(G) Countries should protect the exercise of 
human rights and fundamental freedoms on the 
Internet and commit to the principle that the 
human rights that people have offline should also 
be protected online. 
(6) Advancing, encouraging, and supporting the 
development and adoption of internationally recog-
nized technical standards and best practices. 
SEC. 5. DEPARTMENT OF STATE RESPONSIBILITIES. 
(a) OFFICE OF CYBERSPACE AND THE DIGITAL ECON-
OMY.—Section 1 of the State Department Basic Authorities 
Act of 1956 (22 U.S.C. 2651a) is amended— 
(1) by redesignating subsection (g) as subsection 
(h); and 
(2) by inserting after subsection (f) the following: 
‘‘(g) OFFICE OF CYBERSPACE AND THE DIGITAL ECON-
OMY.— 
‘‘(1) IN GENERAL.—There is established, within 
the Department of State, an Office of Cyberspace and 
the Digital Economy (referred to in this subsection as 
the ‘Office’). The head of the Office shall have the rank 
and status of ambassador and shall be appointed by 
the President, by and with the advice and consent of 
the Senate. 
‘‘(2) DUTIES.— 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00033
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(A) IN GENERAL.—The head of the Office 
shall perform such duties and exercise such pow-
ers as the Secretary of State shall prescribe, in-
cluding implementing the policy of the United 
States described in section 4 of the Cyber Diplo-
macy Act of 2018. 
‘‘(B) DUTIES
DESCRIBED.—The principal 
duties and responsibilities of the head of the Of-
fice shall be— 
‘‘(i) to serve as the principal cyber pol-
icy official within the senior management of 
the Department of State and as the advisor 
to the Secretary of State for cyber issues; 
‘‘(ii) to lead the Department of State’s 
diplomatic cyberspace efforts, including ef-
forts relating to international cybersecurity, 
Internet access, Internet freedom, digital 
economy, cybercrime, deterrence and inter-
national responses to cyber threats, and 
other issues that the Secretary assigns to the 
Office; 
‘‘(iii) to promote an open, interoper-
able, reliable, unfettered, and secure infor-
mation and communications technology in-
frastructure globally; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00034
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(iv) to represent the Secretary of 
State in interagency efforts to develop and 
advance the policy described in section 4 of 
the Cyber Diplomacy Act of 2018; 
‘‘(v) to coordinate cyberspace efforts 
and other relevant functions, including 
countering terrorists’ use of cyberspace, 
within the Department of State and with 
other components of the United States Gov-
ernment; 
‘‘(vi) to act as a liaison to public and 
private sector entities on relevant cyber-
space issues; 
‘‘(vii) to lead United States Govern-
ment efforts to establish a global deterrence 
framework; 
‘‘(viii) to develop and execute adver-
sary-specific strategies to influence adver-
sary decisionmaking through the imposition 
of costs and deterrence strategies; 
‘‘(ix) to advise the Secretary and co-
ordinate with foreign governments on exter-
nal 
responses 
to 
national-security-level 
cyber incidents, including coordination on 
diplomatic response efforts to support allies 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00035
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
threatened by malicious cyber activity, in 
conjunction with members of the North At-
lantic Treaty Organization and other like- 
minded countries; 
‘‘(x) to promote the adoption of na-
tional processes and programs that enable 
threat detection, prevention, and response to 
malicious cyber activity emanating from 
the territory of a foreign country, including 
as such activity relates to the United States’ 
European allies, as appropriate; 
‘‘(xi) to promote the building of foreign 
capacity to protect the global network with 
the goal of enabling like-minded participa-
tion in deterrence frameworks; 
‘‘(xii) to promote the maintenance of 
an open and interoperable Internet gov-
erned by the multi-stakeholder model, in-
stead of by centralized government control; 
‘‘(xiii) to promote an international 
regulatory environment for technology in-
vestments and the Internet that benefits 
United States economic and national secu-
rity interests; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00036
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(xiv) to promote cross-border flow of 
data and combat international initiatives 
seeking to impose unreasonable require-
ments on United States businesses; 
‘‘(xv) to promote international policies 
to protect the integrity of United States and 
international 
telecommunications 
infra-
structure from foreign-based, cyber-enabled 
threats; 
‘‘(xvi) to serve as the interagency coor-
dinator for the United States Government 
on engagement with foreign governments on 
cyberspace and digital economy issues as 
described in the Cyber Diplomacy Act of 
2018; 
‘‘(xvii) to promote international poli-
cies to secure radio frequency spectrum for 
United States businesses and national secu-
rity needs; 
‘‘(xviii) to promote and protect the ex-
ercise of human rights, including freedom of 
speech and religion, through the Internet; 
‘‘(xix) to build capacity of United 
States diplomatic officials to engage on 
cyber issues; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00037
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(xx) to encourage the development and 
adoption by foreign countries of inter-
nationally recognized standards, policies, 
and best practices; and 
‘‘(xxi) to promote and advance inter-
national policies that protect individuals’ 
private data. 
