Cyber VICTIM Act

To provide for an interagency cyber victim coordinator to respond to data breaches and other cyber attacks on Federal employees. 1. Short title This Act may be cited as the Cyber Valuing Individual Cybersecurity Through Interagency Measures Act Cyber VICTIM Act 2. Interagency cyber victim response (a) Interagency cyber victim coordinator (1) In general Not later than 60 days after the date of the enactment of this Act, the President shall designate a Federal official to coordinate efforts to respond to data breaches and other cyber attacks on Federal employees. Such official shall have the title of interagency cyber victim response coordinator. (2) Duties The coordinator designated under paragraph (1) shall have the following duties: (A) Coordinate activities of the Federal Government relating to incidents of data breaches in which the data of Federal employees, including Social Security numbers, personal financial information, addresses, and other private identifying information, has been compromised, to— (i) ensure victims receive appropriate response and assistance from the Federal Government; and (ii) ensure synchronization of intelligence and responses among Federal law enforcement agencies to incidents of cyber attacks against Federal employees. (B) Chair an interagency working group consisting of appropriate personnel of the Federal Government with purview over response to cyber attacks against Federal employees. (C) Ensure sufficient representation of each Federal agency and department at any interagency working group established under subparagraph (B). (D) Develop processes and procedures to keep victims informed of efforts to— (i) mitigate damage from data breaches; and (ii) prosecute perpetrators. (b) Annual report (1) In general On an annual basis, the Coordinator shall submit to the appropriate congressional committees a report that includes a summary of each data breach described in subsection (a)(1) that occurred during the year for which the report is submitted. (2) Form of report Each report under paragraph (1) may be submitted in classified or unclassified form. (c) Comprehensive plan To address cyber attacks Not later than 180 days after the date of the enactment of this Act, the President shall develop a comprehensive plan for the United States response to data breaches of personal information of Federal employees. (d) Definitions In this section, the following definitions apply: (1) Appropriate congressional committees The term appropriate congressional committees (A) the Committee on Armed Services, the Committee on the Judiciary, the Permanent Select Committee on Intelligence, and the Committee on Homeland Security of the House of Representatives; and (B) the Committee on Armed Services, the Committee on the Judiciary, the Select Committee on Intelligence, and the Committee on Homeland Security and Governmental Affairs of the Senate. (2) Data breach The term data breach (A) the 2015 breaches of the Office of Personnel Management databases relating to background security checks and Federal employee background information; and (B) the November 2014 breach of the United States Postal Service employee database system.

Summary: Cyber Valuing Individual Cybersecurity Through Interagency Measures Act or the Cyber VICTIM Act This bill requires the President to designate a federal official as the interagency cyber victim response coordinator. The interagency cyber victim coordinator must respond to data breaches and other cyber attacks on federal employees. Additionally, the coordinator must: (1) coordinate activities of the federal government relating to incidents of data breaches; (2) chair an interagency working group, consisting of appropriate personnel of the federal government and responding to cyber attacks against federal employees; (3) ensure sufficient representation of each federal agency at the interagency working group; and (4) develop processes and procedures to inform victims of efforts to mitigate damage from data breaches and prosecute perpetrators. The President must develop a comprehensive plan for the U.S. response to data breaches of personal information of federal employees.