,,ii  #aagth ,,congress  #ast ,session  
,s4 #bibf  ,,in ,,the ,,senate ,,of     
,,the ,,united ,,states  ,october #d1   
#bjba,ms4 ,warren introduced the        
following bill2 which was read twice and
 referred to the ,committee on ,homeland
 ,security and ,governmental ,affairs   
,a ,,bill  ,to require certain entities 
to disclose to the ,secretary of        
,homeland ,security ransom payments1 and
 for other purposes4  #a4 ,disclosure of
 ransom payments  7a7 ,definitions ,in  
this section3 7#a7 ,covered entity ,the 
term covered entity-- 7,a7 means a      
public or private entity that-- 7i7 is  
engaged in interstate commerce or an    
activity affecting interstate commerce2 
or  7ii7 receives ,federal funds2  7,b7 
includes a local government2 and  7,c7  
does not include an individual4  7#b7   
,information system ,the term           
information system has the meaning given
 such term in section #cejb of title    
#dd1 ,united ,states ,code4  7#c7       
,ransom ,the term ransom means money or 

other thing of value demanded by an     
actor from a covered entity or          
individual after such actor gains       
control of an information system of such
 entity or individual4  7#d7 ,secretary 
,the term ,secretary means the          
,secretary of ,homeland ,security4  7b7 
,disclosure required ,not later than #g 
days after the date on which a covered  
entity pays a ransom1 the entity shall  
disclose to the ,secretary1 in          
accordance with subsection 7b71 such    
payment4  7c7 ,contents ,a disclosure   
made under subsection 7b7 shall include1
 with respect to the ransom at issue1   
the following3 7#a7 ,the date on which  
such ransom was demanded4  7#b7 ,the    
date on which such ransom was paid4     
7#c7 ,the amount of such ransom         
demanded4  7#d7 ,the amount of such     
ransom paid4  7#e7 ,an identification of
 the currency1 including if             
cryptocurrency1 used for payment of such
 ransom4  7#f7 ,whether the covered     
entity that paid such ransom receives   

,federal funds4  7#g7 ,any known        
information regarding the identity of   
the actor demanding such ransom4  7d7   
,noncompliance ,the ,secretary shall    
establish by regulation appropriate     
penalties for a covered entity that     
fails to make a disclosure required     
under subsection 7b74  7e7 ,public      
availability  7#a7 ,in general ,not     
later than #a year after the date of the
 enactment of this ,act and annually    
thereafter1 the ,secretary shall publish
 on a publicly available website of the 
,department of ,homeland ,security the  
information disclosed under subsection  
7b7 during the preceding #a-year period1
 including the total dollar amount of   
ransoms paid by covered entities during 
such period4  7#b7 ,exclusion of        
identifying information ,information    
that reveals the identity of a covered  
entity that made a disclosure under     
subsection 7b7 shall be excluded from   
the information published under         
paragraph 7#a74  7f7 ,study and report  

on ransom commonalities  7#a7 ,study    
,the ,secretary shall conduct a study to
 determine if-- 7,a7 there are          
commonalities with respect to the       
information disclosed under subsection  
7b72 and  7,b7 the extent to which      
cryptocurrency has facilitated the kinds
 of attacks that resulted in the payment
 of ransoms by covered entities4  7#b7  
,report ,not later than #ae months after
 the date of the enactment of this ,act1
 the ,secretary shall submit to         
,congress a report that includes-- 7,a7 
the findings of the study conducted     
under paragraph 7#a72 and  7,b7 such    
recommendations as the ,secretary       
considers appropriate for protecting the
 information systems of covered         
entities4  7g7 ,individual reporting    
7#a7 ,in general ,not later than        
,december #ba1 #bjba1 the ,secretary    
shall establish a website through which 
individuals may voluntarily report the  
payment of a ransom by the individual4  
7#b7 ,incorporation of data ,to the     

greatest extent practicable1 the        
,secretary shall incorporate data from  
reporting by individuals under paragraph
 7#a7 in-- 7,a7 the information         
published under subsection 7e72 and     
7,b7 the study conducted under          
subsection 7f74  7h7 ,applicability     
,this section shall apply to ransoms    
paid on or after the date that is #ij   
days after the date of the enactment of 
this ,act4