[Congressional Record Volume 169, Number 120 (Thursday, July 13, 2023)]
[Senate]
[Page S2694]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]

  SA 563. Mr. WYDEN (for himself, Mr. Cassidy, and Ms. Lummis) 
submitted an amendment intended to be proposed by him to the bill S. 
2226, to authorize appropriations for fiscal year 2024 for military 
activities of the Department of Defense, for military construction, and 
for defense activities of the Department of Energy, to prescribe 
military personnel strengths for such fiscal year, and for other 
purposes; which was ordered to lie on the table; as follows:

       At the appropriate place in title XVI, insert the 
     following:

     SEC. 16__. IMPROVEMENTS RELATING TO CYBER PROTECTION SUPPORT 
                   FOR DEPARTMENT OF DEFENSE PERSONNEL IN 
                   POSITIONS HIGHLY VULNERABLE TO CYBER ATTACK.

       Section 1645 of the National Defense Authorization Act for 
     Fiscal Year 2017 (Public Law 114-328; 10 U.S.C. 2224 note) is 
     amended--
       (1) in subsection (a)--
       (A) in the subsection heading, by striking ``Authority'' 
     and inserting ``Requirement'';
       (B) in paragraph (1)--
       (i) by striking ``may'' and inserting ``shall'';
       (ii) by inserting ``and personal accounts'' after 
     ``personal technology devices''; and
       (iii) by inserting ``and shall provide such support to any 
     such personnel who request the support'' after ``in paragraph 
     (2)''; and
       (C) in paragraph (2)(B), by inserting ``or personal 
     accounts'' after ``personal technology devices'';
       (2) in subsection (c)--
       (A) in paragraph (1), by inserting ``or personal accounts'' 
     after ``personal technology devices''; and
       (B) in paragraph (2), by striking ``and networks'' and 
     inserting ``, personal networks, and personal accounts''; and
       (3) by striking subsections (d) and (e) and inserting the 
     following new subsection (d):
       ``(d) Definitions.--In this section:
       ``(1) The term `personal accounts' means accounts for 
     online and telecommunications services, including telephone, 
     residential internet access, email, text and multimedia 
     messaging, cloud computing, social media, health care, and 
     financial services, used by Department of Defense personnel 
     outside of the scope of their employment with the Department.
       ``(2) The term `personal technology devices ' means 
     technology devices used by Department of Defense personnel 
     outside of the scope of their employment with the Department 
     and includes networks to which such devices connect.''.

     SEC. 16__. COMPTROLLER GENERAL REPORT ON EFFORTS TO PROTECT 
                   PERSONAL INFORMATION OF DEPARTMENT OF DEFENSE 
                   PERSONNEL FROM EXPLOITATION BY FOREIGN 
                   ADVERSARIES.

       (a) In General.--Not later than 180 days after the date of 
     the enactment of this Act, the Comptroller General of the 
     United States shall brief the appropriate congressional 
     committees on Department of Defense efforts to protect 
     personal information of its personnel from exploitation by 
     foreign adversaries.
       (b) Elements.--The briefing required under subsection (a) 
     shall include any observations on the following elements:
       (1) An assessment of efforts by the Department of Defense 
     to protect the personal information, including location data 
     generated by smart phones, of members of the Armed Forces, 
     civilian employees of the Department of Defense, veterans, 
     and their families from exploitation by foreign adversaries.
       (2) Recommendations to improve Department of Defense 
     policies and programs to meaningfully address this threat.
       (c) Report.--The Comptroller General shall publish on its 
     website an unclassified report, which may contain a 
     classified annex submitted to the congressional defense and 
     intelligence committees, on the elements described in 
     subsection (b) at a time mutually agreed upon.
       (d) Appropriate Congressional Committees.--In this section, 
     the term ``appropriate congressional committees'' means--
       (1) the congressional defense committees;
       (2) the Select Committee on Intelligence of the Senate; and
       (3) the Permanent Select Committee on Intelligence of the 
     House of Representatives.
                                 ______