,,ii  #aah? ,,congress  #b;d ,session   
,s4 #ddhf  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,june #e1 #bjbd,mr4    
,s*mitt introduc$ ! foll[+ bill2 :i* 0  
read twice & ref]r$ to ! ,committee on  
,arm$ ,s]vices  ,a ,,bill  ,to /r5g!n   
provisions relat+ to employm5t          
transp>5cy reg>d+ individuals :o p]=m "w
 9 ! ,p's ,republic ( ,*9a4  #a4 ,%ort  
title ,?is ,act may be cit$ z ! ,def5se 
,te*nology ,report ,p>ity ,act4  #b4    
,employm5t transp>5cy reg>d+ individuals
 :o p]=m "w 9 ! ,p's ,republic ( ,*9a   
,section #hee ( ! ,national ,def5se     
,au?orization ,act = ,fiscal ,ye> #bjbb 
7,public ,law #aag-ha2 #aj ,u4,s4,c4    
#dfea note prec47 is am5d$-- 7#a7 9     
subsection 7a77#c7-- 7,a7 by r$esignat+ 
subp>agraphs 7,a7 & 7,b7 z clauses 7i7 &
 7ii7 & mov+ su* clauses1 z s           
r$esignat$1 two ems to ! "r2  7,b7 by   
/rik+ ,if a cov]$ entity & ins]t+ 7,a7  
,9 g5]al4--,if a cov]$ company2 &  7,c7 
9 clause 7ii71 z s r$eignat$1 by /rik+  
p]=m$4 & ins]t+ ! foll[+3 8p]=m$2 &     

7iii7 :e!r an ag5cy or in/rum5tality ( !
 ,p's ,republic ( ,*9a or any           
non-gov]nm5tal ,*9ese company has       
reque/$ access to data or o!rwise       
acquir$ data f su* cov]$ company        
pursuant to ! ,p's ,republic ( ,*9a's   
,national ,intellig5ce ,law ( ,*9a or   
any simil> legislative or regulatory    
requirem5ts4  7,b7 ,additional          
disclosure ( in=mation & additional     
measures reg>d+ c]ta9 entities  7i7 ,9  
g5]al ,if a cov]$ company p]=ms s]vice  
contracts deal+ ) comm]cial comput]     
s(tw>e or noncomm]cial comput] s(tw>e & 
is requir$ to make a disclosure "u      
p>agraph 7#a7 or 7#b71 su* company      
%all-- 7,i7 describe ! process =        
disclos+ a s(tw>e vuln]ability1 if su*  
company is also requir$ to disclose any 
s(tw>e vuln]ability to ! ,m9i/ry (      
,indu/ry & ,in=mation ,te*nology or any 
o!r ag5cy or in/rum5tality ( ! ,p's     
,republic ( ,*9a2 &  7,,ii7 provide any 
in=mation relat$ to h[ a ,unit$ ,/ates  
affiliate is notifi$ ( a flaw describ$ 9

 subclause 7,i74  7ii7 ,issuance (      
regulations ,n lat] ?an #ahj days aft] !
 date ( ! enactm5t ( ?is subp>agraph1 ! 
,secret>y %all revise ! ,def5se ,f$]al  
,acquisition ,regulation ,supplem5t to  
ensure t-- 7,i7 a company describ$ 9    
clause 7i7 is notifi$ ( any s(tw>e      
vuln]ability by any affiliat$ ,*9ese    
company )9 #dh h\rs ( su* company entity
 report+ any s(tw>e vuln]ability to !   
,m9i/ry ( ,indu/ry & ,in=mation         
,te*nology or any o!r ag5cy or          
in/rum5tality ( ! ,p's ,republic ( ,*9a2
 &  7,,ii7 ! company %all reta9 & furni%
 to ! ,dep>tm5t ( ,def5se in=mation     
reg>d+ any s(tw>e vuln]ability report$  
to ! ,m9i/ry ( ,indu/ry & ,in=mation    
,te*nology or any o!r ag5cy or          
in/rum5tality ( ! ,p's ,republic ( ,*9a4
  2  7#b7 9 subsection 7b7-- 7,a7 9 !   
subsection head+1 by /rik+ entities &   
ins]t+ companies2 &  7,b7 by /rik+      
entity bo? places x appe>s & ins]t+     
company2 &  7#c7 by am5d+ subsection    
7d77#b7 to read z foll[s3  7#b7 ,cov]$  

company ,! t]m cov]$ company means a    
contractor (f]or t also conducts s(tw>e 
developm5t 9 ! ,p's ,republic ( ,*9a4  4