,,ii #aah? ,,congress #b;d ,session ,s4 #dief ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,augu/ #a1 #bjbd,mr4 ,wel* 7= himself & ,mr4 ,casey7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,select ,committee on ,intellig5ce ,a ,,bill ,to regulate electronic m$ical device use 9 secure comp>tm5t$ in=mation facilities1 to require ! ,director ( ! ,national ,intellig5ce ov]see transp>5cy report+ & relat$ initiatives1 to enc\rage inve/m5t 9 mod]nization ef=ts = s5sitive comp>tm5t$ in=mation facilities1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,cle>$ ,locations ,enabl+ ,access to ,relevant ,ess5tial ,devices ,act ( #bjbd or ! ,,cle>$ ,act ( #bjbd4 #b4 ,enhanc+ ,national ,accessibility = ,bett] ,long-t]m ,employm5t ,act ( #bjbd 7a7 ,def9itions ,9 ?is section3 7#a7 ,cov]$ entity ,! t]m cov]$ entity means any entity t-- 7,a7 is e/abli%$ "u or sponsor$ by any bran* ( ! ,unit$ ,/ates ,gov]nm5t2 & 7,b7 manages a secure comp>tm5t$ in=mation facility4 7#b7 ,electronic m$ical device ,! t]m electronic m$ical device has ! mean+ giv5 t t]m 9 ,intellig5ce ,community ,directive #abd4 7#c7 ,gov]nance ,bo>d ,! t]m ,gov]nance ,bo>d means ! ,electronic ,m$ical ,device ,gov]nance ,bo>d describ$ 9 ,intellig5ce ,community ,directive #abd4 7b7 ,device approval disclosure 7#a7 ,electronic m$ical device l$g]s ,beg9n+ on ! date ( ! enactm5t ( ?is ,act1 ! head ( any cov]$ entity %all beg9 develop+ & ma9ta9+1 = ea* secure comp>tm5t$ in=mation facility manag$ by su* cov]$ entity1 a l$g] to track ! approval & d5ial ( reque/s = electronic m$ical device use1 :i* %all include-- 7,a7 a case-by-case annotation ( ea* approval or d5ial ( an electronic m$ical device2 7,b7 a ju/ification = ea* su* approval or d5ial2 7,c7 any relevant details reg>d+ device re/rictions or accommodations2 & 7,d7 /ati/ics summ>iz+ ! numb] ( electronic m$ical devices approv$ = unre/rict$ use & limit$ use & devices t 7 d5i$4 7#b7 ,approv$ electronic m$ical device li/ 7,a7 ,9 g5]al ,beg9n+ n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! head ( any cov]$ entity %all develop & ma9ta91 = ea* secure comp>tm5t$ in=mation facility manag$ by su* cov]$ entity1 develop & ma9ta9 a li/ t includes ! foll[+3 7i7 ,ea* electronic m$ical device t is approv$ = unre/rict$ use 9 ! facility4 7ii7 ,ea* electronic m$ical device t is approv$ = limit$ use 9 ! facility1 includ+-- 7,i7 any re/rictions or accommodations requir$ ) respect to ea* su* device2 7,,ii7 a description ( :e!r su* re/rictions or accommodations v>y f re/rictions impos$ or accommodations provid$ by o!r cov]$ entities2 & 7,,iii7 if applicable1 an explanation ( ! v>iability ( su* re/rictions or accommodations4 7iii7 ,ea* electronic m$ical device t is d5i$ = use 9 ! facility & ! ju/ification = su* d5ial4 7,b7 ,=m 7i7 ,access to unclassifi$ li/ ,! relevant li/ ( a cov]$ entity develop$ pursuant to subp>agraph 7,a7 %all be-- 7,i7 unclassifi$ to ! maximum ext5t practicable1 b may include a classifi$ annex2 & 7,,ii7 provid$ to any applicant or employee ( ! cov]$ entity :o seeks a position t requires access to a secure comp>tm5t$ in=mation facility4 7ii7 ,access to classifi$ li/ 7,i7 ,cle>$ applicants ,on ! date t an applicant or employee describ$ 9 clause 7i77,,ii7 receives ! security cle>ance necess>y = access to ! secure comp>tm5t$ in=mation facility1 ! head ( ! relevant cov]$ entity %all make available to su* applicant or employee ! classifi$ portion ( ! li/ describ$ 9 clause 7i74 7,,ii7 ,exi/+ employees ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! head ( ea* cov]$ entity %all provide to ea* employee ( ! cov]$ entity :o has ! security cle>ance necess>y to access a secure comp>tm5t$ in=mation facility1 ! li/ develop$ by ! head ( su* cov]$ entity ) respect to su* facility1 :i* %all be unclassifi$ to ! maximum ext5t practicable1 b may include a classifi$ annex4 7#c7 ,electronic m$ical device policy 7,a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! head ( ea* cov]$ entity %all develop a policy = ! use ( electronic m$ical devices 9 secure comp>tm5t$ in=mation facilities1 :i* %all include a li/ ( ! types ( electronic m$ical devices t are approv$ = use 9 ea* su* facility manag$ by ! cov]$ entity4 7,b7 ,annual review ,! head ( ea* cov]$ entity %all annually review any policy develop$ pursuant to subp>agraph 7,a74 7#d7 ,submission to ,director ( ,national ,intellig5ce & ,gov]nance ,bo>d ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 & annually !reaft]1 ! head ( ea* cov]$ entity %all submit to ! ,director ( ,national ,intellig5ce & ! ,gov]nance ,bo>d-- 7,a7 any l$g] develop$ pursuant to p>agraph 7#a72 7,b7 any li/ publi%$ pursuant to p>agraph 7#b77;,a72 & 7,c7 any policy develop$ pursuant to p>agraph 7#c77;,a74 7c7 ,review ( electronic m$ical device security 7#a7 ,9 g5]al ,! ,gov]nance ,bo>d %all review electronic m$ical device security & equity conc]ns = cov]$ ag5cies4 7#b7 ,duties ,! ,gov]nance ,bo>d %all-- 7,a7 review ! policies ( cov]$ ag5cies reg>d+ ! use ( electronic m$ical devices 9 secure comp>tm5t$ in=mation facilities2 7,b7 review ea* l$g] or li/ submitt$ 9 accordance ) subsection 7b77#d72 7,c7 id5tify & resolve discrepancies 9 su* l$g]s & li/s1 ) respect to bo? v>iation 9 ju/ifications = re/rictions & accommodations & d5ials )9 ea* cov]$ entity & across all cov]$ entities2 7,d7 facilitate & direct security rese>* & te*nical risk assessm5ts on electronic m$ical devices & det]m9e ?reats to national security pos$ by su* devices2 7,e7 = electronic m$ical devices t h be5 rese>*$ pursuant to subp>agraph 7,d71 evaluate ?reat mitigation measures available & ! efficacy rat+s ( su* measures2 & 7,f7 provide recomm5dations = risk managem5t ( electronic m$ical devices 9 secure comp>tm5t$ in=mation facilities4 7#c7 ,electronic m$ical l$g] database 7,a7 ,9 g5]al ,us+ ea* l$g] & li/ submitt$ to ! ,gov]nance ,bo>d 9 accordance ) subsection 7b77#d71 ! ,gov]nance ,bo>d %all develop & ma9ta9 a publicly accessible database ( electronic m$ical devices t h be5 approv$ or d5i$ = use at any secure comp>tm5t$ in=mation facility1 includ+1 to ! ext5t practicable-- 7i7 approval rates2 7ii7 accommodations or re/rictions = usage2 & 7iii7 = ea* cov]$ entity1 specific processes = electronic m$ical device approval4 7,b7 ,public availability ( in=mation ,! ,gov]nance ,bo>d %all make available on ! website ( ! ,(fice ( ! ,director ( ,national ,intellig5ce ! foll[+3 7i7 ,g5]al approval & d5ial rates = devices describ$ 9 subp>agraph 7,a7 ( diff]5t types4 7ii7 ,po9ts ( contact = teams responsible = approvals & d5ials ( devices describ$ 9 subp>agraph 7,a74 7,c7 ,l$g] discrepancies ,! ,gov]nance ,bo>d %all include 9 su* database any discrepancy id5tifi$ pursuant to p>agraph 7#b71 includ+1 = ea* su* discrepancy-- 7i7 a detail$ description ( ! discrepancy2 & 7ii7 propos$ rem$iations4 7,d7 ,=m ,! database %all be unclassifi$1 b may include a classifi$ annex z ! ,director ( ,national ,intellig5ce consid]s appropriate4 7#d7 ,report 7,a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 & annually !reaft]1 ! ,gov]nance ,bo>d %all submit to ! ,director ( ,national ,intellig5ce a report on ! /ate ( electronic m$ical device usage 9 secure comp>tm5t$ in=mation facilities4 7,b7 ,cont5t ,ea* report submitt$ pursuant to subp>agraph 7,a7 %all include-- 7i7 a description ( ! rese>* ef=ts1 risk managem5t recomm5dations1 & /rategic approa*es ( ! ,gov]nance ,bo>d to support *anges or innovations t improve ! use ( electronic m$ical devices 9 secure comp>tm5t$ in=mation facilities2 7ii7 a description ( any b>ri]s to resolv+ discrepancies "u p>agraph 7#b77;,c72 7iii7 a summ>y ( /ati/ics describ+ approval rates glean$ f ! database develop$ pursuant to p>agraph 7#c72 & 7iv7 any o!r in=mation ! ,gov]nance ,bo>d det]m9es is relevant = ! ,director ( ,national ,intellig5ce to consid] reg>d+ ! use ( electronic m$ical devices 9 secure comp>tm5t$ in=mation facilities4 7#e7 ,annual evaluations ,n lat] ?an #ahj days aft] receiv+ a report "u p>agraph 7#d71 ! ,director ( ,national ,intellig5ce %all-- 7,a7 evaluate ! f9d+s & recomm5dations ( ! ,gov]nance ,bo>d 9 su* report2 & 7,b7 submit to ,congress a report t includes-- 7i7 ! results ( ! evaluation conduct$ "u subp>agraph 7,a72 7ii7 a description ( curr5t approval rates = electronic m$ical devices2 7iii7 a description ( rese>* ef=ts & risk mitigation /rategies ) respect to electronic m$ical devices2 & 7iv7 recomm5dations = updat+ electronic m$ical device requirem5ts 9 secure comp>tm5t$ in=mation facilities4 7d7 ,protection ( in=mation ,9 c>ry+ out ?is section1 ! head ( ea* cov]$ entity %all ensure ! protection ( p]sonally id5tifiable in=mation1 includ+ m$ical in=mation1 9 accordance ) all applicable laws & policies ) respect to confid5tiality & privacy4