44 U.S.C. § 1328 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 13: PARTICULAR REPORTS AND DOCUMENTS / Section 1328: Merchant vessels of the United States
Merchant vessels of the United States
Status: in_force

Five thousand copies of the annual list of merchant vessels of the United States may be printed for distribution by the Coast Guard.

(Pub. L. 90–620, Oct. 22, 1968, 82 Stat. 1270.)

Historical and Revision Notes

Based on 44 U.S. Code, 1964 ed., §249 (Jan. 12, 1895, ch. 23, §73, 28 Stat. 616; Feb. 14, 1903, ch. 552, §4, 32 Stat. 826; June 30, 1932, ch. 314, §501, 47 Stat. 415; May 27, 1936, ch. 463, §1, 49 Stat. 1380; 1946 Reorg. Plan No. 3, §§101–104, eff. July 16, 1946, 11 F.R. 7875, 60 Stat. 1097).

The first paragraph of former section 249, act Jan. 12, 1895, ch. 23, §73, 28 Stat. 616, was omitted as obsolete. Paragraph related to report on Commerce and Navigation and on Internal Commerce. These reports were discontinued.

Statutory Notes and Related Subsidiaries

Transfer of Functions

For transfer of authorities, functions, personnel, and assets of the Coast Guard, including the authorities and functions of the Secretary of Transportation relating thereto, to the Department of Homeland Security, and for treatment of related references, see sections 468(b), 551(d), 552(d), and 557 of Title 6, Domestic Security, and the Department of Homeland Security Reorganization Plan of November 25, 2002, as modified, set out as a note under section 542 of Title 6.
44 U.S.C. § 904 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 9: CONGRESSIONAL RECORD / Section 904: Congressional Record: maps; diagrams; illustrations
Congressional Record: maps; diagrams; illustrations
Status: in_force

Maps, diagrams, or illustrations may not be inserted in the Record without the approval of the Joint Committee on Printing.

(Pub. L. 90–620, Oct. 22, 1968, 82 Stat. 1256.)

Historical and Revision Notes

Based on 44 U.S. Code, 1964 ed., §182b (Jan. 12, 1895, ch. 23, §14, as added June 20, 1936, ch. 630, title II, §2, 49 Stat. 1546).
44 U.S.C. § 3517 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 35: COORDINATION OF FEDERAL INFORMATION POLICY / Subchapter I: FEDERAL INFORMATION POLICY / Section 3517: Consultation with other agencies and the public
Consultation with other agencies and the public
Status: in_force

(a) In developing information resources management policies, plans, rules, regulations, procedures, and guidelines and in reviewing collections of information, the Director shall provide interested agencies and persons early and meaningful opportunity to comment.

(b) Any person may request the Director to review any collection of information conducted by or for an agency to determine, if, under this subchapter, a person shall maintain, provide, or disclose the information to or for the agency. Unless the request is frivolous, the Director shall, in coordination with the agency responsible for the collection of information—

(1) respond to the request within 60 days after receiving the request, unless such period is extended by the Director to a specified date and the person making the request is given notice of such extension; and

(2) take appropriate remedial action, if necessary.

(Added Pub. L. 104–13, §2, May 22, 1995, 109 Stat. 182; amended Pub. L. 106–398, §1 [[div. A], title X, §1064(b)], Oct. 30, 2000, 114 Stat. 1654, 1654A–275.)

Editorial Notes

Prior Provisions

A prior section 3517, added Pub. L. 96–511, §2(a), Dec. 11, 1980, 94 Stat. 2824, related to consultation with other agencies and the public prior to the general amendment of this chapter by Pub. L. 104–13.

Amendments

2000—Subsec. (b). Pub. L. 106–398 substituted "subchapter" for "chapter" in introductory provisions.

Statutory Notes and Related Subsidiaries

Effective Date of 2000 Amendment

Amendment by Pub. L. 106–398 effective 30 days after Oct. 30, 2000, see section 1 [[div. A], title X, §1065] of Pub. L. 106–398, Oct. 30, 2000, 114 Stat. 1654, formerly set out as an Effective Date note under former section 3531 of this title.

Effective Date

Section effective Oct. 1, 1995, except as otherwise provided, see section 4(a) of Pub. L. 104–13, set out as a note under section 3501 of this title.
44 U.S.C. § 1109 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 11: EXECUTIVE AND JUDICIARY PRINTING AND BINDING / Section 1109: Printing documents in two or more editions; full number and allotment of full quota
Printing documents in two or more editions; full number and allotment of full quota
Status: in_force

The number of copies of a public document or report authorized to be printed for an executive department, independent agency, or establishment of the Government may be supplied in two or more editions, instead of one, upon a requisition on the Director of the Government Publishing Office by the head of the department or independent office, but the aggregate of the editions may not exceed the number of copies otherwise authorized. This section does not preclude the printing of the full number of a document or report, or the allotment of the full quota to Senators and Representatives, as otherwise authorized, when a legitimate demand for the full complement is known to exist.

(Pub. L. 90–620, Oct. 22, 1968, 82 Stat. 1262; Pub. L. 113–235, div. H, title I, §1301(c)(1), Dec. 16, 2014, 128 Stat. 2537.)

Historical and Revision Notes

Based on 44 U.S. Code, 1964 ed., §224 (Mar. 30, 1906, No. 14, 34 Stat. 826).

Editorial Notes

Amendments

2014—Pub. L. 113–235 substituted "Director of the Government Publishing Office" for "Public Printer".
44 U.S.C. § 3553 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 35: COORDINATION OF FEDERAL INFORMATION POLICY / Subchapter II: INFORMATION SECURITY / Section 3553: Authority and functions of the Director and the Secretary
Authority and functions of the Director and the Secretary
Status: in_force

(a) Director.—The Director shall oversee agency information security policies and practices, including—

(1) developing and overseeing the implementation of policies, principles, standards, and guidelines on information security, including through ensuring timely agency adoption of and compliance with standards promulgated under section 11331 of title 40;

(2) requiring agencies, consistent with the standards promulgated under such section 11331 and the requirements of this subchapter, to identify and provide information security protections commensurate with the risk and magnitude of the harm resulting from the unauthorized access, use, disclosure, disruption, modification, or destruction of—

(A) information collected or maintained by or on behalf of an agency; or

(B) information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency;

(3) ensuring that the Secretary carries out the authorities and functions under subsection (b);

(4) coordinating the development of standards and guidelines under section 20 of the National Institute of Standards and Technology Act (15 U.S.C. 278g–3) with agencies and offices operating or exercising control of national security systems (including the National Security Agency) to assure, to the maximum extent feasible, that such standards and guidelines are complementary with standards and guidelines developed for national security systems;

(5) overseeing agency compliance with the requirements of this subchapter and section 1326 of title 41, including through any authorized action under section 11303 of title 40, to enforce accountability for compliance with such requirements; and

(6) coordinating information security policies and procedures with related information resources management policies and procedures.

