```

[115th Congress Public Law 331]
[From the U.S. Government Publishing Office]

[[Page 4483]]

       DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK ACT OF 2018

[[Page 132 STAT. 4484]]

Public Law 115-331
115th Congress

                                 An Act

 
    To direct the Secretary of Homeland Security to establish a data 
framework to provide access for appropriate personnel to law enforcement 
         and other information of the Department, and for other 
            purposes. <<NOTE: Dec. 19, 2018 -  [H.R. 2454]>> 

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled, <<NOTE: Department of 
Homeland Security Data Framework Act of 2018. 6 USC 101 note.>> 
SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Department of Homeland Security Data 
Framework Act of 2018''.
SEC. 2. <<NOTE: 6 USC 126.>>  DEPARTMENT OF HOMELAND SECURITY DATA 
                    FRAMEWORK.

    (a) In General.--
            (1) Development.--The Secretary of Homeland Security shall 
        develop a data framework to integrate existing Department of 
        Homeland Security datasets and systems, as appropriate, for 
        access by authorized personnel in a manner consistent with 
        relevant legal authorities and privacy, civil rights, and civil 
        liberties policies and protections.
            (2) Requirements.--In developing the framework required 
        under paragraph (1), the Secretary of Homeland Security shall 
        ensure, in accordance with all applicable statutory and 
        regulatory requirements, the following information is included:
                    (A) All information acquired, held, or obtained by 
                an office or component of the Department of Homeland 
                Security that falls within the scope of the information 
                sharing environment, including homeland security 
                information, terrorism information, weapons of mass 
                destruction information, and national intelligence.
                    (B) Any information or intelligence relevant to 
                priority mission needs and capability requirements of 
                the homeland security enterprise, as determined 
                appropriate by the Secretary.

    (b) Data Framework Access.--
            (1) <<NOTE: Determination.>>  In general.--The Secretary of 
        Homeland Security shall ensure that the data framework required 
        under this section is accessible to employees of the Department 
        of Homeland Security who the Secretary determines--
                    (A) have an appropriate security clearance;
                    (B) are assigned to perform a function that requires 
                access to information in such framework; and
                    (C) are trained in applicable standards for 
                safeguarding and using such information.
            (2) Guidance.--The Secretary of Homeland Security shall--

[[Page 132 STAT. 4485]]

                    (A) issue guidance for Department of Homeland 
                Security employees authorized to access and contribute 
                to the data framework pursuant to paragraph (1); and
                    (B) ensure that such guidance enforces a duty to 
                share between offices and components of the Department 
                when accessing or contributing to such framework for 
                mission needs.
            (3) <<NOTE: Standards.>>  Efficiency.--The Secretary of 
        Homeland Security shall promulgate data standards and instruct 
        components of the Department of Homeland Security to make 
        available information through the data framework required under 
        this section in a machine-readable standard format, to the 
        greatest extent practicable.

    (c) <<NOTE: Determination.>>  Exclusion of Information.--The 
Secretary of Homeland Security may exclude information from the data 
framework required under this section if the Secretary determines 
inclusion of such information may--
            (1) jeopardize the protection of sources, methods, or 
        activities;
            (2) compromise a criminal or national security 
        investigation;
            (3) be inconsistent with other Federal laws or regulations; 
        or
            (4) be duplicative or not serve an operational purpose if 
        included in such framework.

    (d) Safeguards.--The Secretary of Homeland Security shall 
incorporate into the data framework required under this section systems 
capabilities for auditing and ensuring the security of information 
included in such framework. Such capabilities shall include the 
following:
            (1) Mechanisms for identifying insider threats.
            (2) Mechanisms for identifying security risks.
            (3) Safeguards for privacy, civil rights, and civil 
        liberties.

    (e) Deadline for Implementation.--Not later than 2 years after the 
date of enactment of this Act, the Secretary of Homeland Security shall 
ensure the data framework required under this section has the ability to 
include appropriate information in existence within the Department of 
Homeland Security to meet the critical mission operations of the 
Department of Homeland Security.
    (f) Notice to Congress.--
            (1) Status updates.--The Secretary of Homeland Security 
        shall submit to the appropriate congressional committees regular 
        updates on the status of the data framework until the framework 
        is fully operational.
            (2) <<NOTE: Deadline.>>  Operational notification.--Not 
        later than 60 days after the date on which the data framework 
        required under this section is fully operational, the Secretary 
        of Homeland Security shall provide notice to the appropriate 
        congressional committees that the data framework is fully 
        operational.
            (3) <<NOTE: Briefing.>>  Value added.--The Secretary of 
        Homeland Security shall annually brief Congress on component use 
        of the data framework required under this section to support 
        operations that disrupt terrorist activities and incidents in 
        the homeland.

    (g) Definitions.--In this section:

[[Page 132 STAT. 4486]]

            (1) Appropriate congressional committee; homeland.--The 
        terms ``appropriate congressional committee'' and ``homeland'' 
        have the meaning given those terms in section 2 of the Homeland 
        Security Act of 2002 (6 U.S.C. 101).
            (2) Homeland security information.--The term ``homeland 
        security information'' has the meaning given such term in 
        section 892 of the Homeland Security Act of 2002 (6 U.S.C. 482).
            (3) National intelligence.--The term ``national 
        intelligence'' has the meaning given such term in section 3(5) 
        of the National Security Act of 1947 (50 U.S.C. 3003(5)).
            (4) Terrorism information.--The term ``terrorism 
        information'' has the meaning given such term in section 1016 of 
        the Intelligence Reform and Terrorism Prevention Act of 2004 (6 
        U.S.C. 485).

    Approved December 19, 2018.

LEGISLATIVE HISTORY--H.R. 2454 (S. 2397):
---------------------------------------------------------------------------

SENATE REPORTS: No. 115-380 (Comm. on Homeland Security and Governmental 
Affairs) accompanying S. 2397.
CONGRESSIONAL RECORD:
                                                        Vol. 163 (2017):
                                    Sept. 12, considered and passed 
                                        House.
                                                        Vol. 164 (2018):
                                    Dec. 6, considered and passed 
                                        Senate, amended.
                                    Dec. 12, House concurred in Senate 
                                        amendment.

                                  <all>
```