<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Introduced-in-House" dms-id="H619D4AE966884C8587435B195007440C" public-private="public" key="H" bill-type="olc"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>119 HR 8711 IH: Data Infrastructure Risk Reduction Act</dc:title>
<dc:publisher>U.S. House of Representatives</dc:publisher>
<dc:date>2026-05-07</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">I</distribution-code><congress display="yes">119th CONGRESS</congress><session display="yes">2d Session</session><legis-num display="yes">H. R. 8711</legis-num><current-chamber>IN THE HOUSE OF REPRESENTATIVES</current-chamber><action display="yes"><action-date date="20260507">May 7, 2026</action-date><action-desc><sponsor name-id="S001230">Mr. Subramanyam</sponsor> introduced the following bill; which was referred to the <committee-name committee-id="HHM00">Committee on Homeland Security</committee-name>, and in addition to the Committee on <committee-name committee-id="HIF00">Energy and Commerce</committee-name>, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned</action-desc></action><legis-type>A BILL</legis-type><official-title display="yes">To require a strategy for the defense of data centers from external breaches from malefactors and the protection of the communities surrounding data centers, and for other purposes.</official-title></form><legis-body id="H1067D78F718B464E9B67D017ECE9D92D" style="OLC"> 
<section id="H2791F1B75A99451CB372587AD63BA23E" section-type="section-one"><enum>1.</enum><header>Short title</header>
 <text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Data Infrastructure Risk Reduction Act</short-title></quote>.</text></section> 
<section id="H82D05DC08D054D9FBE76D9420D533A06"><enum>2.</enum><header>Protection of data centers</header> 
<subsection id="H40A4DD1504D64DA68F7534DE5D4F1DE7" commented="no"><enum>(a)</enum><header>In general</header><text display-inline="yes-display-inline">Not later than 180 days after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, in collaboration, as appropriate, with the Secretary of Defense, shall—</text> <paragraph id="H71100B6DAE974750BB6853F143A8A1B6"><enum>(1)</enum><text>identify data centers that should be treated as critical infrastructure;</text></paragraph> 
<paragraph id="HF6111881DC2A4D09AB1B2889B12D4211"><enum>(2)</enum><text display-inline="yes-display-inline">consider—</text> <subparagraph id="HE243C8CECB7840FA8F5AE08726B8C8F0"><enum>(A)</enum><text>the security of the power and water supply infrastructure (with a particular focus on above-ground electric power transmission lines and electrical substations) connected to such data centers; and</text></subparagraph> 
<subparagraph id="H2E8484B69BE14821AEDD30409AA2C587"><enum>(B)</enum><text>any potential implications of data centers that are sited in proximity to communities or other residential areas; and</text></subparagraph></paragraph> <paragraph id="HDE3ECD7A90494FE08F8602D4FE0D1CFF"><enum>(3)</enum><text>submit to Congress a strategy, including recommendations, to—</text> 
<subparagraph id="HBCF9F38F88F949C09F581621C394625A"><enum>(A)</enum><text>defend data centers described in this subsection from external breaches from malefactors; and</text></subparagraph> <subparagraph id="HBAD7B37F77B7441EA3F585D432DD80D2"><enum>(B)</enum><text display-inline="yes-display-inline">protect communities and other residential areas described in paragraph (2)(B).</text> </subparagraph></paragraph></subsection> 
<subsection id="H079EF5491A4248F1B572CE6C4B3FD914"><enum>(b)</enum><header>Definitions</header><text>In this section:</text> <paragraph id="H03D42AEF4D98460FB2BD3438369AE2D2"><enum>(1)</enum><header>Critical infrastructure</header><text>The term <quote>critical infrastructure</quote> has the meaning given such term in section 1016(e) of <external-xref legal-doc="public-law" parsable-cite="pl/107/56">Public Law 107–56</external-xref> (<external-xref legal-doc="usc" parsable-cite="usc/42/5195c">42 U.S.C. 5195c(e)</external-xref>).</text></paragraph> 
<paragraph id="HD0EEC3C185AD431CA75A5DDC7D0A0E47"><enum>(2)</enum><header>Data center</header><text>The term <quote>data center</quote> has the meaning given such term in section 453(a) of the Energy Independence and Security Act of 2007 (<external-xref legal-doc="usc" parsable-cite="usc/42/17112">42 U.S.C. 17112(a)</external-xref>).</text> </paragraph></subsection></section> </legis-body></bill>

