,,ii  #aai? ,,congress  #a/ ,session    
,s4 #cafa  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,novemb] #g1 #bjbe ,ms4
 ,slotk9 7= h]self & ,ms4 ,ern/7        
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on ,arm$ 
,s]vices  ,a ,,bill  ,to enhance        
protection ( data affect+ op]ational    
security ( ,dep>tm5t ( ,def5se p]sonnel1
 & = o!r purposes4  #a4  ,%ort title    
,?is ,act may be cit$ z ! ,protect+     
,,dod ,data ,act ( #bjbe4  #b4  ,enhanc$
 protection ( data affect+ op]ational   
security ( ,dep>tm5t ( ,def5se p]sonnel 
7a7  ,priorities = protection ( p]sonal 
data = op]ational security  ,9 c>ry+ out
 ! duties ( ! ,secret>y ( ,def5se1 !    
,secret>y %all id5tify & prioritize !   
protection ( p]sonal data t is relat$ to
 or may h impacts on ! op]ational       
security ( memb]s ( ! ,arm$ ,=ces &     
civilian employees ( ! ,dep>tm5t (      
,def5se ?r\gh ! prev5tion ( collection1 
use1 dissem9ation1 or ret5tion ( su*    
data t does n con=m ) provisions ( law &

 practices relat+ to privacy t 7 9      
effect on ! day be=e ! date ( ! enactm5t
 ( ?is ,act4  7b7  ,review & issuance ( 
new guidance relat$ to protection (     
p]sonal data relat$ to op]ational       
security  ,n lat] ?an ,june #a1 #bjbf1 !
 ,secret>y ( ,def5se %all review all    
applicable guidance & policy relat+ to !
 protection ( p]sonal data t is relat$  
to or may h impacts on ! op]ational     
security ( ,dep>tm5t p]sonnel &1 if     
necess>y1 issue revis$ or new guidance =
 enhanc$ protection measures = su* data4
 ,su* guidance %all cov] provisions (   
law & practices relat+ to privacy &     
p]sonnel security t 7 9 effect on ! day 
be=e ! date ( ! enactm5t ( ?is ,act4    
7c7  ,/orage ( data  7#a7  ,limitation  
,! ,secret>y %all ensure t no ,dep>tm5t 
p]sonal data relat$ to or t may h       
impacts on ! op]ational security (      
,dep>tm5t p]sonnel is /or$ on a         
non-,dep>tm5t s]v] or cl\d s]vice except
 pursuant to a contract or o!r agreem5t 
ent]$ into by ! ,secret>y & a contractor

 or subcontractor ( ! ,dep>tm5t or1 =   
p]sonnel data1 ) ! p]mission ( ! data   
subject4  7#b7  ,waiv]s  ,! ,secret>y   
may waive p>agraph 7#a7 9 a case 9 :i* !
 ,secret>y c]tifies 9 writ+ t su*       
waiv]--  7,a7 appropriately consid]s !  
op]ational security risks to an employee
 ( ! ,dep>tm5t ) respect to :om su* data
 may relate2  7,b7 does n pose a risk to
 national security2 &  7,c7 is necess>y 
9 ! int]e/ ( national security4  7d7    
,congressional notification ( *anges to 
,dep>tm5tal issuances  7#a7  ,9 g5]al   
,n lat] ?an #cj days aft] ! date on :i* 
! ,secret>y *anges a ,dep>tm5t issuance 
relat+ to ! protection ( p]sonal data t 
is relat$ to or may h impacts on !      
op]ational security ( ,dep>tm5t         
p]sonnel1 ! ,secret>y %all submit to    
,congress notice ( ! *ange4  7#b7       
,sunset  ,! requirem5t ( p>agraph 7#a7  
%all t]m9ate on ! date t is five ye>s   
aft] ! date ( ! enactm5t ( ?is ,act4    
7e7  ,congressional notification ( ev5ts
  7#a7  ,9 g5]al  ,n lat] ?an #cj days  

aft] ! date ( ! occurr5ce ( an ev5t     
describ$ 9 p>agraph 7#b71 ! ,secret>y   
%all submit to ,congress notice ( !     
ev5t4  7#b7  ,ev5ts describ$  ,an ev5t  
describ$ 9 ?is p>agraph is an occurr5ce 
( an ev5t 9 :i*--  7,a7 ! ,secret>y     
issues a waiv] "u subsection 7c77#b72   
7,b7 p]sonal data relat$ to or t may h  
an impact on op]ational security (      
,dep>tm5t p]sonnel is n /or$ accord+ to 
,dep>tm5t regulations or exfiltrat$ 9   
violation ( ,dep>tm5t regulations2  7,c7
 p]sonal data relat$ to or t may h an   
impact on op]ational security (         
,dep>tm5t p]sonnel is /or$ on a         
non-,dep>tm5t s]v] or cl\d s]vice t has 
n und]gone an au?orization process 9    
accordance ) ,dep>tm5t regulations2 or  
7,d7 p]sonal data relat$ to or t may h  
an impact on op]ational security (      
,dep>tm5t ( ,def5se p]sonnel is expos$ 9
 any cyb]security incid5t4  7f7  ,/&>ds1
 tra9+1 & report+ processes = sy/em     
own]s  7#a7  ,9 g5]al  ,! ,secret>y %all
 develop /&>ds1 tra9+1 report+1 &       

security debrief+ requirem5ts =         
,dep>tm5t p]sonnel :o receive write or  
read access privileges z sy/em own]s    
across m ?an "o plat=m ( ,dep>tm5t      
in=mation sy/ems t ho/s p]sonal data    
relat$ to or t may h an impact on       
op]ational security ( ,dep>tm5t         
p]sonnel4  7#b7  ,security debrief+s  ,!
 ,secret>y %all ensure t p]sonnel       
describ$ 9 p>agraph 7#a7 are provid$    
regul> security debrief+s1 includ+ aft] 
dep>t+ ! ,dep>tm5t4  7#c7  ,notification
 ( congress "u c]ta9 circum/ances  ,n   
lat] ?an #cj days aft] ! completion ( ! 
developm5t ( ! /&>ds1 tra9+1 report+1 & 
security debrief+ requirem5ts 9 p>agraph
 7#a7 ! ,secret>y %all submit to        
,congress details ( ! requirem5ts4