,,ii  #aah? ,,congress  #b;d ,session   
,s4 #ceid  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,janu>y #af1 #bjbd,mr4 
,cruz 7= himself & ,mr4 ,pet]s7         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,homel& ,security & ,gov]nm5tal ,affairs
  ,a ,,bill  ,to require gov]nm5twide   
s\rce code %>+1 & = o!r purposes4  #a4  
,%ort title ,?is ,act may be cit$ z !   
,s\rce code ,h>monization ,& ,reuse 9   
,in=mation ,te*nology ,act or ! ,,%>e   
,,x ,act4  #b4 ,f9d+s2 ,purpose  7a7    
,f9d+s  7#a7 ,9 g5]al ,congress f9ds !  
foll[+3 7,a7 ,duplication ( ef=ts ,f$]al
 ag5cies (t5 engage 9 ! developm5t or   
procurem5t ( simil> s(tw>e solutions =  
comp>able problems1 lead+ to a          
duplicative allocation ( res\rces t c\ld
 o!rwise be avoid$4  7,b7 ,co/          
ineffici5cy ,! abs5ce ( a me*anism =    
int]-ag5cy s\rce code %>+ results 9 !   
,f$]al ,gov]nm5t incurr+ unnecess>y co/s
 = s(tw>e developm5t1 lic5s+1 &         
ma9t5ance1 an ineffici5cy highlight$ by 

! ,gov]nm5t ,acc\ntability ,(fice 9     
num]\s reports1 includ+-- 7i7 ,gov]nm5t 
,acc\ntability ,(fice ,report ,f$]al    
,s(tw>e ,lic5ses3 ,bett] ,managem5t     
,ne$$ to ,a*ieve ,significant ,sav+s    
,gov]nm5t-,wide 7,,gao-#ad-dac71 publi%$
 on ,may #bb1 #bjad2  7ii7 ,gov]nm5t    
,acc\ntability ,(fice ,report #bjaf     
,annual ,report3 ,additional            
,opportunities to ,r$uce ,fragm5tation1 
,ov]lap1 & ,duplication & ,a*ieve ,o!r  
,f9ancial ,b5efits 7,,gao-#af-cge,,sp71 
publi%$ on ,april #ac1 #bjaf2  7iii7    
,gov]nm5t ,acc\ntability ,(fice ,report 
,in=mation ,te*nology3 ,do,d ,ne$s to   
,fully ,implem5t ,program = ,pilot+ ,op5
 ,s\rce ,s(tw>e 7,,gao-#ai-deg71 publi%$
 on ,septemb] #aj1 #bjai2  7iv7         
,gov]nm5t ,acc\ntability ,(fice ,report 
,in=mation ,te*nology3 ,f$]al ,ag5cies &
 ,,omb ,ne$ to ,cont9ue to ,improve     
,managem5t & ,cyb]security              
7,,gao-#bj-fia,t71 publi%$ on ,augu/ #c1
 #bjbj2 &  7v7 ,gov]nm5t ,acc\ntability 
,(fice ,report ,do,d ,s(tw>e ,lic5ses3  

,bett] ,guidance & ,plans ,ne$$ to      
,ensure ,re/rictive ,practices are      
,mitigat$ 7,,gao-#bc-ajfbij71 publi%$ on
 ,septemb] #ab1 #bjbc4  7,c7            
,te*nological fragm5tation ,! isolat$   
developm5t ef=ts ( ea* ag5cy contribute 
to a l&scape ( fragm5t$ te*nologies t   
imp$e int]op]ability & data ex*ange     
betwe5 ,f$]al sy/ems4  7,d7 ,sl[        
adoption ( be/ practices ,! lack (      
s(tw>e %>+ h9d]s ! diffusion ( eng9e]+  
be/ practices & innovations across      
ag5cies1 :]eas le>n+ f ! successes &    
failures ( o!r ag5cies w\ld accel]ate ! 
mod]nization ( gov]nm5t sy/ems4  7,e7   
,security vuln]abilities ,r$undant      
developm5t ef=ts mean t security        
weaknesses inadv]t5tly introduc$ 9 !    
s(tw>e ( an ag5cy c\ld g unnotic$ by o!r
 ag5cies1 :]eas a %>$ codebase w\ld     
b5efit f collective security audit+ &   
updates4  7,f7 ,public acc\ntability    
,s(tw>e fund$ by taxpay]s %\ld be       
available = scrut9y by ! public to !    
greate/ ext5t possible1 to ensure       

