in cyberspace2 7,b7 expressed commitment to promoting a strategic framework for conflict prevention1 cooperation and stability in cyberspace1 consisting of the recognition of the applicability of existing international law to ,state behavior in cyberspace1 the promotion of voluntary1 non-binding norms of responsible ,state behavior during peacetime1 and the development and the implementation of practical cyber confidence building measures 7,c,b,ms7 between ,states2 and 7,c7 reaffirmed that the same rights that people have offline must also be protected online4 7#aj7 ,in testimony before the ,select ,committee on ,intelligence of the ,senate on ,may #aa1 #bjag1 ,director of ,national ,intelligence ,daniel ,r4 ,coats identified #f cyber threat actors1 including-- 7,a7 ,russia1 for efforts to influence the #bjaf ,,us election2 7,b7 ,china1 for actively targeting the ,,us ,government1 its allies1 and ,,us companies for cyber espionage2 7,c7 ,iran1 for leveraging cyber espionage1 propaganda1 and attacks to support its security priorities1 influence events and foreign perceptions1 and counter threats2 7,d7 ,north ,korea1 for previously conducting cyber-attacks against ,,us commercial entities--specifically1 ,sony ,pictures ,entertainment in #bjad2 7,e7 terrorists1 who use the ,internet to organize1 recruit1 spread propaganda1 raise funds1 collect intelligence1 inspire action by followers1 and coordinate operations2 and 7,f7 criminals1 who are also developing and using sophisticated cyber tools for a variety of purposes including theft1 extortion1 and facilitation of other criminal activities4 7#aa7 ,on ,may #aa1 #bjag1 ,president ,donald ,j4 ,trump issued ,executive ,order #achjj 7#hb ,fed4 ,reg4 #bbcia71 entitled ,strengthening the ,cybersecurity of ,federal ,networks and ,infrastructure1 which-- 7,a7 designates the ,secretary of ,state to lead an interagency effort to develop an engagement strategy for international cooperation in cybersecurity2 and 7,b7 notes that the ,united ,states is especially dependent on a globally secure and resilient internet and must work with allies and other partners toward maintaining ''' the policy of the executive branch to promote an open1 interoperable1 reliable1 and secure internet that fosters efficiency1 innovation1 communication1 and economic prosperity1 while respecting privacy and guarding against disruption1 fraud1 and theft4 #c4 ,definitions ,in this ,act3 7#a7 ,appropriate congressional committees ,the term appropriate congressional committees means the ,committee on ,foreign ,relations of the ,senate and the ,committee on ,foreign ,affairs of the ,house of ,representatives4 7#b7 ,information and communications technology2 ,,ict ,the terms information and communications technology and ,,ict include hardware1 software1 and other products or services primarily intended to fulfill or enable the function of information processing and communication by electronic means1 including transmission and display1 including via the ,internet4 7#c7 ,executive agency ,the term ,executive agency has the meaning given the term in section #aje of title #e1 ,united ,states ,code4 #d4 ,united ,states ,international ,cyberspace ,policy 7a7 ,in general ,it is the policy of the ,united ,states to work internationally to promote an open1 interoperable1 reliable1 unfettered1 and secure ,internet governed by the multi-stakeholder model1 which-- 7#a7 promotes human rights1 democracy1 and rule of law1 including freedom of expression1 innovation1 communication1 and economic prosperity2 and 7#b7 respects privacy and guards against deception1 fraud1 and theft4 7b7 ,implementation ,in implementing the policy described in subsection 7a71 the ,president1 in consultation with outside actors1 including private sector companies1 nongovernmental organizations1 security researchers1 and other relevant stakeholders1 in the conduct of bilateral and multilateral relations1 shall pursue the following objectives3 7#a7 ,clarifying the applicability of international laws and norms to the use of ,,ict4 7#b7 ,reducing and limiting the risk of escalation and retaliation in cyberspace1 damage to critical infrastructure1 and other malicious cyber activity that impairs the use and operation of critical infrastructure that provides services to the public4 7#c7 ,cooperating with like-minded democratic countries that share common values and cyberspace policies with the ,united ,states1 including respect for human rights1 democracy1 and the rule of law1 to advance such values and policies internationally4 7#d7 ,encouraging the responsible development of new1 innovative technologies and ,,ict products that strengthen a secure ,internet architecture that is accessible to all4 7#e7 ,securing and implementing commitments on responsible country behavior in cyberspace based upon accepted norms1 including the following3 7,a7 ,countries should not conduct1 or knowingly support1 cyber-enabled theft of intellectual property1 including trade secrets or other confidential business information1 with the intent of providing competitive