<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE amendment-doc PUBLIC "-//US Congress//DTDs/amend.dtd//EN" "amend.dtd">
<amendment-doc amend-degree="first" amend-type="engrossed-amendment"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>115 HR 2454 EAS: Department of Homeland Security Data Framework Act of 2018</dc:title>
<dc:publisher>U.S. House of Representatives</dc:publisher>
<dc:date>2018-12-06</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<engrossed-amendment-form>
<congress display="no">115th CONGRESS</congress><session display="no">2d Session</session><legis-num display="no">H.R. 2454</legis-num><current-chamber display="yes">In the Senate of the United States,</current-chamber><action><action-date date="20181206">December 6, 2018.</action-date></action><legis-type display="yes">Amendment:</legis-type></engrossed-amendment-form><engrossed-amendment-body><section id="id26e5d7cdc4eb4f44855b877189f362b7" section-type="resolved"><text>That the bill from the House of Representatives (H.R. 2454) entitled <quote>An Act to direct the Secretary of Homeland Security to establish a data framework to provide access for appropriate personnel to law enforcement and other information of the Department, and for other purposes.</quote>, do pass with the following</text></section><amendment><amendment-instruction blank-lines-after="0"><text>Strike all after the enacting clause and insert the following:</text></amendment-instruction><amendment-block blank-lines-after="1" changed="added" reported-display-style="italic"><section id="id3824789f-24e6-4399-a8b3-bafea100ec50" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Department of Homeland Security Data Framework Act of 2018</short-title></quote>.</text></section><section id="id0d619c54-36df-487e-bd9b-fae32833178c"><enum>2.</enum><header>Department of Homeland Security data framework</header><subsection id="idf76b1ed528814f93a366e15b71f807d6"><enum>(a)</enum><header>In general</header><paragraph id="id09ae0fa7444742da9b29a37625fcb5cd"><enum>(1)</enum><header>Development</header><text>The Secretary of Homeland Security shall develop a data framework to integrate existing Department of Homeland Security datasets and systems, as appropriate, for access by authorized personnel in a manner consistent with relevant legal authorities and privacy, civil rights, and civil liberties policies and protections.</text></paragraph><paragraph id="id20f5f606f2b34fd4a6bbdd4c80e4f9d0"><enum>(2)</enum><header>Requirements</header><text>In developing the framework required under paragraph (1), the Secretary of Homeland Security shall ensure, in accordance with all applicable statutory and regulatory requirements, the following information is included:</text><subparagraph id="id4ae0bf32bd6c44de962f70265469f936"><enum>(A)</enum><text>All information acquired, held, or obtained by an office or component of the Department of Homeland Security that falls within the scope of the information sharing environment, including homeland security information, terrorism information, weapons of mass destruction information, and national intelligence.</text></subparagraph><subparagraph id="id26e9c53852524ba0a1d597bde30bf150"><enum>(B)</enum><text>Any information or intelligence relevant to priority mission needs and capability requirements of the homeland security enterprise, as determined appropriate by the Secretary.</text></subparagraph></paragraph></subsection><subsection id="id38ecfebae04f4e2bb47b488ca23f149d"><enum>(b)</enum><header>Data framework access</header><paragraph id="id1bc029663b48424a993d160490d0813c"><enum>(1)</enum><header>In general</header><text>The Secretary of Homeland Security shall ensure that the data framework required under this section is accessible to employees of the Department of Homeland Security who the Secretary determines—</text><subparagraph id="idd673fd21c5a04d15a13411300b962f62"><enum>(A)</enum><text>have an appropriate security clearance;</text></subparagraph><subparagraph id="id63cad5ed776c404e848223b69b7df96b"><enum>(B)</enum><text>are assigned to perform a function that requires access to information in such framework; and</text></subparagraph><subparagraph id="idcd8f600b9859497a9f38c60d8e61337c"><enum>(C)</enum><text>are trained in applicable standards for safeguarding and using such information.</text></subparagraph></paragraph><paragraph id="id846ec16cc03246fea635a3268b7e82b1"><enum>(2)</enum><header>Guidance</header><text>The Secretary of Homeland Security shall—</text><subparagraph id="id9c8152d30a41461287f04acc095c49bb"><enum>(A)</enum><text>issue guidance for Department of Homeland Security employees authorized to access and contribute to the data framework pursuant to paragraph (1); and</text></subparagraph><subparagraph id="idb45cd4267b9242bf93c4b275996b2ea5"><enum>(B)</enum><text>ensure that such guidance enforces a duty to share between offices and components of the Department when accessing or contributing to such framework for mission needs.</text></subparagraph></paragraph><paragraph id="id4eca52e9b7f044f39499f23bd457efb1"><enum>(3)</enum><header>Efficiency</header><text>The Secretary of Homeland Security shall promulgate data standards and instruct components of the Department of Homeland Security to make available information through the data framework required under this section in a machine-readable standard format, to the greatest extent practicable.