transp>5cy & acc\ntability4  7,g7 ,pilot
 success ,prelim9>y initiatives aim$ at 
mak+ f$]ally fund$ cu/om-develop$ code  
freely available to ! public h          
demon/rat$ ! viability & b5efits ( su*  
%>+ s*emes1 includ+-- 7i7 ,memor&um     
,m-#af-ba issu$ by ! ,(fice ( ,managem5t
 & ,budget on ,augu/ #h1 #bjaf1 entitl$ 
,f$]al ,s\rce ,code ,policy3 ,a*iev+    
,effici5cy1 ,transp>5cy1 & ,innovation  
?r\gh ,reusable & ,op5 ,s\rce ,s(tw>e2 &
  7ii7 ,code4gov1 :i* docum5ts h[       
ag5cies already ext5sively use public   
repositories1 demon/rat+ ! ability (    
ag5cies to %>e code us+ exi/+           
infra/ructure4  7#b7 ,conclusion ,bas$  
on ! f9d+s 9 p>agraph 7#a71 x is        
imp]ative = ,congress to enact          
legislation t m&ates ! %>+ (            
cu/om-develop$ code across ag5cies to   
promote effici5cy1 r$uce wa/e1 enhance  
security1 & fo/] innovation 9 ! ,f$]al  
in=mation te*nology ecosy/em4  7b7      
,purpose ,! ov]>*+ aim ( ?is ,act is to 
maximize effici5cy1 m9imize duplication1

 & enhance security & innovation across 
,f$]al ag5cies by requir+ ! %>+ (       
cu/om-develop$ code betwe5 ag5cies by-- 
7#a7 enabl+ ag5cies to b5efit mutually f
 ! inve/m5ts ( o!r ag5cies 9            
cu/om-develop$ code2  7#b7 promot+      
te*nological consi/5cy & int]op]ability 
among ag5cies1 !reby facilitat+ seamless
 data ex*ange & sy/em integration2  7#c7
 fo/]+ a culture ( %>+ eng9e]+ be/      
practices & successful te*nological     
innovations among ag5cies2  7#d7 enhanc+
 transp>5cy by mak+ f$]ally fund$       
cu/om-develop$ code available = public  
scrut9y1 subject to necess>y security   
consid]ations2 &  7#e7 lev]ag+          
int]-ag5cy collaboration = bett]        
security audit+ ( ! %>$ codebase1 aim+ =
 a m unifi$ & secure te*nological       
infra/ructure across ag5cies4  #c4      
,def9itions ,9 ?is ,act3 7#a7 ,ag5cy ,! 
t]m ag5cy has ! mean+ giv5 t t]m 9      
section #cejb ( title #dd1 ,unit$ ,/ates
 ,code4  7#b7 ,cu/om-develop$ code ,!   
t]m cu/om-develop$ code-- 7,a7 means    

s\rce code t is-- 7i7 produc$ 9 !       
p]=mance ( a ,f$]al contract or is      
o!rwise fully fund$ by ! ,f$]al         
,gov]nm5t2 or  7ii7 develop$ by a ,f$]al
 employee z "p ( ! (ficial duties ( !   
employee2  7,b7 includes-- 7i7 s\rce    
code1 or segregable portions ( s\rce    
code1 = :i* ! ,f$]al ,gov]nm5t c\ld     
obta9 unlimit$ rights "u "p #bg ( !     
,f$]al ,acquisition ,regulation or any  
relevant supplem5tal acquisition        
regulations ( an ag5cy2 &  7ii7 s\rce   
code writt5 = a s(tw>e project1 module1 
plug91 script1 middlew>e1 or application
 programm+ int]face2 &  7,c7 does n     
include-- 7i7 s\rce code t is solely    
exploratory or disposable 9 nature1     
includ+ s\rce code writt5 by a develop] 
exp]im5t+ ) a new language or libr>y2 or
  7ii7 comm]cial (f-!-%elf s(tw>e or    
configuration scripts = su* s(tw>e4     
7#c7 ,f$]al ,*ief ,in=mation ,(fic] ,!  
t]m ,f$]al ,*ief ,in=mation ,(fic] means
 ! ,adm9i/rator ( ! ,(fice ( ,electronic
 ,gov]nm5t4  7#d7 ,f$]al employee ,! t]m