advantages to companies or commercial sectors4 7,b7 ,countries should take all appropriate and reasonable efforts to keep their territories clear of intentionally wrongful acts using ,i,c,ts in violation of international commitments4 7,c7 ,countries should not conduct or knowingly support ,,ict activity that1 contrary to international law1 intentionally damages or otherwise impairs the use and operation of critical infrastructure providing services to the public1 and should take appropriate measures to protect their critical infrastructure from ,,ict threats4 7,d7 ,countries should not conduct or knowingly support malicious international activity that1 contrary to international law1 harms the information systems of authorized emergency response teams 7also known as computer emergency response teams or cybersecurity incident response teams7 of another country or authorize emergency response teams to engage in malicious international activity4 7,e7 ,countries should respond to appropriate requests for assistance to mitigate malicious ,,ict activity emanating from their territory and aimed at the critical infrastructure of another country4 7,f7 ,countries should not restrict cross-border data flows or require local storage or processing of data4 7,g7 ,countries should protect the exercise of human rights and fundamental freedoms on the ,internet and commit to the principle that the human rights that people have offline should also be protected online4 7#f7 ,advancing1 encouraging1 and supporting the development and adoption of internationally recognized technical standards and best practices4 #e4 ,department of ,state responsibilities 7a7 ,in general ,section #a of the ,state ,department ,basic ,authorities ,act of #aief 7#bb ,u4,s4,c4 #bfea;a7 is amended-- 7#a7 by redesignating subsection 7g7 as subsection 7h72 and 7#b7 by inserting after subsection 7f7 the following3 7g7 ,office of ,international ,cyberspace ,policy 7#a7 ,in general ,there is established1 within the ,department of ,state1 an ,office of ,international ,cyberspace ,policy 7referred to in this subsection as the ,office74 ,the head of the ,office shall have the rank and status of ambassador and shall be appointed by the ,president1 by and with the advice and consent of the ,senate4 7#b7 ,duties 7,a7 ,in general ,the head of the ,office shall perform such duties and exercise such powers as the ,secretary of ,state shall prescribe1 including implementing the policy of the ,united ,states described in section #d of the ,cyber ,diplomacy ,act of #bjai4 7,b7 ,duties described ,the principal duties and responsibilities of the head of the ,office shall be-- 7i7 to serve as the principal cyberspace policy official within the senior management of the ,department of ,state and as the advisor to the ,secretary of ,state for cyberspace issues2 7ii7 to lead the ,department of ,state's diplomatic cyberspace efforts1 including efforts relating to international cybersecurity1 ,internet access1 ,internet freedom1 digital economy1 cybercrime1 deterrence and international responses to cyber threats1 and other issues that the ,secretary assigns to the ,office2 7iii7 to promote an open1 interoperable1 reliable1 unfettered1 and secure information and communications technology infrastructure globally2 7iv7 to represent the ,secretary of ,state in interagency efforts to develop and advance the policy described in section #d of the ,cyber ,diplomacy ,act of #bjai2 7v7 to coordinate cyberspace efforts and other relevant functions1 including countering terrorists' use of cyberspace1 within the ,department of ,state and with other components of the ,united ,states ,government2 7vi7 to act as a liaison to public and private sector entities on relevant international cyberspace issues2 7vii7 to lead ,united ,states ,government efforts to establish a global deterrence framework for malicious cyber activity2 7viii7 to develop and execute adversary-specific strategies to influence adversary decisionmaking through the imposition of costs and deterrence strategies1 in coordination with other relevant ,executive agencies2 7ix7 to advise the ,secretary and coordinate with foreign governments on external responses to national-security-level cyber incidents1 including coordination on diplomatic response efforts to support allies threatened by malicious cyber activity1 in conjunction with members of the ,north ,atlantic ,treaty ,organization and other like-minded countries2 7x7 to promote the adoption of national processes and programs that enable threat detection1 prevention1 and response to malicious cyber activity emanating from the territory of a foreign country1 including as such activity relates to the ,united ,states' ,european allies1 as appropriate2 7xi7 to promote the building of foreign capacity to protect the global network with the goal of enabling like-minded participation in deterrence frameworks2 7xii7 to promote the maintenance of an open and interoperable ,internet governed by the multi-stakeholder model1 instead of by centralized government control2 7xiii7 to promote