117TH CONGRESS 

1ST SESSION S. 2629 

AN ACT 

To establish cybercrime reporting mechanisms, and for other 

purposes. 

1 Be it enacted by the Senate and House of Representa2 tives of the United States of America in Congress assembled, 
2 

†S 2629 ES

1 SECTION 1. SHORT TITLE. 

2 This Act may be cited as the ‘‘Better Cybercrime 

3 Metrics Act’’. 

4 SEC. 2. FINDINGS. 

5 Congress finds the following: 

6 (1) Public polling indicates that cybercrime 

7 could be the most common crime in the United 

8 States. 

9 (2) The United States lacks comprehensive 

10 cybercrime data and monitoring, leaving the country 

11 less prepared to combat cybercrime that threatens 

12 national and economic security. 

13 (3) In addition to existing cybercrime vulnera14 bilities, the people of the United States and the 

15 United States have faced a heightened risk of 

16 cybercrime during the COVID–19 pandemic. 

17 (4) Subsection (c) of the Uniform Federal 

18 Crime Reporting Act of 1988 (34 U.S.C. 41303(c)) 

19 requires the Attorney General to ‘‘acquire, collect, 

20 classify, and preserve national data on Federal 

21 criminal offenses as part of the Uniform Crime Re22 ports’’ and requires all Federal departments and 

23 agencies that investigate criminal activity to ‘‘report 

24 details about crime within their respective jurisdic25 tion to the Attorney General in a uniform matter 

26 and on a form prescribed by the Attorney General’’. 
3 

†S 2629 ES

1 SEC. 3. CYBERCRIME TAXONOMY. 

2 (a) IN GENERAL.—Not later than 90 days after the 

3 date of enactment of this Act, the Attorney General shall 

4 seek to enter into an agreement with the National Acad5 emy of Sciences to develop a taxonomy for the purpose 

6 of categorizing different types of cybercrime and cyber7 enabled crime faced by individuals and businesses. 

8 (b) DEVELOPMENT.—In developing the taxonomy 

9 under subsection (a), the National Academy of Sciences 

10 shall— 

11 (1) ensure the taxonomy is useful for the Fed12 eral Bureau of Investigation to classify cybercrime in 

13 the National Incident-Based Reporting System, or 

14 any successor system; 

15 (2) consult relevant stakeholders, including— 

16 (A) the Cybersecurity and Infrastructure 

17 Security Agency of the Department of Home18 land Security; 

19 (B) Federal, State, and local law enforce20 ment agencies; 

21 (C) criminologists and academics; 

22 (D) cybercrime experts; and 

23 (E) business leaders; and 

24 (3) take into consideration relevant taxonomies 

25 developed by non-governmental organizations, inter26 national organizations, academies, or other entities. 
4 

†S 2629 ES

1 (c) REPORT.—Not later than 1 year after the date 

2 on which the Attorney General enters into an agreement 

3 under subsection (a), the National Academy of Sciences 

4 shall submit to the appropriate committees of Congress 

5 a report detailing and summarizing— 

6 (1) the taxonomy developed under subsection 

7 (a); and 

8 (2) any findings from the process of developing 

9 the taxonomy under subsection (a). 

10 (d) AUTHORIZATION OF APPROPRIATIONS.—There 

11 are authorized to be appropriated to carry out this section 

12 $1,000,000. 

13 SEC. 4. CYBERCRIME REPORTING. 

14 (a) IN GENERAL.—Not later than 2 years after the 

15 date of enactment of this Act, the Attorney General shall 

16 establish a category in the National Incident-Based Re17 porting System, or any successor system, for the collection 

18 of cybercrime and cyber-enabled crime reports from Fed19 eral, State, and local officials. 

20 (b) RECOMMENDATIONS.—In establishing the cat21 egory required under subsection (a), the Attorney General 

22 shall, as appropriate, incorporate recommendations from 

23 the taxonomy developed under section 3(a). 
5 

†S 2629 ES

1 SEC. 5. NATIONAL CRIME VICTIMIZATION SURVEY. 

2 (a) IN GENERAL.—Not later than 540 days after the 

3 date of enactment of this Act, the Director of the Bureau 

4 of Justice Statistics, in coordination with the Director of 

5 the Bureau of the Census, shall include questions relating 

6 to cybercrime victimization in the National Crime Victim7 ization Survey. 

8 (b) AUTHORIZATION OF APPROPRIATIONS.—There 

9 are authorized to be appropriated to carry out this section 

10 $2,000,000. 

11 SEC. 6. GAO STUDY ON CYBERCRIME METRICS. 

12 Not later than 180 days after the date of enactment 

13 of this Act, the Comptroller General of the United States 

14 shall submit to Congress a report that assesses— 

15 (1) the effectiveness of reporting mechanisms 

16 for cybercrime and cyber-enabled crime in the 

17 United States; and 

18 (2) disparities in reporting data between— 

19 (A) data relating to cybercrime and cyber20 enabled crime; and 

21 (B) other types of crime data. 

Passed the Senate December 7, 2021. 

Attest: 

Secretary. 
117TH CONGRESS 

1ST SESSION S. 2629 

AN ACT 

To establish cybercrime reporting mechanisms, and 

for other purposes.