(b) Secretary.—The Secretary, in consultation with the Director, shall administer the implementation of agency information security policies and practices for information systems, except for national security systems and information systems described in paragraph (2) or (3) of subsection (e), including—

(1) assisting the Director in carrying out the authorities and functions under paragraphs (1), (2), (3), (5), and (6) of subsection (a);

(2) developing and overseeing the implementation of binding operational directives to agencies to implement the policies, principles, standards, and guidelines developed by the Director under subsection (a)(1) and the requirements of this subchapter, which may be revised or repealed by the Director if the operational directives issued on behalf of the Director are not in accordance with policies, principles, standards, and guidelines developed by the Director, including—

(A) requirements for reporting security incidents to the Federal information security incident center established under section 3556;

(B) requirements for the contents of the annual reports required to be submitted under section 3554(c)(1);

(C) requirements for the mitigation of exigent risks to information systems; and

(D) other operational requirements as the Director or Secretary, in consultation with the Director, may determine necessary;

(3) monitoring agency implementation of information security policies and practices;

(4) convening meetings with senior agency officials to help ensure effective implementation of information security policies and practices;

(5) coordinating Government-wide efforts on information security policies and practices, including consultation with the Chief Information Officers Council established under section 3603 and the Director of the National Institute of Standards and Technology;

(6) providing operational and technical assistance to agencies in implementing policies, principles, standards, and guidelines on information security, including implementation of standards promulgated under section 11331 of title 40, including by—

(A) operating the Federal information security incident center established under section 3556;

(B) upon request by an agency, deploying, operating, and maintaining technology to assist the agency to continuously diagnose and mitigate against cyber threats and vulnerabilities, with or without reimbursement;

(C) compiling and analyzing data on agency information security; and

(D) developing and conducting targeted operational evaluations, including threat and vulnerability assessments, on the information systems;

(7) hunting for and identifying, with or without advance notice to or authorization from agencies, threats and vulnerabilities within Federal information systems;

(8) upon request by an agency, and at the Secretary's discretion, with or without reimbursement—

(A) providing services, functions, and capabilities, including operation of the agency's information security program, to assist the agency with meeting the requirements set forth in section 3554(b); and

(B) deploying, operating, and maintaining secure technology platforms and tools, including networks and common business applications, for use by the agency to perform agency functions, including collecting, maintaining, storing, processing, disseminating, and analyzing information; and

(9) other actions as the Director or the Secretary, in consultation with the Director, may determine necessary to carry out this subsection.

(c) Report.—Not later than March 1 of each year, the Director, in consultation with the Secretary, shall submit to Congress a report on the effectiveness of information security policies and practices during the preceding year, including—

(1) a summary of the incidents described in the annual reports required to be submitted under section 3554(c)(1), including a summary of the information required under section 3554(c)(1)(A)(iii);

(2) a description of the threshold for reporting major information security incidents;

(3) a summary of the results of evaluations required to be performed under section 3555;

(4) an assessment of agency compliance with standards promulgated under section 11331 of title 40; and

(5) an assessment of agency compliance with data breach notification policies and procedures issued by the Director.

(d) National Security Systems.—Except for the authorities and functions described in subsection (a)(5) and subsection (c), the authorities and functions of the Director and the Secretary under this section shall not apply to national security systems.

(e) Department of Defense and Intelligence Community Systems.—(1) The authorities of the Director described in paragraphs (1) and (2) of subsection (a) shall be delegated to the Secretary of Defense in the case of systems described in paragraph (2) and to the Director of National Intelligence in the case of systems described in paragraph (3).

(2) The systems described in this paragraph are systems that are operated by the Department of Defense, a contractor of the Department of Defense, or another entity on behalf of the Department of Defense that processes any information the unauthorized access, use, disclosure, disruption, modification, or destruction of which would have a debilitating impact on the mission of the Department of Defense.

(3) The systems described in this paragraph are systems that are operated by an element of the intelligence community, a contractor of an element of the intelligence community, or another entity on behalf of an element of the intelligence community that processes any information the unauthorized access, use, disclosure, disruption, modification, or destruction of which would have a debilitating impact on the mission of an element of the intelligence community.

(f) Consideration.—

(1) In general.—In carrying out the responsibilities under subsection (b), the Secretary shall consider any applicable standards or guidelines developed by the National Institute of Standards and Technology and issued by the Secretary of Commerce under section 11331 of title 40.

(2) Directives.—The Secretary shall—

(A) consult with the Director of the National Institute of Standards and Technology regarding any binding operational directive that implements standards and guidelines developed by the National Institute of Standards and Technology; and

(B) ensure that binding operational directives issued under subsection (b)(2) do not conflict with the standards and guidelines issued under section 11331 of title 40.

(3) Rule of construction.—Nothing in this subchapter shall be construed as authorizing the Secretary to direct the Secretary of Commerce in the development and promulgation of standards and guidelines under section 11331 of title 40.

(g) Exercise of Authority.—To ensure fiscal and policy consistency, the Secretary shall exercise the authority under this section subject to direction by the President, in coordination with the Director.

(h) Direction to Agencies.—

(1) Authority.—

(A) In general.—Subject to subparagraph (B), in response to a known or reasonably suspected information security threat, vulnerability, or incident that represents a substantial threat to the information security of an agency, the Secretary may issue an emergency directive to the head of an agency to take any lawful action with respect to the operation of the information system, including such systems used or operated by another entity on behalf of an agency, that collects, processes, stores, transmits, disseminates, or otherwise maintains agency information, for the purpose of protecting the information system from, or mitigating, an information security threat.