an international regulatory environment for technology investments and the ,internet that benefits ,united ,states economic and national security interests2 7xiv7 to promote cross-border flow of data and combat international initiatives seeking to impose unreasonable requirements on ,united ,states businesses2 7xv7 to promote international policies to protect the integrity of ,united ,states and international telecommunications infrastructure from foreign-based1 cyber-enabled threats2 7xvi7 to lead engagement1 in coordination with ,executive agencies1 with foreign governments on cyberspace and digital economy issues as described in the ,cyber ,diplomacy ,act of #bjai2 7xvii7 to promote international policies to secure radio frequency spectrum for ,united ,states businesses and national security needs2 7xviii7 to promote and protect the exercise of human rights1 including freedom of speech and religion1 through the ,internet2 7xix7 to build capacity of ,united ,states diplomatic officials to engage on cyber issues2 7xx7 to encourage the development and adoption by foreign countries of internationally recognized standards1 policies1 and best practices2 and 7xxi7 to consult1 as appropriate1 with other ,executive agencies with related functions vested in such ,executive agencies by law4 7#c7 ,qualifications ,the head of the ,office should be an individual of demonstrated competency in the fields of-- 7,a7 cybersecurity and other relevant cyber issues2 and 7,b7 international diplomacy4 7#d7 ,organizational placement ,during the #d-year period beginning on the date of the enactment of the ,cyber ,diplomacy ,act of #bjai1 the head of the ,office shall report to the ,under ,secretary for ,political ,affairs or to an official holding a higher position than the ,under ,secretary for ,political ,affairs in the ,department of ,state4 ,after the conclusion of such period1 the head of the ,office shall report to an appropriate ,under ,secretary or to an official holding a higher position than ,under ,secretary4 7#e7 ,rule of construction ,nothing in this subsection may be construed to preclude-- 7,a7 the ,office from being elevated to a ,bureau within the ,department of ,state2 or 7,b7 the head of the ,office from being elevated to an ,assistant ,secretary1 if such an ,assistant ,secretary position does not increase the number of ,assistant ,secretary positions at the ,department above the number authorized under subsection 7c77#a74 4 7b7 ,sense of ,congress ,it is the sense of ,congress that the ,office of ,international ,cyberspace ,policy established under section #a7;g7 of the ,state ,department ,basic ,authorities ,act of #aief1 as added by subsection 7a71 should be a ,bureau of the ,department of ,state and the head of such ,office should report directly to the ,secretary of ,state or ,deputy ,secretary of ,state4 7c7 ,united ,nations ,the ,permanent ,representative of the ,united ,states to the ,united ,nations should use the voice1 vote1 and influence of the ,united ,states to oppose any measure that is inconsistent with the policy described in section #d4 #f4 ,international cyberspace executive arrangements 7a7 ,in general ,the ,president is encouraged to enter into executive arrangements with foreign governments that support the policy described in section #d4 7b7 ,transmission to ,congress ,section #aab;b of title #a1 ,united ,states ,code1 is amended-- 7#a7 in subsection 7a7 by striking ,international ,relations and inserting ,foreign ,affairs2 7#b7 in subsection 7e77#b77;,b71 by adding at the end the following3 7iii7 ,a bilateral or multilateral cyberspace agreement4 2 7#c7 by redesignating subsection 7f7 as subsection 7g72 and 7#d7 by inserting after subsection 7e7 the following3 7f7 ,with respect to any bilateral or multilateral cyberspace agreement under subsection 7e77#b77;,b77iii7 and the information required to be transmitted to ,congress under subsection 7a71 or with respect to any arrangement that seeks to secure commitments on responsible country behavior in cyberspace consistent with section #d7;b77#e7 of the ,cyber ,diplomacy ,act of #bjai1 the ,secretary of ,state shall provide an explanation of such arrangement1 including-- 7#a7 the purpose of such arrangement2 7#b7 how such arrangement is consistent with the policy described in section #d of such ,act2 and 7#c7 how such arrangement will be implemented4 4 7c7 ,status report ,during the #e-year period immediately following the transmittal to ,congress of an agreement described in section #aab;b7e77#b77;,b77iii7 of title #a1 ,united ,states ,code1 as added by subsection 7b77#b71 or until such agreement has been discontinued1 if discontinued within #e years1 the ,president shall-- 7#a7 notify the appropriate congressional committees if another country fails to adhere to significant commitments contained in such agreement2 and 7#b7 describe the steps that the ,united ,states has taken or plans to take to ensure that all such commitments are fulfilled4 7d7 ,existing executive arrangements ,not later than #ahj days after the date of the enactment