 ,f$]al employee has ! mean+ giv5 ! t]m 
employee 9 section #baje7;a7 ( title #e1
 ,unit$ ,/ates ,code4  7#e7 ,metadata ,!
 t]m metadata1 ) respect to             
cu/om-develop$ code-- 7,a7 has ! mean+  
giv5 t t]m 9 section #cejb ( title #dd1 
,unit$ ,/ates ,code2 &  7,b7 includes   
in=mation on :e!r ! cu/om-develop$      
code-- 7i7 0 produc$ pursuant to a      
contract1 & ! contract numb]1 if any2 & 
7ii7 is %>$ 9 a public or private       
repository1 & includes a hyp]l9k to !   
repository1 z applicable4  7#f7 ,private
 repository ,! t]m private repository   
means a s(tw>e /orage location-- 7,a7 t 
conta9s s\rce code1 docum5tation1 & o!r 
files2 &  7,b7 access to :i* is re/rict$
 to au?oriz$ us]s4  7#g7 ,public        
repository ,! t]m public repository     
means a s(tw>e /orage location-- 7,a7 t 
conta9s s\rce code1 docum5tation1 & o!r 
files2 &  7,b7 access to :i* is op5 to !
 public4  7#h7 ,s(tw>e ,! t]m s(tw>e has
 ! mean+ giv5 ! t]m comput] s(tw>e 9    
section #b4aja ( title #dh1 ,code (     

,f$]al ,regulations1 or any successor   
regulation4  7#i7 ,s\rce code ,! t]m    
s\rce code means a collection ( comput] 
comm&s writt5 9 a comput] programm+     
language t a comput] c execute z a piece
 ( s(tw>e4  #d4 ,s(tw>e reuse  7a7 ,%>+ 
,n lat] ?an #baj days aft] ! date (     
enactm5t ( ?is ,act1 ! head ( ea* ag5cy 
%all ensure t-- 7#a7 ! cu/om-develop$   
code ( ! ag5cy is conta9$ at n less ?an 
#a public or private repository & is    
accessible to ,f$]al employees via      
proc$ures develop$ "u subsection        
7d77#a77;,a77ii77,,iii72 &  7#b7 all    
s(tw>e & o!r key te*nical compon5ts1    
includ+ docum5tation1 data models1      
s*emas1 metadata1 & ar*itecture designs1
 are own$ by ! ag5cy4  7b7 ,s(tw>e      
,reuse ,rights 9 ,procurem5t ,contracts 
7#a7 ,9 g5]al ,! head ( an ag5cy t ent]s
 into a contract = ! cu/om developm5t ( 
s(tw>e %all acquire & en=ce rights      
suffici5t to enable ! gov]nm5twide      
access1 execution1 & modification ( !   
cu/om-develop$ code relat+ to ! s(tw>e4 

7#b7 ,be/ practices  7,a7 ,contract     
adm9i/ration ,) respect to a contract   
describ$ 9 p>agraph 7#a71 ! head ( an   
ag5cy %all ensure appropriate contract  
adm9i/ration & use ( be/ practices to   
secure ! full scope ( lic5ses & rights =
 ! ,f$]al ,gov]nm5t ( ! cu/om-develop$  
code develop$ "u ! contract1 to all[ =  
access1 execution1 & modification by o!r
 ag5cies4  7,b7 ,developm5t process ,)  
respect to a contract describ$ 9        
p>agraph 7#a71 ! head ( an ag5cy %all   
ensure ! use ( be/ practices to require 
& obta9 ! deliv]y ( ! cu/om-develop$    
code1 docum5tation ( ! cu/om-develop$   
code1 configuration & artifacts requir$ 
to develop1 build1 te/1 & deploy !      
cu/om-develop$ code1 & o!r associat$    
mat]ials f ! develop] ?r\gh\t !         
developm5t process4  7c7 ,discov]y ,n   
lat] ?an #baj days aft] ! date (        
enactm5t ( ?is ,act1 ! head ( ea* ag5cy 
%all make metadata = ! cu/om-develop$   
code ( ! ag5cy publicly accessible4  7d7
 ,acc\ntability me*anisms  7#a7 ,ag5cy  