(B) Exception.—The authorities of the Secretary under this subsection shall not apply to a system described subsection (d) or to a system described in paragraph (2) or (3) of subsection (e).

(2) Procedures for use of authority.—The Secretary shall—

(A) in coordination with the Director, and in consultation with Federal contractors as appropriate, establish procedures governing the circumstances under which a directive may be issued under this subsection, which shall include—

(i) thresholds and other criteria;

(ii) privacy and civil liberties protections; and

(iii) providing notice to potentially affected third parties;

(B) specify the reasons for the required action and the duration of the directive;

(C) minimize the impact of a directive under this subsection by—

(i) adopting the least intrusive means possible under the circumstances to secure the agency information systems; and

(ii) limiting directives to the shortest period practicable;

(D) notify the Director and the head of any affected agency immediately upon the issuance of a directive under this subsection;

(E) consult with the Director of the National Institute of Standards and Technology regarding any directive under this subsection that implements standards and guidelines developed by the National Institute of Standards and Technology;

(F) ensure that directives issued under this subsection do not conflict with the standards and guidelines issued under section 11331 of title 40;

(G) consider any applicable standards or guidelines developed by the National Institute of Standards and Technology issued by the Secretary of Commerce under section 11331 of title 40; and

(H) not later than February 1 of each year, submit to the appropriate congressional committees a report regarding the specific actions the Secretary has taken pursuant to paragraph (1)(A).

(3) Imminent threats.—

(A) In general.—Notwithstanding section 3554, the Secretary may authorize the use under this subsection of the intrusion detection and prevention capabilities established under section 230(b)(1) 1 of the Homeland Security Act of 2002 for the purpose of ensuring the security of agency information systems, if—

(i) the Secretary determines there is an imminent threat to agency information systems;

(ii) the Secretary determines a directive under subsection (b)(2)(C) or paragraph (1)(A) is not reasonably likely to result in a timely response to the threat;

(iii) the Secretary determines the risk posed by the imminent threat outweighs any adverse consequences reasonably expected to result from the use of the intrusion detection and prevention capabilities under the control of the Secretary;

(iv) the Secretary provides prior notice to the Director, and the head and chief information officer (or equivalent official) of each agency to which specific actions will be taken pursuant to this paragraph, and notifies the appropriate congressional committees and authorizing committees of each such agency within 7 days of taking an action under this paragraph of—

(I) any action taken under this paragraph; and

(II) the reasons for and duration and nature of the action;

(v) the action of the Secretary is consistent with applicable law; and

(vi) the Secretary authorizes the use of the intrusion detection and prevention capabilities in accordance with the advance procedures established under subparagraph (C).

(B) Limitation on delegation.—The authority under this paragraph may not be delegated by the Secretary.

(C) Advance procedures.—The Secretary shall, in coordination with the Director, and in consultation with the heads of Federal agencies, establish procedures governing the circumstances under which the Secretary may authorize the use of the intrusion detection and prevention capabilities under subparagraph (A). The Secretary shall submit the procedures to Congress.

(4) Limitation.—The Secretary may direct or authorize lawful action or the use of the intrusion detection and prevention capabilities under this subsection only to—

(A) protect agency information from unauthorized access, use, disclosure, disruption, modification, or destruction; or

(B) require the remediation of or protect against identified information security risks with respect to—

(i) information collected or maintained by or on behalf of an agency; or

(ii) that portion of an information system used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency.

(i) Annual Report to Congress.—Not later than February 1 of each year, the Director and the Secretary shall submit to the appropriate congressional committees a report regarding the specific actions the Director and the Secretary have taken pursuant to subsection (a)(5), including any actions taken pursuant to section 11303(b)(5) of title 40.

(j) Rule of Construction.—Nothing in this section shall be construed to require the Secretary to provide notice to any private entity before the Secretary issues a binding operational directive under subsection (b)(2).

(k) Appropriate Congressional Committees Defined.—In this section, the term "appropriate congressional committees" means—

(1) the Committee on Appropriations and the Committee on Homeland Security and Governmental Affairs of the Senate; and

(2) the Committee on Appropriations, the Committee on Homeland Security, the Committee on Oversight and Government Reform, and the Committee on Science, Space, and Technology of the House of Representatives.

(l) Information Sharing.—

(1) In general.—Notwithstanding any other provision of law, including any provision of law that would otherwise restrict or prevent the head of an agency from disclosing information to the Secretary, the Secretary in carrying out this section and title XXII of the Homeland Security Act of 2002 (6 U.S.C. 651 et seq.) may access, use, retain, and disclose, and the head of an agency may disclose to the Secretary, information, for the purpose of protecting information and information systems from cybersecurity risks.

(2) Exception.—Paragraph (1) shall not apply to national security systems or to information systems described in paragraph (2) or (3) of subsection (e).

(Added Pub. L. 113–283, §2(a), Dec. 18, 2014, 128 Stat. 3075; amended Pub. L. 114–113, div. N, title II, §§224(e), 229(a), Dec. 18, 2015, 129 Stat. 2967, 2972; Pub. L. 115–390, title II, §204(a)(1), Dec. 21, 2018, 132 Stat. 5192; Pub. L. 116–92, div. E, title LXIV, §6432, Dec. 20, 2019, 133 Stat. 2200; Pub. L. 116–283, div. A, title XVII, §1705, Jan. 1, 2021, 134 Stat. 4082.)

Editorial Notes

References in Text

Section 230(b)(1) of the Homeland Security Act of 2002, referred to in subsec. (h)(3)(A), is section 230(b)(1) of title II of Pub. L. 107–296, as added by Pub. L. 114–113, div. N, title II, §223(a)(6), Dec. 18, 2015, 129 Stat. 2964, which was redesignated section 2213(b)(1) of Pub. L. 107–296 by section 2(g)(2)(I) of Pub. L. 115–278, Nov. 16, 2018, 132 Stat. 4178, and is classified to section 663(b)(1) of Title 6, Domestic Security.

The Homeland Security Act of 2002, referred to in subsec. (l)(1), is Pub. L. 107–296, Nov. 25, 2002, 116 Stat. 2135. Title XXII of the Act is classified generally to subchapter XVIII (§651 et seq.) of chapter 1 of Title 6, Domestic Security. For complete classification of this Act to the Code, see Short Title note set out under section 101 of Title 6 and Tables.