‘‘(3) QUALIFICATIONS.—The head of the Office 
should be an individual of demonstrated competency 
in the fields of— 
‘‘(A) cybersecurity and other relevant cyber 
issues; and 
‘‘(B) international diplomacy. 
‘‘(4) ORGANIZATIONAL PLACEMENT.—During the 
4-year period beginning on the date of the enactment 
of the Cyber Diplomacy Act of 2018, the head of the 
Office shall report to the Under Secretary for Polit-
ical Affairs or to an official holding a higher position 
than the Under Secretary for Political Affairs in the 
Department of State. After the conclusion of such pe-
riod, the head of the Office shall report to an appro-
priate Under Secretary or to an official holding a 
higher position than Under Secretary. 
‘‘(5) RULE OF CONSTRUCTION.—Nothing in this 
subsection may be construed to preclude— 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00038
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(A) the Office from being elevated to a Bu-
reau within the Department of State; or 
‘‘(B) the head of the Office from being ele-
vated to an Assistant Secretary, if such an As-
sistant Secretary position does not increase the 
number of Assistant Secretary positions at the 
Department above the number authorized under 
subsection (c)(1).’’. 
(b) SENSE OF CONGRESS.—It is the sense of Congress 
that the Office of Cyberspace and the Digital Economy es-
tablished under section 1(g) of the State Department Basic 
Authorities Act of 1956, as added by subsection (a), should 
be a Bureau of the Department of State headed by an As-
sistant Secretary, subject to the rule of construction speci-
fied in paragraph (5)(B) of such section 1(g). 
(c) UNITED NATIONS.—The Permanent Representative 
of the United States to the United Nations should use the 
voice, vote, and influence of the United States to oppose any 
measure that is inconsistent with the policy described in 
section 4. 
SEC. 6. INTERNATIONAL CYBERSPACE EXECUTIVE AR-
RANGEMENTS. 
(a) IN GENERAL.—The President is encouraged to 
enter into executive arrangements with foreign governments 
that support the policy described in section 4. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00039
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(b) TRANSMISSION TO CONGRESS.—Section 112b of 
title 1, United States Code, is amended— 
(1) in subsection (a) by striking ‘‘International 
Relations’’ and inserting ‘‘Foreign Affairs’’; 
(2) in subsection (e)(2)(B), by adding at the end 
the following: 
‘‘(iii) A bilateral or multilateral cyberspace 
agreement.’’; 
(3) by redesignating subsection (f) as subsection 
(g); and 
(4) by inserting after subsection (e) the following: 
‘‘(f) With respect to any bilateral or multilateral cyber-
space agreement under subsection (e)(2)(B)(iii) and the in-
formation required to be transmitted to Congress under sub-
section (a), or with respect to any arrangement that seeks 
to secure commitments on responsible country behavior in 
cyberspace consistent with section 4(b)(5) of the Cyber Di-
plomacy Act of 2018, the Secretary of State shall provide 
an explanation of such arrangement, including— 
‘‘(1) the purpose of such arrangement; 
‘‘(2) how such arrangement is consistent with the 
policy described in section 4 of such Act; and 
‘‘(3) how such arrangement will be imple-
mented.’’. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00040
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(c) STATUS REPORT.—During the 5-year period im-
mediately following the transmittal to Congress of an agree-
ment described in section 112b(e)(2)(B)(iii) of title 1, 
United States Code, as added by subsection (b)(2), or until 
such agreement has been discontinued, if discontinued with-
in 5 years, the President shall— 
(1) notify the appropriate congressional commit-
tees if another country fails to meet the commitments 
contained in such agreement; and 
(2) describe the steps that the United States has 
taken or plans to take to ensure that all such commit-
ments are fulfilled. 
