[Congressional Record Volume 168, Number 158 (Thursday, September 29, 2022)]
[Senate]
[Pages S5671-S5672]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 6128. Ms. CORTEZ MASTO (for herself and Mrs. Fischer) submitted an 
amendment intended to be proposed to amendment SA 5499 submitted by Mr. 
Reed (for himself and Mr. Inhofe) and intended to be proposed to the 
bill H.R. 7900, to authorize appropriations for fiscal year 2023 for 
military activities of the Department of Defense, for military 
construction, and for defense activities of the Department of Energy, 
to prescribe military personnel strengths for such fiscal year, and for 
other purposes; which was ordered to lie on the table; as follows:

        At the appropriate place, insert the following:

     SEC. __. PROMOTING PRIVACY ENHANCING TECHNOLOGIES.

       (a) Definition of Privacy Enhancing Technology.--In this 
     section the term ``privacy enhancing technology'' means any 
     software solution, technical processes, or other 
     technological means of protecting an individual's privacy and 
     the confidentiality of data, which may include--
       (1) anonymization and pseudonymization techniques, 
     filtering tools, anti-tracking technology, differential 
     privacy tools, synthetic data generation tools, cryptographic 
     techniques (such as secure multi-party computation and 
     homomorphic encryption), and systems for federated learning; 
     and
       (2) any other software solution, technical processes, or 
     other technological means that the Director of the National 
     Science Foundation, in consultation with the Director of the 
     National Institute of Standards and Technology outside 
     experts, determines to be a technology that enhances privacy.
       (b) National Science Foundation Support of Research on 
     Privacy Enhancing Technology.--The Director of the National 
     Science Foundation, in consultation with other relevant 
     Federal agencies (as determined by the Director), shall 
     support merit-reviewed and competitively awarded research on 
     privacy enhancing technologies, which may include--
       (1) fundamental research on technologies for de-
     identification, pseudonymization, anonymization, or 
     obfuscation to protect individuals' privacy in data sets;
       (2) fundamental research on algorithms, machine learning, 
     and other similar mathematical tools used to protect 
     individual privacy when collecting, storing, sharing, 
     aggregating, or analyzing data;
       (3) fundamental research on technologies that promote data 
     minimization principles in data collection, sharing, 
     transfers, retention, and analytics;
       (4) research awards on privacy enhancing technologies 
     coordinated with other relevant Federal agencies and 
     programs;

[[Page S5672]]

       (5) research on barriers to, and opportunities for, the 
     adoption of privacy enhancing technologies, including studies 
     on effective business models for privacy enhancing 
     technologies; and
       (6) international cooperative research, awards, challenges, 
     and pilot projects on privacy enhancing technologies with key 
     United States allies and partners.
       (c) Integration Into the Computer and Network Security 
     Program.--Subparagraph (D) of section 4(a)(1) of the Cyber 
     Security Research and Development Act (15 U.S.C. 
     7403(a)(1)(D)) is amended to read as follows:
       ``(D) privacy enhancing technologies and 
     confidentiality;''.
       (d) Coordination With the National Institute of Standards 
     and Technology and Other Stakeholders.--
       (1) In general.--The Director of the Office of Science and 
     Technology Policy, acting through the Networking and 
     Information Technology Research and Development Program, 
     shall coordinate with the Director of the National Science 
     Foundation, the Director of the National Institute of 
     Standards and Technology, and the Federal Trade Commission to 
     accelerate the development and use of privacy enhancing 
     technologies.
       (2) Outreach.--The Director of the National Institute of 
     Standards and Technology shall conduct outreach to--
       (A) receive input from private, public, and academic 
     stakeholders on the development and potential uses of privacy 
     enhancing technologies, including the National Institutes of 
     Health and the Centers for Disease Control and Prevention 
     regarding specific applications in public health research; 
     and
       (B) develop ongoing public and private sector engagement to 
     create and disseminate voluntary, consensus-based resources 
     to increase the integration of privacy enhancing technologies 
     in data collection, sharing, transfers, retention, and 
     analytics by the public and private sectors.
       (e) Report on Privacy Enhancing Technology Research.--Not 
     later than 3 years after the date of enactment of this Act, 
     the Director of the Office of Science and Technology Policy, 
     acting through the Networking and Information Technology 
     Research and Development Program, shall, in coordination with 
     the Director of the National Science Foundation, the Director 
     of the National Institute of Standards and Technology, and 
     the Chair of the Federal Trade Commission, submit to the 
     Committee on Commerce, Science, and Transportation of the 
     Senate, the Committee on Science, Space, and Technology of 
     the House of Representatives, and the Committee on Energy and 
     Commerce of the House of Representatives, a report 
     containing--
       (1) the progress of research on privacy enhancing 
     technologies;
       (2) the progress of the development of voluntary resources 
     described under subsection (d)(2)(B); and
       (3) any policy recommendations that could facilitate and 
     improve communication and coordination between the private 
     sector, the National Science Foundation, and relevant Federal 
     agencies through the implementation of privacy enhancing 
     technologies.
                                 ______