Prior Provisions

Provisions similar to this section were contained in sections 3533 and 3543 of this title prior to repeal by Pub. L. 113–283.

Amendments

2021—Subsec. (b)(7) to (9). Pub. L. 116–283, §1705(1), added pars. (7) and (8) and redesignated former par. (7) as (9).

Subsec. (l). Pub. L. 116–283, §1705(2), added subsec. (l).

2019—Subsecs. (j), (k). Pub. L. 116–92 added subsec. (j) and redesignated former subsec. (j) as (k).

2018—Subsec. (a)(5). Pub. L. 115–390 inserted "and section 1326 of title 41" after "compliance with the requirements of this subchapter".

2015—Subsec. (b)(6)(B). Pub. L. 114–113, §224(e), inserted ", operating, and maintaining" after "deploying".

Subsecs. (h) to (j). Pub. L. 114–113, §229(a), added subsecs. (h) to (j).

Statutory Notes and Related Subsidiaries

Change of Name

Committee on Oversight and Government Reform of House of Representatives changed to Committee on Oversight and Reform of House of Representatives by House Resolution No. 6, One Hundred Sixteenth Congress, Jan. 9, 2019. Committee on Oversight and Reform of House of Representatives changed to Committee on Oversight and Accountability of House of Representatives by House Resolution No. 5, One Hundred Eighteenth Congress, Jan. 9, 2023.

Effective Date of 2018 Amendment

Amendment by Pub. L. 115–390 effective 90 days after Dec. 21, 2018, see section 205 of Pub. L. 115–390, set out as an Effective Date note under section 1321 of this title.

Construction

Pub. L. 115–390, title II, §204(b), Dec. 21, 2018, 132 Stat. 5193, provided that: "Nothing in this title [see section 201 of Pub. L. 115–390, set out as a Short Title of 2018 note under section 101 of Title 41, Public Contracts] shall be construed to alter or impede any authority or responsibility under section 3553 of title 44, United States Code."

No TikTok on Government Devices

Pub. L. 117–328, div. R, Dec. 29, 2022, 136 Stat. 5258, provided that:

"SEC. 101. SHORT TITLE.

"This division may be cited as the 'No TikTok on Government Devices Act'.

"SEC. 102. PROHIBITION ON THE USE OF TIKTOK.

"(a) Definitions.—In this section—

"(1) the term 'covered application' means the social networking service TikTok or any successor application or service developed or provided by ByteDance Limited or an entity owned by ByteDance Limited;

"(2) the term 'executive agency' has the meaning given that term in section 133 of title 41, United States Code; and

"(3) the term 'information technology' has the meaning given that term in section 11101 of title 40, United States Code.

"(b) Prohibition on the Use of TikTok.—

"(1) In general.—Not later than 60 days after the date of the enactment of this Act [Dec. 29, 2022], the Director of the Office of Management and Budget, in consultation with the Administrator of General Services, the Director of the Cybersecurity and Infrastructure Security Agency, the Director of National Intelligence, and the Secretary of Defense, and consistent with the information security requirements under subchapter II of chapter 35 of title 44, United States Code, shall develop standards and guidelines for executive agencies requiring the removal of any covered application from information technology.

"(2) National security and research exceptions.—The standards and guidelines developed under paragraph (1) shall include—

"(A) exceptions for law enforcement activities, national security interests and activities, and security researchers; and

"(B) for any authorized use of a covered application under an exception, requirements for executive agencies to develop and document risk mitigation actions for such use."

Breaches

Pub. L. 113–283, §2(d), Dec. 18, 2014, 128 Stat. 3085, provided that:

"(1) Requirements.—The Director of the Office of Management and Budget shall ensure that data breach notification policies and guidelines are updated periodically and require—

"(A) except as provided in paragraph (4), notice by the affected agency to each committee of Congress described in section 3554(c)(1) of title 44, United States Code, as added by subsection (a), the Committee on the Judiciary of the Senate, and the Committee on the Judiciary of the House of Representatives, which shall—

"(i) be provided expeditiously and not later than 30 days after the date on which the agency discovered the unauthorized acquisition or access; and

"(ii) include—

"(I) information about the breach, including a summary of any information that the agency knows on the date on which notification is provided about how the breach occurred;

"(II) an estimate of the number of individuals affected by the breach, based on information that the agency knows on the date on which notification is provided, including an assessment of the risk of harm to affected individuals;

"(III) a description of any circumstances necessitating a delay in providing notice to affected individuals; and

"(IV) an estimate of whether and when the agency will provide notice to affected individuals; and

"(B) notice by the affected agency to affected individuals, pursuant to data breach notification policies and guidelines, which shall be provided as expeditiously as practicable and without unreasonable delay after the agency discovers the unauthorized acquisition or access.

"(2) National security; law enforcement; remediation.—The Attorney General, the head of an element of the intelligence community (as such term is defined under section 3(4) of the National Security Act of 1947 (50 U.S.C. 3003(4)), or the Secretary of Homeland Security may delay the notice to affected individuals under paragraph (1)(B) if the notice would disrupt a law enforcement investigation, endanger national security, or hamper security remediation actions.

"(3) Reports.—

"(A) Director of omb.—During the first 2 years beginning after the date of enactment of this Act [Dec. 18, 2014], the Director of the Office of Management and Budget shall, on an annual basis—

"(i) assess agency implementation of data breach notification policies and guidelines in aggregate; and

"(ii) include the assessment described in clause (i) in the report required under section 3553(c) of title 44, United States Code.

"(B) Secretary of homeland security.—During the first 2 years beginning after the date of enactment of this Act, the Secretary of Homeland Security shall include an assessment of the status of agency implementation of data breach notification policies and guidelines in the requirements under section 3553(b)(2)(B) of title 44, United States Code.

"(4) Exception.—Any element of the intelligence community (as such term is defined under section 3(4) of the National Security Act of 1947 (50 U.S.C. 3003(4)) that is required to provide notice under paragraph (1)(A) shall only provide such notice to appropriate committees of Congress.

"(5) Rule of construction.—Nothing in paragraph (1) shall be construed to alter any authority of a Federal agency or department."