of this ,act1 the ,secretary of ,state shall brief the appropriate congressional committees regarding any executive bilateral or multilateral cyberspace arrangement in effect before the date of enactment of this ,act1 including-- 7#a7 the arrangement announced between the ,united ,states and ,japan on ,april #be1 #bjad2 7#b7 the arrangement announced between the ,united ,states and the ,united ,kingdom on ,january #af1 #bjae2 7#c7 the arrangement announced between the ,united ,states and ,china on ,september #be1 #bjae2 7#d7 the arrangement announced between the ,united ,states and ,korea on ,october #af1 #bjae2 7#e7 the arrangement announced between the ,united ,states and ,australia on ,january #ai1 #bjaf2 7#f7 the arrangement announced between the ,united ,states and ,india on ,june #g1 #bjaf2 7#g7 the arrangement announced between the ,united ,states and ,argentina on ,april #bg1 #bjag2 7#h7 the arrangement announced between the ,united ,states and ,kenya on ,june #bb1 #bjag2 7#i7 the arrangement announced between the ,united ,states and ,israel on ,june #bf1 #bjag2 7#aj7 the arrangement announced between the ,united ,states and ,france on ,february #i1 #bjah2 7#aa7 the arrangement announced between the ,united ,states and ,brazil on ,may #ad1 #bjah2 and 7#ab7 any other similar bilateral or multilateral arrangement announced before such date of enactment4 #g4 ,international strategy for cyberspace 7a7 ,strategy required ,not later than #a year after the date of the enactment of this ,act1 the ,president1 acting through the ,secretary of ,state1 and in coordination with the heads of other relevant ,federal departments and agencies1 shall develop a strategy relating to ,united ,states engagement with foreign governments on international norms with respect to responsible state behavior in cyberspace4 7b7 ,elements ,the strategy required under subsection 7a7 shall include the following3 7#a7 ,a review of actions and activities undertaken to support the policy described in section #d4 7#b7 ,a plan of action to guide the diplomacy of the ,department of ,state with regard to foreign countries1 including-- 7,a7 conducting bilateral and multilateral activities to develop norms of responsible country behavior in cyberspace consistent with the objectives under section #d7;b77#e72 and 7,b7 reviewing the status of existing efforts in relevant multilateral fora1 as appropriate1 to obtain commitments on international norms in cyberspace4 7#c7 ,a review of alternative concepts with regard to international norms in cyberspace offered by foreign countries4 7#d7 ,a detailed description of new and evolving threats in cyberspace from foreign adversaries1 state-sponsored actors1 and private actors to-- 7,a7 ,united ,states national security2 7,b7 ,federal and private sector cyberspace infrastructure of the ,united ,states2 7,c7 intellectual property in the ,united ,states2 and 7,d7 the privacy of citizens of the ,united ,states4 7#e7 ,a review of policy tools available to the ,president to deter and de-escalate tensions with foreign countries1 state-sponsored actors1 and private actors regarding threats in cyberspace1 the degree to which such tools have been used1 and whether such tools have been effective deterrents4 7#f7 ,a review of resources required to conduct activities to build responsible norms of international cyber behavior4 7#g7 ,a plan of action1 developed in consultation with relevant ,federal departments and agencies as the ,president may direct1 to guide the diplomacy of the ,department of ,state with regard to inclusion of cyber issues in mutual defense agreements4 7c7 ,form of strategy 7#a7 ,public availability ,the strategy required under subsection 7a7 shall be available to the public in unclassified form1 including through publication in the ,federal ,register4 7#b7 ,classified annex ,the strategy required under subsection 7a7 may include a classified annex1 consistent with ,united ,states national security interests1 if the ,secretary of ,state determines that such annex is appropriate4 7d7 ,briefing ,not later than #cj days after the completion of the strategy required under subsection 7a71 the ,secretary of ,state shall brief the appropriate congressional committees on the strategy1 including any material contained in a classified annex4 7e7 ,updates ,the strategy required under subsection 7a7 shall be updated-- 7#a7 not later than #ij days after any material change to ,united ,states policy described in such strategy2 and 7#b7 not later than #a year after the inauguration of each new ,president4 7f7 ,preexisting requirement ,the ,recommendations to the ,president on ,protecting ,american ,cyber ,interests through ,international ,engagement1 prepared by the ,office of the ,coordinator for ,cyber ,issues on ,may #ca1 #bjah1 pursuant to section #c7;c7 of ,executive ,order #achjj 7#hb ,fed4 ,reg4 #bbcia71 shall be deemed to satisfy the requirement under subsection 7a74 #h4 ,annual country reports on human rights practices ,section #aaf of the ,foreign ,assistance ,act of #aifa 7#bb ,u4,s4,c4 #baean7 is