,c,i,os ,n lat] ?an #ahj days aft] !    
date ( enactm5t ( ?is ,act1 ! ,*ief     
,in=mation ,(fic] ( ea* ag5cy1 9        
consultation ) ! ,*ief ,acquisition     
,(fic]1 or simil> (ficial1 ( ! ag5cy & !
 ,f$]al ,*ief ,in=mation ,(fic]1 %all   
develop an ag5cy-wide policy t-- 7,a7   
addresses ! requirem5ts ( ?is ,act1     
includ+-- 7i7 ensur+ t ag5cy            
cu/om-develop$ code foll[s be/ practices
 = op]at+ repositories & v]sion control 
sy/ems to keep track ( *anges & to      
facilitate collaboration among multiple 
develop]s2  7ii7 manag+ ! %>+ & discov]y
 ( s\rce code1 includ+ develop+-- 7,i7  
proc$ures to det]m9e :e!r any           
cu/om-develop$ code meets ! conditions =
 an exemption "u ?is ,act2  7,,ii7      
proc$ures = mak+ metadata =             
cu/om-develop$ code discov]able1        
pursuant to section #d7;c72  7,,iii7    
proc$ures = ,f$]al employees to discov] 
& ga9 access to private repositories2   
7,,iv7 /&>diz$ report+ practices across 
! ag5cy to capture key in=mation relat+ 

to a contract = report+ /ati/ics ab\t ! 
contract2 &  7,v7 proc$ures = updat+    
metadata1 private repositories1 & public
 repositories on a qu>t]ly basis2  7iii7
 id5tify+ po9ts ( contact = roles &     
responsibilities relat+ to !            
implem5tation ( ?is ,act2 &  7iv7 if    
practicable1 us+ exi/+ proc$ures &      
sy/ems2 &  7,b7 corrects or am5ds any   
policies ( ! ag5cy t are inconsi/5t ) ! 
requirem5ts ( ?is ,act4  7#b7 ,f$]al    
,,cio  7,a7 ,framework = review ,n lat] 
?an #a ye> aft] ! date ( enactm5t ( ?is 
,act1 ! ,f$]al ,*ief ,in=mation ,(fic]  
%all e/abli% a framework = review+ !    
s(tw>e be+ develop$ across ! ,f$]al     
,gov]nm5t to surface & support ! goals (
 exi/+ digital priorities4  7,b7 ,m9imum
 /&>d report+ requirem5ts ,n lat] ?an   
#abj days aft] ! date ( enactm5t ( ?is  
,act1 ! ,f$]al ,,cio %all1 9 coord9ation
 ) ! ,director ( ! ,national ,in/itute (
 ,/&>ds & ,te*nology1 e/abli% m9imum    
/&>d report+ requirem5ts = ! ,*ief      
,in=mation ,(fic]s ( ag5cies1 :i* %all  

include in=mation relat+ to-- 7i7       
measur+ ! frequ5cy ( reuse ( code1      
includ+ access & modification2  7ii7    
:e!r ! %>$ code is ma9ta9$2  7iii7 :e!r 
!re is a fe$back me*anism = improvem5ts 
to or community developm5t ( ! %>$ code2
 &  7iv7 ! numb] & circum/ances ( all   
exemptions grant$ "u section #e7;b77#b74
  7,c7 ,annual report ,n lat] ?an #a ye>
 aft] ! date ( enactm5t ( ?is ,act1 &   
annually !reaft]1 ! ,f$]al ,*ief        
,in=mation ,(fic] %all submit to        
,congress a report on ! /atus ( !       
implem5tation ( ?is ,act by ea* ag5cy1  
includ+-- 7i7 a complete li/ ( all      
exemptions grant$ "u section #e7;b77#b72
  7ii7 a table %[+ :e!r ea* ag5cy has   
updat$ ! acquisition & o!r policies ( ! 
ag5cy to be compliant ) ?is ,act2 &     
7iii7 an evaluation ( ! compliance ( !  
ag5cy ) ! framework describ$ 9          
subp>agraph 7,a74  #e4 ,scope &         
applicability  7a7 ,new cu/om-,develop$ 
code only ,?is ,act %all apply to       
cu/om-develop$ code t is develop$ or    