Similar provisions were contained in Pub. L. 113–282, §7(b), Dec. 18, 2014, 128 Stat. 3071.

1 See References in Text note below.
44 U.S.C. § 3601 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 36: MANAGEMENT AND PROMOTION OF ELECTRONIC GOVERNMENT SERVICES / Section 3601: Definitions
Definitions
Status: in_force

In this chapter, the definitions under section 3502 shall apply, and the term—

(1) "Administrator" means the Administrator of the Office of Electronic Government established under section 3602;

(2) "Council" means the Chief Information Officers Council established under section 3603;

(3) "electronic Government" means the use by the Government of web-based Internet applications and other information technologies, combined with processes that implement these technologies, to—

(A) enhance the access to and delivery of Government information and services to the public, other agencies, and other Government entities; or

(B) bring about improvements in Government operations that may include effectiveness, efficiency, service quality, or transformation;

(4) "enterprise architecture"—

(A) means—

(i) a strategic information asset base, which defines the mission;

(ii) the information necessary to perform the mission;

(iii) the technologies necessary to perform the mission; and

(iv) the transitional processes for implementing new technologies in response to changing mission needs; and

(B) includes—

(i) a baseline architecture;

(ii) a target architecture; and

(iii) a sequencing plan;

(5) "Fund" means the E-Government Fund established under section 3604;

(6) "interoperability" means the ability of different operating and software systems, applications, and services to communicate and exchange data in an accurate, effective, and consistent manner;

(7) "integrated service delivery" means the provision of Internet-based Federal Government information or services integrated according to function or topic rather than separated according to the boundaries of agency jurisdiction; and

(8) "tribal government" means—

(A) the governing body of any Indian tribe, band, nation, or other organized group or community located in the continental United States (excluding the State of Alaska) that is recognized as eligible for the special programs and services provided by the United States to Indians because of their status as Indians, and

(B) any Alaska Native regional or village corporation established pursuant to the Alaska Native Claims Settlement Act (43 U.S.C. 1601 et seq.).

(Added Pub. L. 107–347, title I, §101(a), Dec. 17, 2002, 116 Stat. 2901.)

Editorial Notes

References in Text

The Alaska Native Claims Settlement Act, referred to in par. (8)(B), is Pub. L. 92–203, Dec. 18, 1971, 85 Stat. 688, which is classified generally to chapter 33 (§1601 et seq.) of Title 43, Public Lands. For complete classification of this Act to the Code, see Short Title note set out under section 1601 of Title 43 and Tables.

Statutory Notes and Related Subsidiaries

Effective Date

Pub. L. 107–347, title IV, §402(a), Dec. 17, 2002, 116 Stat. 2961, provided that:

"(1) In general.—Except as provided under paragraph (2), titles I [enacting this chapter, section 507 of Title 31, Money and Finance, and section 305 of Title 40, Public Buildings, Property, and Works, and amending section 503 of Title 31] and II [enacting chapter 37 of Title 5, Government Organization and Employees, section 2332 of Title 10, Armed Forces, and section 266a of Title 41, Public Contracts, amending sections 3111, 4108, and 7353 of Title 5, sections 207, 209, and 1905 of Title 18, Crimes and Criminal Procedure, sections 502, 11501 to 11505 of Title 40, and section 423 of Title 41, repealing section 11521 of Title 40, directing the renumbering of section 11522 of Title 40 as section 11521, enacting provisions set out as notes under section 3501 of this title, and amending provisions set out as notes under section 8432 of Title 5 and section 1913 of Title 28, Judiciary and Judicial Procedure] and the amendments made by such titles shall take effect 120 days after the date of enactment of this Act [Dec. 17, 2002].

"(2) Immediate enactment.—Sections 207, 214, and 215 [set out in a note under section 3501 of this title] shall take effect on the date of enactment of this Act [Dec. 17, 2002]."

Federal Data Center Consolidation Initiative

Pub. L. 118–31, div. E, title LIII, §5302(a), Dec. 22, 2023, 137 Stat. 940, provided that:

"(a) Findings.—Congress finds the following:

"(1) The statutory authorization for the Federal Data Center Optimization Initiative under section 834 of the Carl Levin and Howard P. 'Buck' McKeon National Defense Authorization Act for Fiscal Year 2015 (44 U.S.C. 3601 note; Public Law 113–291) [set out below] expired at the end of fiscal year 2022.

"(2) The expiration of the authorization described in paragraph (1) presents Congress with an opportunity to review the objectives of the Federal Data Center Optimization Initiative to ensure that the initiative is meeting the current needs of the Federal Government.

"(3) The initial focus of the Federal Data Center Optimization Initiative, which was to consolidate data centers and create new efficiencies, has resulted in, since 2010—

"(A) the consolidation of more than 6,000 Federal data centers; and

"(B) cost savings and avoidance of $5,800,000,000.

"(4) The need of the Federal Government for access to data and data processing systems has evolved since the date of enactment in 2014 of subtitle D of title VIII of the Carl Levin and Howard P. 'Buck' McKeon National Defense Authorization Act for Fiscal Year 2015 [Pub. L. 113–291, approved Dec. 19, 2014].

"(5) Federal agencies and employees involved in mission critical functions increasingly need reliable access to secure, reliable, and protected facilities to house mission critical data and data operations to meet the immediate needs of the people of the United States.

"(6) As of the date of enactment of this title [Dec. 22, 2023], there is a growing need for Federal agencies to use data centers and cloud applications that meet high standards for cybersecurity, resiliency, and availability."

Pub. L. 118–31, div. E, title LIII, §5302(d), Dec. 22, 2023, 137 Stat. 943, provided that: "Not later than 1 year after the date of the enactment of this title [Dec. 22, 2023], and annually thereafter, the Comptroller General of the United States shall review, verify, and audit the compliance of covered agencies with the minimum requirements established pursuant to section 834(b)(1) of the Carl Levin and Howard P. 'Buck' McKeon National Defense Authorization Act for Fiscal Year 2015 (44 U.S.C. 3601 note; Public Law 113–291) [set out below] for new data centers and subsection (b)(3) of that section for existing data centers, as appropriate."

