[Congressional Record Volume 164, Number 193 (Thursday, December 6, 2018)]
[Senate]
[Page S7371]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]




       DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK ACT OF 2017

  Mr. CORNYN. Mr. President, I ask unanimous consent that the Committee 
on Homeland Security and Governmental Affairs be discharged from 
further consideration of H.R. 2454 and that the Senate proceed to its 
immediate consideration.
  The PRESIDING OFFICER. The clerk will report the bill by title.
  The senior assistant legislative clerk read as follows:

       A bill (H.R. 2454) to direct the Secretary of Homeland 
     Security to establish a data framework to provide access for 
     appropriate personnel to law enforcement and other 
     information of the Department, and for other purposes.

  There being no objection, the committee was discharged, and the 
Senate proceeded to consider the bill.
  Mr. CORNYN. Mr. President, I ask unanimous consent that the Johnson 
substitute amendment at the desk be agreed to; that the bill, as 
amended, be considered read a third time and passed; and that the 
motion to reconsider be considered made and laid upon the table.
  The PRESIDING OFFICER. Without objection, it is so ordered.
  The amendment (No. 4071) in the nature of a substitute was agreed to, 
as follows:

                (Purpose: In the nature of a substitute)

       Strike all after the enacting clause and insert the 
     following:

     SECTION 1. SHORT TITLE.

       This Act may be cited as the ``Department of Homeland 
     Security Data Framework Act of 2018''.

     SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK.

       (a) In General.--
       (1) Development.--The Secretary of Homeland Security shall 
     develop a data framework to integrate existing Department of 
     Homeland Security datasets and systems, as appropriate, for 
     access by authorized personnel in a manner consistent with 
     relevant legal authorities and privacy, civil rights, and 
     civil liberties policies and protections.
       (2) Requirements.--In developing the framework required 
     under paragraph (1), the Secretary of Homeland Security shall 
     ensure, in accordance with all applicable statutory and 
     regulatory requirements, the following information is 
     included:
       (A) All information acquired, held, or obtained by an 
     office or component of the Department of Homeland Security 
     that falls within the scope of the information sharing 
     environment, including homeland security information, 
     terrorism information, weapons of mass destruction 
     information, and national intelligence.
       (B) Any information or intelligence relevant to priority 
     mission needs and capability requirements of the homeland 
     security enterprise, as determined appropriate by the 
     Secretary.
       (b) Data Framework Access.--
       (1) In general.--The Secretary of Homeland Security shall 
     ensure that the data framework required under this section is 
     accessible to employees of the Department of Homeland 
     Security who the Secretary determines--
       (A) have an appropriate security clearance;
       (B) are assigned to perform a function that requires access 
     to information in such framework; and
       (C) are trained in applicable standards for safeguarding 
     and using such information.
       (2) Guidance.--The Secretary of Homeland Security shall--
       (A) issue guidance for Department of Homeland Security 
     employees authorized to access and contribute to the data 
     framework pursuant to paragraph (1); and
       (B) ensure that such guidance enforces a duty to share 
     between offices and components of the Department when 
     accessing or contributing to such framework for mission 
     needs.
       (3) Efficiency.--The Secretary of Homeland Security shall 
     promulgate data standards and instruct components of the 
     Department of Homeland Security to make available information 
     through the data framework required under this section in a 
     machine-readable standard format, to the greatest extent 
     practicable.
       (c) Exclusion of Information.--The Secretary of Homeland 
     Security may exclude information from the data framework 
     required under this section if the Secretary determines 
     inclusion of such information may--
       (1) jeopardize the protection of sources, methods, or 
     activities;
       (2) compromise a criminal or national security 
     investigation;
       (3) be inconsistent with other Federal laws or regulations; 
     or
       (4) be duplicative or not serve an operational purpose if 
     included in such framework.
       (d) Safeguards.--The Secretary of Homeland Security shall 
     incorporate into the data framework required under this 
     section systems capabilities for auditing and ensuring the 
     security of information included in such framework. Such 
     capabilities shall include the following:
       (1) Mechanisms for identifying insider threats.
       (2) Mechanisms for identifying security risks.
       (3) Safeguards for privacy, civil rights, and civil 
     liberties.
       (e) Deadline for Implementation.--Not later than 2 years 
     after the date of enactment of this Act, the Secretary of 
     Homeland Security shall ensure the data framework required 
     under this section has the ability to include appropriate 
     information in existence within the Department of Homeland 
     Security to meet the critical mission operations of the 
     Department of Homeland Security.
       (f) Notice to Congress.--
       (1) Status updates.--The Secretary of Homeland Security 
     shall submit to the appropriate congressional committees 
     regular updates on the status of the data framework until the 
     framework is fully operational.
       (2) Operational notification.--Not later than 60 days after 
     the date on which the data framework required under this 
     section is fully operational, the Secretary of Homeland 
     Security shall provide notice to the appropriate 
     congressional committees that the data framework is fully 
     operational.
       (3) Value added.--The Secretary of Homeland Security shall 
     annually brief Congress on component use of the data 
     framework required under this section to support operations 
     that disrupt terrorist activities and incidents in the 
     homeland.
       (g) Definitions.--In this section:
       (1) Appropriate congressional committee; homeland.--The 
     terms ``appropriate congressional committee'' and 
     ``homeland'' have the meaning given those terms in section 2 
     of the Homeland Security Act of 2002 (6 U.S.C. 101).
       (2) Homeland security information.--The term ``homeland 
     security information'' has the meaning given such term in 
     section 892 of the Homeland Security Act of 2002 (6 U.S.C. 
     482).
       (3) National intelligence.--The term ``national 
     intelligence'' has the meaning given such term in section 
     3(5) of the National Security Act of 1947 (50 U.S.C. 
     3003(5)).
       (4) Terrorism information.--The term ``terrorism 
     information'' has the meaning given such term in section 1016 
     of the Intelligence Reform and Terrorism Prevention Act of 
     2004 (6 U.S.C. 485).

  The amendment was ordered to be engrossed and the bill to be read a 
third time.
  The bill was read the third time.
  The bill (H.R. 2454), as amended, was passed.

                          ____________________