revis$-- 7#a7 by a ,f$]al employee n    
less ?an #ahj days aft] ! date (        
enactm5t ( ?is ,act2 or  7#b7 "u a      
contract aw>d$ pursuant to a            
solicitation issu$ n less ?an #ahj days 
aft] ! date ( enactm5t ( ?is ,act4  7b7 
,exemptions  7#a7 ,automatic ,?is ,act  
%all n apply to classifi$ s\rce code or 
s\rce code develop$ prim>ily = use 9 a  
national security sy/em1 z def9$ 9      
section #aaajc ( title #dj1 ,unit$      
,/ates ,code4  7#b7 ,explanation requir$
  7,a7 ,9 g5]al ,! ,*ief ,in=mation     
,(fic] ( an ag5cy may exempt f !        
requirem5ts ( ?is ,act any s\rce code = 
:i* a limit$ exemption describ$ 9       
subp>agraph 7,b7 applies1 aft] docum5t+ 
! limit$ exemption & provid+ to ! ,f$]al
 ,*ief ,in=mation ,(fic] a brief        
n>rative ju/ification1 ) r$actions z    
appropriate4  7,b7 ,limit$ exemptions ,!
 limit$ exemptions describ$ 9 ?is       
subp>agraph are ! foll[+3 7i7 ,! %>+ or 
discov]y ( ! s\rce code is re/rict$ by  
,f$]al law or regulation1 includ+ !     

,export ,adm9i/ration ,regulations1 !   
,int]national ,traffic 9 ,arms          
,regulations1 regulations ( !           
,transportation ,security ,adm9i/ration 
relat+ to ! protection ( ,s5sitive      
,security ,in=mation1 & ! ,f$]al laws & 
regulations gov]n+ classifi$ in=mation4 
7ii7 ,! %>+ or discov]y ( ! s\rce code  
w\ld create an id5tifiable risk to      
individual privacy4  #f4 ,guidance ,!   
,director ( ! ,(fice ( ,managem5t &     
,budget %all issue guidance1 consi/5t ) 
! purpose ( ?is ,act1 t e/abli%es be/   
practices & uni=m proc$ures across      
ag5cies "u section #d7;d74  #g4 ,,gao   
report on in=mation te*nology practices 
7a7 ,initial report ,n lat] ?an #a ye>  
aft] ! date ( enactm5t ( ?is ,act1 !    
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all submit to ,congress a report t     
includes an assessm5t (-- 7#a7          
duplicative s(tw>e procurem5t across &  
)9 ag5cies1 includ+ e/imates ( !        
frequ5cy1 sev]ity1 & doll> value ( !    
duplicative s(tw>e procurem5t2  7#b7    

b>ri]s to ag5cy use ( cl\d-bas$ plat=ms 
= s(tw>e developm5t & v]sion control &  
h[ to address ^? b>ri]s2  7#c7 h[ s\rce 
code %>+ & op5-s\rce s(tw>e             
collaboration c improve cyb]security at 
ag5cies2 &  7#d7 o!r relevant matt]s1 z 
det]m9$ by ! ,comptroll] ,g5]al ( !     
,unit$ ,/ates4  7b7 ,supplem5tal report 
,n lat] ?an #b ye>s aft] ! date (       
enactm5t ( ?is ,act1 ! ,comptroll]      
,g5]al ( ! ,unit$ ,/ates %all submit to 
,congress a report t includes an        
assessm5t (-- 7#a7 ! implem5tation ( ?is
 ,act2 &  7#b7 o!r relevant matt]s1 z   
det]m9$ by ! ,comptroll] ,g5]al ( !     
,unit$ ,/ates4  #h4 ,rule ( con/ruction 
,no?+ 9 ?is ,act %all be con/ru$ to     
require ! disclosure ( in=mation or     
records t are exempt f public disclosure
 "u section #eeb ( title #e1 ,unit$     
,/ates ,code 7commonly kn[n z ! ,fre$om 
( ,in=mation ,act74  #i4 ,no additional 
fund+ ,no additional funds are au?oriz$ 
to be appropriat$ to c>ry out ?is ,act4