Pub. L. 113–291, div. A, title VIII, §834, Dec. 19, 2014, 128 Stat. 3444, as amended by Pub. L. 115–88, §4, Nov. 21, 2017, 131 Stat. 1278; Pub. L. 115–91, div. A, §819(c), Dec. 12, 2017, 131 Stat. 1464; Pub. L. 116–92, div. A, title VIII, §824, Dec. 20, 2019, 133 Stat. 1491; Pub. L. 118–31, div. E, title LIII, §5302(b), (c), Dec. 22, 2023, 137 Stat. 941, 943, provided that:

"(a) Definitions.—In this section:

"(1) Administrator.—The term 'Administrator' means the Administrator of the Office of Electronic Government established under section 3602 of title 44, United States Code (and also known as the Office of E-Government and Information Technology), within the Office of Management and Budget.

"(2) Covered agency.—The term 'covered agency' means the following (including all associated components of the agency):

"(A) Department of Agriculture.

"(B) Department of Commerce.

"(C) Department of Defense.

"(D) Department of Education.

"(E) Department of Energy.

"(F) Department of Health and Human Services.

"(G) Department of Homeland Security.

"(H) Department of Housing and Urban Development.

"(I) Department of the Interior.

"(J) Department of Justice.

"(K) Department of Labor.

"(L) Department of State.

"(M) Department of Transportation.

"(N) Department of Treasury.

"(O) Department of Veterans Affairs.

"(P) Environmental Protection Agency.

"(Q) General Services Administration.

"(R) National Aeronautics and Space Administration.

"(S) National Science Foundation.

"(T) Nuclear Regulatory Commission.

"(U) Office of Personnel Management.

"(V) Small Business Administration.

"(W) Social Security Administration.

"(X) United States Agency for International Development.

"(3) New data center.—The term 'new data center' means—

"(A)(i) a data center or a portion thereof that is owned, operated, or maintained by a covered agency; or

"(ii) to the extent practicable, a data center or portion thereof—

"(I) that is owned, operated, or maintained by a contractor on behalf of a covered agency on the date on which the contract between the covered agency and the contractor expires; and

"(II) with respect to which the covered agency extends the contract, or enters into a new contract, with the contractor; and

"(B) on or after the date that is 180 days after the date of enactment of the Federal Data Center Enhancement Act of 2023 [title LIII of div. E of Pub. L. 118–31, approved Dec. 22, 2023], a data center or portion thereof that is—

"(i) established; or

"(ii) substantially upgraded or expanded.

"(b) Minimum Requirements for New Data Centers.—

"(1) In general.—Not later than 180 days after the date of enactment of the Federal Data Center Enhancement Act of 2023 [title LIII of div. E of Pub. L. 118–31, approved Dec. 22, 2023], the Administrator shall establish minimum requirements for new data centers in consultation with the Administrator of General Services and the Federal Chief Information Officers Council.

"(2) Contents.—

"(A) In general.—The minimum requirements established under paragraph (1) shall include requirements relating to—

"(i) the availability of new data centers;

"(ii) the use of new data centers, including costs related to the facility, energy consumption, and related infrastructure;

"(iii) uptime percentage;

"(iv) protections against power failures, including on-site energy generation and access to multiple transmission paths;

"(v) protections against physical intrusions and natural disasters;

"(vi) information security protections required by subchapter II of chapter 35 of title 44, United States Code, and other applicable law and policy; and

"(vii) any other requirements the Administrator determines appropriate.

"(B) Consultation.—In establishing the requirements described in subparagraph (A)(vi), the Administrator shall consult with the Director of the Cybersecurity and Infrastructure Security Agency and the National Cyber Director.

"(3) Incorporation of minimum requirements into current data centers.—As soon as practicable, and in any case not later than 90 days after the Administrator establishes the minimum requirements pursuant to paragraph (1), the Administrator shall issue guidance to ensure, as appropriate, that covered agencies incorporate the minimum requirements established under that paragraph into the operations of any data center of a covered agency existing as of the date of enactment of the Federal Data Center Enhancement Act of 2023.

"(4) Review of requirements.—The Administrator, in consultation with the Administrator of General Services and the Federal Chief Information Officers Council, shall review, update, and modify the minimum requirements established under paragraph (1), as necessary.

"(5) Report on new data centers.—During the development and planning lifecycle of a new data center, if the head of a covered agency determines that the covered agency is likely to make a management or financial decision relating to any data center, the head of the covered agency shall—

"(A) notify—

"(i) the Administrator;

"(ii) [the] Committee on Homeland Security and Governmental Affairs of the Senate; and

"(iii) [the] Committee on Oversight and Accountability of the House of Representatives; and

"(B) describe in the notification with sufficient detail how the covered agency intends to comply with the minimum requirements established under paragraph (1).

"(6) Use of technology.—In determining whether to establish or continue to operate an existing data center, the head of a covered agency shall—

"(A) regularly assess the application portfolio of the covered agency and ensure that each at-risk legacy application is updated, replaced, or modernized, as appropriate, to take advantage of modern technologies; and

"(B) prioritize and, to the greatest extent possible, leverage commercial data center solutions, including hybrid cloud, multi-cloud, co-location, interconnection, or cloud computing (as defined in section 3607 of this Chapter [probably means chapter 36 of Title 44, United States Code]) rather than acquiring, overseeing, or managing custom data center infrastructure.

"(7) Public website.—

"(A) In general.—The Administrator shall maintain a public-facing website that includes information, data, and explanatory statements relating to the compliance of covered agencies with the requirements of this section.

"(B) Processes and procedures.—In maintaining the website described in subparagraph (A), the Administrator shall—

"(i) ensure covered agencies regularly, and not less frequently than biannually, update the information, data, and explanatory statements posed on the website, pursuant to guidance issued by the Administrator, relating to any new data centers and, as appropriate, each existing data center of the covered agency; and

"(ii) ensure that all information, data, and explanatory statements on the website are maintained as open Government data assets.

"(c) Ensuring Cybersecurity Standards for Data Center Consolidation and Cloud Computing.—

"(1) In general.—The head of a covered agency shall oversee and manage the data center portfolio and the information technology strategy of the covered agency in accordance with Federal cybersecurity guidelines and directives, including—

"(A) information security standards and guidelines promulgated by the Director of the National Institute of Standards and Technology;

"(B) applicable requirements and guidance issued by the Director of the Office of Management and Budget pursuant to section 3614 of title 44, United States Code; and

"(C) directives issued by the Secretary of Homeland Security under section 3553 of title 44, United States Code.

