,,ii  #aag? ,,congress  #a/ ,session    
,s4 #bibf  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,octob] #d1 #bjba,ms4  
,w>r5 introduc$ ! foll[+ bill2 :i* 0    
read twice & ref]r$ to ! ,committee on  
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to require c]ta9 entities 
to disclose to ! ,secret>y ( ,homel&    
,security ransom paym5ts1 & = o!r       
purposes4  #a4 ,disclosure ( ransom     
paym5ts  7a7 ,def9itions ,9 ?is section3
 7#a7 ,cov]$ entity ,! t]m cov]$        
entity-- 7,a7 means a public or private 
entity t-- 7i7 is engag$ 9 int]/ate     
comm]ce or an activity affect+ int]/ate 
comm]ce2 or  7ii7 receives ,f$]al funds2
  7,b7 includes a local gov]nm5t2 &     
7,c7 does n include an individual4  7#b7
 ,in=mation sy/em ,! t]m in=mation sy/em
 has ! mean+ giv5 su* t]m 9 section     
#cejb ( title #dd1 ,unit$ ,/ates ,code4 
7#c7 ,ransom ,! t]m ransom means money  
or o!r ?+ ( value dem&$ by an actor f a 
cov]$ entity or individual aft] su*     
actor ga9s control ( an in=mation sy/em 

( su* entity or individual4  7#d7       
,secret>y ,! t]m ,secret>y means !      
,secret>y ( ,homel& ,security4  7b7     
,disclosure requir$ ,n lat] ?an #g days 
aft] ! date on :i* a cov]$ entity pays a
 ransom1 ! entity %all disclose to !    
,secret>y1 9 accordance ) subsection    
7b71 su* paym5t4  7c7 ,cont5ts ,a       
disclosure made "u subsection 7b7 %all  
include1 ) respect to ! ransom at issue1
 ! foll[+3 7#a7 ,! date on :i* su*      
ransom 0 dem&$4  7#b7 ,! date on :i* su*
 ransom 0 paid4  7#c7 ,! am\nt ( su*    
ransom dem&$4  7#d7 ,! am\nt ( su*      
ransom paid4  7#e7 ,an id5tification ( !
 curr5cy1 includ+ if cryptocurr5cy1 us$ 
= paym5t ( su* ransom4  7#f7 ,:e!r !    
cov]$ entity t paid su* ransom receives 
,f$]al funds4  7#g7 ,any kn[n in=mation 
reg>d+ ! id5tity ( ! actor dem&+ su*    
ransom4  7d7 ,noncompliance ,! ,secret>y
 %all e/abli% by regulation appropriate 
p5alties = a cov]$ entity t fails to    
make a disclosure requir$ "u subsection 
7b74  7e7 ,public availability  7#a7 ,9 

g5]al ,n lat] ?an #a ye> aft] ! date ( !
 enactm5t ( ?is ,act & annually !reaft]1
 ! ,secret>y %all publi% on a publicly  
available website ( ! ,dep>tm5t (       
,homel& ,security ! in=mation disclos$  
"u subsection 7b7 dur+ ! prec$+ #a-ye>  
p]iod1 includ+ ! total doll> am\nt (    
ransoms paid by cov]$ entities dur+ su* 
p]iod4  7#b7 ,exclusion ( id5tify+      
in=mation ,in=mation t reveals ! id5tity
 ( a cov]$ entity t made a disclosure "u
 subsection 7b7 %all be exclud$ f !     
in=mation publi%$ "u p>agraph 7#a74  7f7
 ,/udy & report on ransom commonalities 
7#a7 ,/udy ,! ,secret>y %all conduct a  
/udy to det]m9e if-- 7,a7 !re are       
commonalities ) respect to ! in=mation  
disclos$ "u subsection 7b72 &  7,b7 !   
ext5t to :i* cryptocurr5cy has          
facilitat$ ! k9ds ( attacks t result$ 9 
! paym5t ( ransoms by cov]$ entities4   
7#b7 ,report ,n lat] ?an #ae mon?s aft] 
! date ( ! enactm5t ( ?is ,act1 !       
,secret>y %all submit to ,congress a    
report t includes-- 7,a7 ! f9d+s ( !    

/udy conduct$ "u p>agraph 7#a72 &  7,b7 
su* recomm5dations z ! ,secret>y        
consid]s appropriate = protect+ !       
in=mation sy/ems ( cov]$ entities4  7g7 
,individual report+  7#a7 ,9 g5]al ,n   
lat] ?an ,decemb] #ba1 #bjba1 !         
,secret>y %all e/abli% a website ?r\gh  
:i* individuals may volunt>ily report ! 
paym5t ( a ransom by ! individual4  7#b7
 ,incorporation ( data ,to ! greate/    
ext5t practicable1 ! ,secret>y %all     
incorporate data f report+ by           
individuals "u p>agraph 7#a7 9-- 7,a7 ! 
in=mation publi%$ "u subsection 7e72 &  
7,b7 ! /udy conduct$ "u subsection 7f74 
7h7 ,applicability ,?is section %all    
apply to ransoms paid on or aft] ! date 
t is #ij days aft] ! date ( ! enactm5t (
 ?is ,act4