</text></paragraph></subsection><subsection id="id7998250ce0124deabc9c51ac3b2a4ad6"><enum>(c)</enum><header>Exclusion of information</header><text>The Secretary of Homeland Security may exclude information from the data framework required under this section if the Secretary determines inclusion of such information may—</text><paragraph id="iddd34372e08c244449c9a1172b77d92ed"><enum>(1)</enum><text>jeopardize the protection of sources, methods, or activities;</text></paragraph><paragraph id="id80c7f045214d4b5c85ca5d344a6f6841"><enum>(2)</enum><text>compromise a criminal or national security investigation;</text></paragraph><paragraph id="id10ce0f3f2141490d81a33e73598bc641"><enum>(3)</enum><text>be inconsistent with other Federal laws or regulations; or</text></paragraph><paragraph id="id61f17b91a7e84f3e8e7bc440d9d16eef"><enum>(4)</enum><text>be duplicative or not serve an operational purpose if included in such framework.</text></paragraph></subsection><subsection id="id20f865d2181e44ffa3f59502cae35b89"><enum>(d)</enum><header>Safeguards</header><text>The Secretary of Homeland Security shall incorporate into the data framework required under this section systems capabilities for auditing and ensuring the security of information included in such framework. Such capabilities shall include the following:</text><paragraph id="idc3b2e4e2c5b2456685791b8c09bccfc5"><enum>(1)</enum><text>Mechanisms for identifying insider threats.</text></paragraph><paragraph id="id19acdaf6623f42299f9f53e95050086a"><enum>(2)</enum><text>Mechanisms for identifying security risks.</text></paragraph><paragraph id="id8bb067a3918c492c8616bbb952e4b1bd"><enum>(3)</enum><text>Safeguards for privacy, civil rights, and civil liberties.</text></paragraph></subsection><subsection id="idc9d2cf595ee24d85a0dca36a2339f4a9"><enum>(e)</enum><header>Deadline for Implementation</header><text>Not later than 2 years after the date of enactment of this Act, the Secretary of Homeland Security shall ensure the data framework required under this section has the ability to include appropriate information in existence within the Department of Homeland Security to meet the critical mission operations of the Department of Homeland Security.</text></subsection><subsection id="id9d88bcb963014fffb73f7e0fefaab32f"><enum>(f)</enum><header>Notice to Congress</header><paragraph id="idb781e854f17f452c8610d956074687cb"><enum>(1)</enum><header>Status updates</header><text>The Secretary of Homeland Security shall submit to the appropriate congressional committees regular updates on the status of the data framework until the framework is fully operational.</text></paragraph><paragraph id="id99bd142a5f6548d6a3932c627f9adb25"><enum>(2)</enum><header>Operational notification</header><text>Not later than 60 days after the date on which the data framework required under this section is fully operational, the Secretary of Homeland Security shall provide notice to the appropriate congressional committees that the data framework is fully operational.</text></paragraph><paragraph id="idfd0f52440e0c4847a970dc4ea27147ea"><enum>(3)</enum><header>Value added</header><text>The Secretary of Homeland Security shall annually brief Congress on component use of the data framework required under this section to support operations that disrupt terrorist activities and incidents in the homeland.</text></paragraph></subsection><subsection id="id766b5c0b00df46b29e4c4fb721329ae7"><enum>(g)</enum><header>Definitions</header><text>In this section:</text><paragraph id="id6f13efc785024b8185ff411e0823b083"><enum>(1)</enum><header>Appropriate congressional committee; homeland</header><text>The terms <term>appropriate congressional committee</term> and <term>homeland</term> have the meaning given those terms in section 2 of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/101">6 U.S.C. 101</external-xref>).</text></paragraph><paragraph id="id090304930f6f40f0a08f1603b223eec6"><enum>(2)</enum><header>Homeland security information</header><text>The term <term>homeland security information</term> has the meaning given such term in section 892 of the Homeland Security Act of 2002 (<external-xref legal-doc="usc" parsable-cite="usc/6/482">6 U.S.C. 482</external-xref>).</text></paragraph><paragraph id="id5c744a39295c406896b7530b2233947a"><enum>(3)</enum><header>National intelligence</header><text>The term <term>national intelligence</term> has the meaning given such term in section 3(5) of the National Security Act of 1947 (<external-xref legal-doc="usc" parsable-cite="usc/50/3003">50 U.S.C. 3003(5)</external-xref>).</text></paragraph><paragraph commented="no" display-inline="no-display-inline" id="idd7bd0f0be307485a9fa8b7ff94467836"><enum>(4)</enum><header>Terrorism information</header><text>The term <term>terrorism information</term> has the meaning given such term in section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (<external-xref legal-doc="usc" parsable-cite="usc/6/485">6 U.S.C. 485</external-xref>).</text></paragraph></subsection></section></amendment-block></amendment></engrossed-amendment-body><attestation><attestation-group><attestor></attestor><role>Secretary</role></attestation-group></attestation><endorsement></endorsement></amendment-doc>