"(2) Rule of construction.—Nothing in this section shall be construed to limit the ability of the Director of the Office of Management and Budget to update or modify the Federal guidelines on cloud computing security.

"(d) Waiver of Requirements.—The Director of National Intelligence and the Secretary of Defense, or their respective designee, may waive the applicability to any national security system, as defined in [former] section 3542 of title 44, United States Code, [see 44 U.S.C. 3552] of any provision of this section if the Director of National Intelligence or the Secretary of Defense, or their respective designee, determines that such waiver is in the interest of national security. Not later than 30 days after making a waiver under this subsection, the Director of National Intelligence or the Secretary of Defense, or their respective designee, shall submit to the Committee on Homeland Security and Governmental Affairs and the Select Committee on Intelligence of the Senate and the Committee on Oversight and Government Reform [now Committee on Oversight and Accountability] and the Permanent Select Committee on Intelligence of the House of Representatives a statement describing the waiver and the reasons for the waiver.

"(e) Sunset.—This section is repealed effective on October 1, 2026."

[Amendment by section 5302(c) of Pub. L. 118–31, which substituted "2026" for "2022" in the date of repeal in section 834(e) of Pub. L. 113–291, set out above, was executed as directed to reflect the probable intent of Congress, even though the amendment was enacted on Dec. 22, 2023, after the repeal had taken effect.]

[Pub. L. 115–88 and Pub. L. 115–91 amended section 834(e) of Pub. L. 113–291, set out above, identically by striking "2018" and inserting "2020".]

E-Government Initiatives Funding

Pub. L. 110–161, div. D, title VII, §737, Dec. 26, 2007, 121 Stat. 2028, provided that:

"(a) For fiscal year 2008, no funds shall be available for transfers or reimbursements to the E-Government initiatives sponsored by the Office of Management and Budget prior to 15 days following submission of a report to the Committees on Appropriations by the Director of the Office of Management and Budget and receipt of approval to transfer funds by the House and Senate Committees on Appropriations.

"(b) Hereafter, any funding request for a new or ongoing E-Government initiative by any agency or agencies managing the development of an initiative shall include in justification materials submitted to the House and Senate Committees on Appropriations the information in subsection (d).

"(c) Hereafter, any funding request by any agency or agencies participating in the development of an E-Government initiative and contributing funding for the initiative shall include in justification materials submitted to the House and Senate Committees on Appropriations—

"(1) the amount of funding contributed to each initiative by program office, bureau, or activity, as appropriate; and

"(2) the relevance of that use to that department or agency and each bureau or office within, which is contributing funds.

"(d) The report in (a) and justification materials in (b) shall include at a minimum—

"(1) a description of each initiative including but not limited to its objectives, benefits, development status, risks, cost effectiveness (including estimated net costs or savings to the government), and the estimated date of full operational capability;

"(2) the total development cost of each initiative by fiscal year including costs to date, the estimated costs to complete its development to full operational capability, and estimated annual operations and maintenance costs; and

"(3) the sources and distribution of funding by fiscal year and by agency and bureau for each initiative including agency contributions to date and estimated future contributions by agency.

"(e) No funds shall be available for obligation or expenditure for new E-Government initiatives without the explicit approval of the House and Senate Committees on Appropriations."

[Provisions similar to subsecs. (a), (d), and (e) of section 737 of Pub. L. 110–161, set out above, were contained in sections of subsequent appropriations acts which are not set out in the Code.]

Findings and Purposes

Pub. L. 107–347, §2, Dec. 17, 2002, 116 Stat. 2900, provided that:

"(a) Findings.—Congress finds the following:

"(1) The use of computers and the Internet is rapidly transforming societal interactions and the relationships among citizens, private businesses, and the Government.

"(2) The Federal Government has had uneven success in applying advances in information technology to enhance governmental functions and services, achieve more efficient performance, increase access to Government information, and increase citizen participation in Government.

"(3) Most Internet-based services of the Federal Government are developed and presented separately, according to the jurisdictional boundaries of an individual department or agency, rather than being integrated cooperatively according to function or topic.

"(4) Internet-based Government services involving interagency cooperation are especially difficult to develop and promote, in part because of a lack of sufficient funding mechanisms to support such interagency cooperation.

"(5) Electronic Government has its impact through improved Government performance and outcomes within and across agencies.

"(6) Electronic Government is a critical element in the management of Government, to be implemented as part of a management framework that also addresses finance, procurement, human capital, and other challenges to improve the performance of Government.

"(7) To take full advantage of the improved Government performance that can be achieved through the use of Internet-based technology requires strong leadership, better organization, improved interagency collaboration, and more focused oversight of agency compliance with statutes related to information resource management.

"(b) Purposes.—The purposes of this Act [see Tables for classification] are the following:

"(1) To provide effective leadership of Federal Government efforts to develop and promote electronic Government services and processes by establishing an Administrator of a new Office of Electronic Government within the Office of Management and Budget.

"(2) To promote use of the Internet and other information technologies to provide increased opportunities for citizen participation in Government.

"(3) To promote interagency collaboration in providing electronic Government services, where this collaboration would improve the service to citizens by integrating related functions, and in the use of internal electronic Government processes, where this collaboration would improve the efficiency and effectiveness of the processes.

"(4) To improve the ability of the Government to achieve agency missions and program performance goals.

"(5) To promote the use of the Internet and emerging technologies within and across Government agencies to provide citizen-centric Government information and services.

"(6) To reduce costs and burdens for businesses and other Government entities.

"(7) To promote better informed decisionmaking by policy makers.

"(8) To promote access to high quality Government information and services across multiple channels.

"(9) To make the Federal Government more transparent and accountable.

"(10) To transform agency operations by utilizing, where appropriate, best practices from public and private sector organizations.

"(11) To provide enhanced access to Government information and services in a manner consistent with laws regarding protection of personal privacy, national security, records retention, access for persons with disabilities, and other relevant laws."