amended by adding at the end the following3 7h7 7#a7 ,the report required under subsection 7d7 shall include an assessment of freedom of expression with respect to electronic information in each foreign country that includes the following3 7,a7 ,an assessment of the extent to which government authorities in the country inappropriately attempt to filter1 censor1 or otherwise block or remove nonviolent expression of political or religious opinion or belief through the ,internet1 including electronic mail1 and a description of the means by which such authorities attempt to inappropriately block or remove such expression4 7,b7 ,an assessment of the extent to which government authorities in the country have persecuted or otherwise punished1 arbitrarily and without due process1 an individual or group for the nonviolent expression of political1 religious1 or ideological opinion or belief through the ,internet1 including electronic mail4 7,c7 ,an assessment of the extent to which government authorities in the country have sought1 inappropriately and with malicious intent1 to collect1 request1 obtain1 or disclose without due process personally identifiable information of a person in connection with that person's nonviolent expression of political1 religious1 or ideological opinion or belief1 including expression that would be protected by the ,international ,covenant on ,civil and ,political ,rights1 adopted at ,new ,york ,december #af1 #aiff1 and entered into force ,march #bc1 #aigf1 as interpreted by the ,united ,states4 7,d7 ,an assessment of the extent to which wire communications and electronic communications are monitored without due process and in contravention to ,united ,states policy with respect to the principles of privacy1 human rights1 democracy1 and rule of law4 7#b7 ,in compiling data and making assessments under paragraph 7#a71 ,united ,states diplomatic personnel should consult with relevant entities1 including human rights organizations1 the private sector1 the governments of like-minded countries1 technology and ,internet companies1 and other appropriate nongovernmental organizations or entities4 7#c7 ,in this subsection-- 7,a7 the term electronic communication has the meaning given the term in section #beaj of title #ah1 ,united ,states ,code2 7,b7 the term ,internet has the meaning given the term in section #bca7;e77#c7 of the ,communications ,act of #aicd 7#dg ,u4,s4,c4 #bca7;e77#c772 7,c7 the term personally identifiable information means data in a form that identifies a particular person2 and 7,d7 the term wire communication has the meaning given the term in section #beaj of title #ah1 ,united ,states ,code4 4 #i4 ,,gao report on cyber threats and data misuse ,not later than #a year after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall submit a report and provide a briefing to the appropriate congressional committees that includes-- 7#a7 a description of the primary threats to the personal information of ,united ,states citizens from international actors within the cyberspace domain2 7#b7 an assessment of the extent to which ,united ,states diplomatic processes and other efforts with foreign countries1 including through multilateral fora1 bilateral engagements1 and negotiated cyberspace agreements1 strengthen the protections of ,united ,states citizens' personal information2 7#c7 an assessment of the ,department of ,state's report in response to ,executive ,order #achjj 7#hb ,fed4 ,reg4 #bbcia71 which documents an engagement strategy for international cooperation in cybersecurity and the extent to which this strategy addresses protections of ,united ,states citizens' personal information2 7#d7 recommendations for ,united ,states policymakers on methods to properly address and strengthen the protections of ,united ,states citizens' personal information from misuse by international actors2 and 7#e7 any other matters deemed relevant by the ,comptroller ,general4 #aj4 ,sense of ,congress on cybersecurity sanctions against ,north ,korea and cybersecurity legislation in ,vietnam ,it is the sense of ,congress that-- 7#a7 the ,president should designate all entities that knowingly engage in significant activities undermining cybersecurity through the use of computer networks or systems against foreign persons1 governments1 or other entities on behalf of the ,government of ,north ,korea1 consistent with section #bji7;b7 of the ,north ,korea ,sanctions and ,policy ,enhancement ,act of #bjaf 7#bb ,u4,s4,c4 #ibbi7;b772 7#b7 the cybersecurity law approved by the ,national ,assembly of ,vietnam on ,june #ab1 #bjah-- 7,a7 may not be consistent with international trade standards2 and 7,b7 may endanger the privacy of citizens of ,vietnam2 and 7#c7 the ,government of ,vietnam should work with the ,united ,states and other countries to ensure that such law meets all relevant international standards4 #aa4 ,rule of construction 7a7 ,rule of construction ,nothing in this ,act may be construed to infringe upon the related functions of any ,executive agency vested in such agency under any provision of law4