II 

115TH CONGRESS 

2D SESSION S. 2397 

To direct the Secretary of Homeland Security to establish a data framework 

to provide access for appropriate personnel to law enforcement and other 

information of the Department, and for other purposes. 

IN THE SENATE OF THE UNITED STATES 

FEBRUARY 7, 2018 

Ms. HASSAN introduced the following bill; which was read twice and referred 

to the Committee on Homeland Security and Governmental Affairs 

A BILL 

To direct the Secretary of Homeland Security to establish 

a data framework to provide access for appropriate personnel to law enforcement and other information of the 

Department, and for other purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the ‘‘Department of Home5 land Security Data Framework Act of 2018’’. 


dlhill on DSK3GLQ082PROD with BILLS
2 

•S 2397 IS

1 SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA 

2 FRAMEWORK. 

3 (a) IN GENERAL.—The Secretary of Homeland Secu4 rity shall develop a data framework to integrate existing 

5 Department of Homeland Security datasets and systems, 

6 as appropriate, for access by authorized personnel in a 

7 manner consistent with relevant legal authorities and pri8 vacy, civil rights, and civil liberties policies and protec9 tions. In developing such framework, the Secretary shall 

10 ensure, in accordance with all applicable statutory and 

11 regulatory requirements, the following information is in12 cluded: 

13 (1) All information acquired, held, or obtained 

14 by an office or component of the Department that 

15 falls within the scope of the information sharing en16 vironment, including homeland security information, 

17 terrorism information, weapons of mass destruction 

18 information, and national intelligence. 

19 (2) Any information or intelligence relevant to 

20 priority mission needs and capability requirements of 

21 the homeland security enterprise, as determined ap22 propriate by the Secretary. 

23 (b) DATA FRAMEWORK ACCESS.— 

24 (1) IN GENERAL.—The Secretary of Homeland 

25 Security shall ensure that the data framework re26 quired under this section is accessible to employees 


dlhill on DSK3GLQ082PROD with BILLS
3 

•S 2397 IS

1 of the Department of Homeland Security who the 

2 Secretary determines— 

3 (A) have an appropriate security clearance; 

4 (B) are assigned to perform a function 

5 that requires access to information in such 

6 framework; and 

7 (C) are trained in applicable standards for 

8 safeguarding and using such information. 

9 (2) GUIDANCE.—The Secretary of Homeland 

10 Security shall— 

11 (A) issue guidance for Department of 

12 Homeland Security employees authorized to ac13 cess and contribute to the data framework pur14 suant to paragraph (1); and 

15 (B) ensure that such guidance enforces a 

16 duty to share between offices and components 

17 of the Department when accessing or contrib18 uting to such framework for mission needs. 

19 (3) EFFICIENCY.—The Secretary of Homeland 

20 Security shall promulgate data standards and in21 struct components of the Department of Homeland 

22 Security to make available information through the 

23 data framework under this section in a machine24 readable format, to the greatest extent practicable. 


dlhill on DSK3GLQ082PROD with BILLS
4 

•S 2397 IS

1 (c) EXCLUSION OF INFORMATION.—The Secretary of 

2 Homeland Security may exclude from the data framework 

3 information that the Secretary determines access to or the 

4 confirmation of the existence of could— 

5 (1) jeopardize the protection of sources, meth6 ods, or activities; 

7 (2) compromise a criminal or national security 

8 investigation; 

9 (3) be inconsistent with the other Federal laws 

10 or regulations; or 

11 (4) be duplicative or not serve an operational 

12 purpose if included in such framework. 

13 (d) SAFEGUARDS.—The Secretary of Homeland Se14 curity shall incorporate into the data framework systems 

15 capabilities for auditing and ensuring the security of infor16 mation included in such framework. Such capabilities shall 

17 include the following: 

18 (1) Mechanisms for identifying insider threats. 

19 (2) Mechanisms for identifying security risks. 

20 (3) Safeguards for privacy, civil rights, and civil 

21 liberties. 

22 (e) DEADLINE FOR IMPLEMENTATION.—Not later 

23 than 2 years after the date of the enactment of this Act, 

24 the Secretary of Homeland Security shall ensure the data 


dlhill on DSK3GLQ082PROD with BILLS
5 

•S 2397 IS

1 framework required under this section has the ability to 

2 include the information described in subsection (a). 

3 (f) NOTICE TO CONGRESS.— 

4 (1) STATUS UPDATES.—The Secretary of 

5 Homeland Security shall submit to the appropriate 

6 congressional committees regular updates on the sta7 tus of the data framework required under this sec8 tion until the date on which such data framework is 

9 fully operational. 

10 (2) OPERATIONAL NOTIFICATION.—Not later 

11 than 60 days after the date on which the data 

12 framework required under this section is fully oper13 ational, the Secretary of Homeland Security shall 

14 provide notice to the appropriate congressional com15 mittees of such. 

16 (g) DEFINITIONS.—In this section: 

17 (1) APPROPRIATE CONGRESSIONAL COM18 MITTEE.—The term ‘‘appropriate congressional com19 mittee’’ has the meaning given the term in section 

20 2 of the Homeland Security Act of 2002 (6 U.S.C. 

21 101). 

22 (2) NATIONAL INTELLIGENCE.—The term ‘‘na23 tional intelligence’’ has the meaning given the term 


dlhill on DSK3GLQ082PROD with BILLS
6 

•S 2397 IS

1 in section 3(5) of the National Security Act of 1947 

2 (50 U.S.C. 3003(5)). 

Æ 


dlhill on DSK3GLQ082PROD with BILLS