Executive Documents

Building a 21st Century Digital Government

Memorandum of President of the United States, May 23, 2012, 77 F.R. 32391, provided:

Memorandum for the Heads of Executive Departments and Agencies

The innovative use of technology is fundamentally transforming how the American people do business and live their daily lives. Exponential increases in computing power, the rise of high-speed networks, and the growing mobile revolution have put the Internet at our fingertips, encouraging innovations that are giving rise to new industries and reshaping existing ones.

Innovators in the private sector and the Federal Government have used these technological advances to fundamentally change how they serve their customers. However, it is time for the Federal Government to do more. For far too long, the American people have been forced to navigate a labyrinth of information across different Government programs in order to find the services they need. In addition, at a time when Americans increasingly pay bills and buy tickets on mobile devices, Government services often are not optimized for smartphones or tablets, assuming the services are even available online.

On April 27, 2011, I issued Executive Order 13571 (Streamlining Service Delivery and Improving Customer Service), requiring executive departments and agencies (agencies) to, among other things, identify ways to use innovative technologies to streamline their delivery of services to lower costs, decrease service delivery times, and improve the customer experience. As the next step toward modernizing the way Government works, I charged my Federal Chief Information Officer (CIO) with developing a comprehensive Government-wide strategy to build a 21st century digital Government that delivers better digital services to the American people.

Today, the CIO is releasing that strategy, entitled "Digital Government: Building a 21st Century Platform to Better Serve the American People" (Strategy), which provides agencies with a 12-month roadmap that focuses on several priority areas. The Strategy will enable more efficient and coordinated digital service delivery by requiring agencies to establish specific, measurable goals for delivering better digital services; encouraging agencies to deliver information in new ways that fully utilize the power and potential of mobile and web-based technologies; ensuring the safe and secure delivery and use of digital services to protect information and privacy; requiring agencies to establish central online resources for outside developers and to adopt new standards for making applicable Government information open and machine-readable by default; aggregating agencies' online resource pages for developers in a centralized catalogue on www.Data.gov; and requiring agencies to use web performance analytics and customer satisfaction measurement tools on all ".gov" websites.

Ultimately, this Strategy will ensure that agencies use emerging technologies to serve the public as effectively as possible. As a Government, and as a trusted provider of services, we must never forget who our customers are—the American people.

In order to ensure that agencies make the best use of emerging technologies in serving the public, I hereby direct each agency to take the following actions:

(1) implement the requirements of the Strategy within 12 months of the date of this memorandum and comply with the timeframes for specific actions specified therein; and

(2) within 90 days of the date of this memorandum, create a page on its website, located at www.[agency].gov/digitalstrategy, to publicly report progress in meeting the requirements of the Strategy in a machine-readable format.

This memorandum shall be implemented consistent with applicable law and subject to the availability of appropriations, and with appropriate protections for privacy and civil liberties.

The Director of the Office of Management and Budget is authorized and directed to publish this memorandum in the Federal Register.

Barack Obama.
44 U.S.C. § 3531 (2024) — Title 44: PUBLIC PRINTING AND DOCUMENTS / Chapter 35: COORDINATION OF FEDERAL INFORMATION POLICY / Subchapter I: FEDERAL INFORMATION POLICY / Section 3531: Repealed. Pub. L. 113-283, §2(a), Dec. 18, 2014, 128 Stat. 3073
Repealed. Pub. L. 113-283, §2(a), Dec. 18, 2014, 128 Stat. 3073
Status: repealed

[§§3531 to 3549. Repealed. Pub. L. 113–283, §2(a), Dec. 18, 2014, 128 Stat. 3073]

Sections 3531 to 3538 comprised subchapter II of this chapter "INFORMATION SECURITY".

Section 3531, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2259, set forth purposes of subchapter II. See section 3551 of this title.

A prior section 3531, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth purposes of subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3532, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2260, related to definitions applicable to subchapter II. See section 3552 of this title.

A prior section 3532, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, related to definitions applicable to subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3533, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2261, set forth authority and functions of the Director. See section 3553 of this title.

A prior section 3533, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–266, set forth authority and functions of the Director prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3534, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2262, related to Federal agency responsibilities. See section 3554 of this title.

A prior section 3534, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–268, related to Federal agency responsibilities prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3535, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2265; amended Pub. L. 108–177, title III, §377(e), Dec. 13, 2003, 117 Stat. 2631, related to annual independent evaluation. See section 3555 of this title.

A prior section 3535, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–271, related to annual independent evaluation prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3536, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2266, described responsibilities for the head of each agency operating or exercising control of a national security system. See section 3557 of this title.

A prior section 3536, added Pub. L. 106–398, §1 [[div. A], title X, §1061], Oct. 30, 2000, 114 Stat. 1654, 1654A–272; amended Pub. L. 107–314, div. A, title X, §1052(a), Dec. 2, 2002, 116 Stat. 2648, set forth expiration date of subchapter II prior to the general amendment of subchapter II by Pub. L. 107–296.

Section 3537, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2267, authorized appropriations for fiscal years 2003 through 2007.

Section 3538, added Pub. L. 107–296, title X, §1001(b)(1), Nov. 25, 2002, 116 Stat. 2267, related to effect on existing law. See section 3558 of this title.

Sections 3541 to 3549 comprised subchapter III of this chapter "INFORMATION SECURITY".

Section 3541, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2946, set forth purposes of subchapter III. See section 3551 of this title.

Section 3542, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2947, related to definitions applicable to subchapter III. See section 3552 of this title.

Section 3543, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2947, set forth authority and functions of the Director. See section 3553 of this title.

Section 3544, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2949, related to Federal agency responsibilities. See section 3554 of this title.

Section 3545, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2952; amended Pub. L. 108–177, title III, §377(e), Dec. 13, 2003, 117 Stat. 2631, related to annual independent evaluation. See section 3555 of this title.

Section 3546, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2954, related to Federal information security incident center. See section 3556 of this title.

Section 3547, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2954, described responsibilities for the head of each agency operating or exercising control of a national security system. See section 3557 of this title.

Section 3548, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2954, authorized appropriations for fiscal years 2003 through 2007.

Section 3549, added Pub. L. 107–347, title III, §301(b)(1), Dec. 17, 2002, 116 Stat. 2955, related to effect on existing law and provided that subchapter II was not to apply while subchapter III was in effect. See section 3558 of this title.