[Congressional Record Volume 164, Number 193 (Thursday, December 6, 2018)]
[Senate]
[Page S7371]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]
DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK ACT OF 2017
Mr. CORNYN. Mr. President, I ask unanimous consent that the Committee
on Homeland Security and Governmental Affairs be discharged from
further consideration of H.R. 2454 and that the Senate proceed to its
immediate consideration.
The PRESIDING OFFICER. The clerk will report the bill by title.
The senior assistant legislative clerk read as follows:
A bill (H.R. 2454) to direct the Secretary of Homeland
Security to establish a data framework to provide access for
appropriate personnel to law enforcement and other
information of the Department, and for other purposes.
There being no objection, the committee was discharged, and the
Senate proceeded to consider the bill.
Mr. CORNYN. Mr. President, I ask unanimous consent that the Johnson
substitute amendment at the desk be agreed to; that the bill, as
amended, be considered read a third time and passed; and that the
motion to reconsider be considered made and laid upon the table.
The PRESIDING OFFICER. Without objection, it is so ordered.
The amendment (No. 4071) in the nature of a substitute was agreed to,
as follows:
(Purpose: In the nature of a substitute)
Strike all after the enacting clause and insert the
following:
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Department of Homeland
Security Data Framework Act of 2018''.
SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK.
(a) In General.--
(1) Development.--The Secretary of Homeland Security shall
develop a data framework to integrate existing Department of
Homeland Security datasets and systems, as appropriate, for
access by authorized personnel in a manner consistent with
relevant legal authorities and privacy, civil rights, and
civil liberties policies and protections.
(2) Requirements.--In developing the framework required
under paragraph (1), the Secretary of Homeland Security shall
ensure, in accordance with all applicable statutory and
regulatory requirements, the following information is
included:
(A) All information acquired, held, or obtained by an
office or component of the Department of Homeland Security
that falls within the scope of the information sharing
environment, including homeland security information,
terrorism information, weapons of mass destruction
information, and national intelligence.
(B) Any information or intelligence relevant to priority
mission needs and capability requirements of the homeland
security enterprise, as determined appropriate by the
Secretary.
(b) Data Framework Access.--
(1) In general.--The Secretary of Homeland Security shall
ensure that the data framework required under this section is
accessible to employees of the Department of Homeland
Security who the Secretary determines--
(A) have an appropriate security clearance;
(B) are assigned to perform a function that requires access
to information in such framework; and
(C) are trained in applicable standards for safeguarding
and using such information.
(2) Guidance.--The Secretary of Homeland Security shall--
(A) issue guidance for Department of Homeland Security
employees authorized to access and contribute to the data
framework pursuant to paragraph (1); and
(B) ensure that such guidance enforces a duty to share
between offices and components of the Department when
accessing or contributing to such framework for mission
needs.
(3) Efficiency.--The Secretary of Homeland Security shall
promulgate data standards and instruct components of the
Department of Homeland Security to make available information
through the data framework required under this section in a
machine-readable standard format, to the greatest extent
practicable.
(c) Exclusion of Information.--The Secretary of Homeland
Security may exclude information from the data framework
required under this section if the Secretary determines
inclusion of such information may--
(1) jeopardize the protection of sources, methods, or
activities;
(2) compromise a criminal or national security
investigation;
(3) be inconsistent with other Federal laws or regulations;
or
(4) be duplicative or not serve an operational purpose if
included in such framework.
(d) Safeguards.--The Secretary of Homeland Security shall
incorporate into the data framework required under this
section systems capabilities for auditing and ensuring the
security of information included in such framework. Such
capabilities shall include the following:
(1) Mechanisms for identifying insider threats.
(2) Mechanisms for identifying security risks.
(3) Safeguards for privacy, civil rights, and civil
liberties.
(e) Deadline for Implementation.--Not later than 2 years
after the date of enactment of this Act, the Secretary of
Homeland Security shall ensure the data framework required
under this section has the ability to include appropriate
information in existence within the Department of Homeland
Security to meet the critical mission operations of the
Department of Homeland Security.
(f) Notice to Congress.--
(1) Status updates.--The Secretary of Homeland Security
shall submit to the appropriate congressional committees
regular updates on the status of the data framework until the
framework is fully operational.
(2) Operational notification.--Not later than 60 days after
the date on which the data framework required under this
section is fully operational, the Secretary of Homeland
Security shall provide notice to the appropriate
congressional committees that the data framework is fully
operational.
(3) Value added.--The Secretary of Homeland Security shall
annually brief Congress on component use of the data
framework required under this section to support operations
that disrupt terrorist activities and incidents in the
homeland.
(g) Definitions.--In this section:
(1) Appropriate congressional committee; homeland.--The
terms ``appropriate congressional committee'' and
``homeland'' have the meaning given those terms in section 2
of the Homeland Security Act of 2002 (6 U.S.C. 101).
(2) Homeland security information.--The term ``homeland
security information'' has the meaning given such term in
section 892 of the Homeland Security Act of 2002 (6 U.S.C.
482).
(3) National intelligence.--The term ``national
intelligence'' has the meaning given such term in section
3(5) of the National Security Act of 1947 (50 U.S.C.
3003(5)).
(4) Terrorism information.--The term ``terrorism
information'' has the meaning given such term in section 1016
of the Intelligence Reform and Terrorism Prevention Act of
2004 (6 U.S.C. 485).
The amendment was ordered to be engrossed and the bill to be read a
third time.
The bill was read the third time.
The bill (H.R. 2454), as amended, was passed.
____________________