[Congressional Record Volume 165, Number 103 (Wednesday, June 19, 2019)]
[Senate]
[Page S3855]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 761. Mr. SASSE (for himself, Mr. King, Mr. Rounds, and Mrs. 
Gillibrand) submitted an amendment intended to be proposed by him to 
the bill S. 1790, to authorize appropriations for fiscal year 2020 for 
military activities of the Department of Defense, for military 
construction, and for defense activities of the Department of Energy, 
to prescribe military personnel strengths for such fiscal year, and for 
other purposes; which was ordered to lie on the table; as follows:

       At the end of subtitle C of title XVI, add the following:

     SEC. ___. STUDY ON CYBEREXPLOITATION OF MEMBERS OF THE ARMED 
                   FORCES AND THEIR FAMILIES.

       (a) Study Required.--Not later than 150 days after the date 
     of the enactment of this Act, the Secretary of Defense shall 
     complete a study on the cyberexploitation of the personal 
     information and accounts of members of the Armed Forces and 
     their families.
       (b) Elements.--The study required by subsection (a) shall 
     include the following:
       (1) An assessment of the vulnerability of members of the 
     Armed Forces and their families to inappropriate access to 
     their personal information and accounts of such members and 
     their families, including identification of particularly 
     vulnerable subpopulations.
       (2) Creation of a catalogue of past and current efforts by 
     foreign governments and non-state actors at the 
     cyberexploitation of the personal information and accounts of 
     members of the Armed Forces and their families, including an 
     assessment of the purposes of such efforts and their degrees 
     of success.
       (3) An assessment of the actions taken by the Department of 
     Defense to educate members of the Armed Forces and their 
     families, including particularly vulnerable subpopulations, 
     about any actions that can be taken to otherwise reduce these 
     threats.
       (4) Assessment of the potential for the cyberexploitation 
     of misappropriated images and videos as well as deep fakes.
       (5) Development of recommendations for policy changes to 
     reduce the vulnerability of members of the Armed Forces and 
     their families to cyberexploitation, including 
     recommendations for legislative or administrative action.
       (c) Report.--
       (1) In general.--The Secretary shall submit to the 
     congressional defense committees a report on the findings of 
     the Secretary with respect to the study required by 
     subsection (a).
       (2) Form.--The report required by paragraph (1) shall be 
     submitted in unclassified form, but may include a classified 
     annex.
       (d) Definitions.--In this section:
       (1) The term ``cyberexploitation'' means the use of digital 
     means to knowingly access, or conspire to access, without 
     authorization, an individual's personal information to be 
     employed (or to be used for) with malicious intent.
       (2) The term ``deep fake'' means the digital insertion of a 
     person's likeness into or digital alteration of a person's 
     likeness in visual media, such as photographs and videos, 
     without the person's permission and with malicious intent.
                                 ______