(d) EXISTING EXECUTIVE ARRANGEMENTS.—Not later 
than 180 days after the date of the enactment of this Act, 
the Secretary of State shall brief the appropriate congres-
sional committees regarding any executive bilateral or mul-
tilateral cyberspace arrangement in effect before the date 
of enactment of this Act, including— 
(1) the arrangement announced between the 
United States and Japan on April 25, 2014; 
(2) the arrangement announced between the 
United States and the United Kingdom on January 
16, 2015; 
(3) the arrangement announced between the 
United States and China on September 25, 2015; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00041
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(4) the arrangement announced between the 
United States and Korea on October 16, 2015; 
(5) the arrangement announced between the 
United States and Australia on January 19, 2016; 
(6) the arrangement announced between the 
United States and India on June 7, 2016; 
(7) the arrangement announced between the 
United States and Argentina on April 27, 2017; 
(8) the arrangement announced between the 
United States and Kenya on June 22, 2017; 
(9) the arrangement announced between the 
United States and Israel on June 26, 2017; 
(10) the arrangement announced between the 
United States and France on February 9, 2018; 
(11) the arrangement announced between the 
United States and Brazil on May 14, 2018; and 
(12) any other similar bilateral or multilateral 
arrangement announced before such date of enact-
ment. 
SEC. 7. INTERNATIONAL STRATEGY FOR CYBERSPACE. 
(a) STRATEGY REQUIRED.—Not later than 1 year 
after the date of the enactment of this Act, the President, 
acting through the Secretary of State, and in coordination 
with the heads of other relevant Federal departments and 
agencies, shall develop a strategy relating to United States 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00042
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
engagement with foreign governments on international 
norms with respect to responsible state behavior in cyber-
space. 
(b) ELEMENTS.—The strategy required under sub-
section (a) shall include the following: 
(1) A review of actions and activities undertaken 
to support the policy described in section 4. 
(2) A plan of action to guide the diplomacy of 
the Department of State with regard to foreign coun-
tries, including— 
(A) conducting bilateral and multilateral 
activities to develop norms of responsible country 
behavior in cyberspace consistent with the objec-
tives under section 4(b)(5); and 
(B) reviewing the status of existing efforts 
in relevant multilateral fora, as appropriate, to 
obtain commitments on international norms in 
cyberspace. 
(3) A review of alternative concepts with regard 
to international norms in cyberspace offered by for-
eign countries. 
(4) A detailed description of new and evolving 
threats in cyberspace from foreign adversaries, state- 
sponsored actors, and private actors to— 
(A) United States national security; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00043
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(B) Federal and private sector cyberspace 
infrastructure of the United States; 
(C) intellectual property in the United 
States; and 
(D) the privacy of citizens of the United 
States. 
(5) A review of policy tools available to the 
President to deter and de-escalate tensions with for-
eign countries, state-sponsored actors, and private ac-
tors regarding threats in cyberspace, the degree to 
which such tools have been used, and whether such 
tools have been effective deterrents. 
(6) A review of resources required to conduct ac-
tivities to build responsible norms of international 
cyber behavior. 
(7) A plan of action, developed in consultation 
with relevant Federal departments and agencies as 
the President may direct, to guide the diplomacy of 
the Department of State with regard to inclusion of 
cyber issues in mutual defense agreements. 
(c) FORM OF STRATEGY.— 
(1) PUBLIC
AVAILABILITY.—The strategy re-
quired under subsection (a) shall be available to the 
public in unclassified form, including through publi-
cation in the Federal Register. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00044
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(2) CLASSIFIED ANNEX.—The strategy required 
under subsection (a) may include a classified annex, 
consistent with United States national security inter-
ests, if the Secretary of State determines that such 
annex is appropriate. 
(d) BRIEFING.—Not later than 30 days after the com-
pletion of the strategy required under subsection (a), the 
Secretary of State shall brief the appropriate congressional 
committees on the strategy, including any material con-
tained in a classified annex. 
(e) UPDATES.—The strategy required under subsection 
(a) shall be updated— 
(1) not later than 90 days after any material 
change to United States policy described in such 
strategy; and 
(2) not later than 1 year after the inauguration 
of each new President. 
(f) PREEXISTING REQUIREMENT.—The Recommenda-
tions to the President on Protecting American Cyber Inter-
ests through International Engagement, prepared by the Of-
fice of the Coordinator for Cyber Issues on May 31, 2018, 
pursuant to section 3(c) of Executive Order 13800 (82 Fed. 
Reg. 22391), shall be deemed to satisfy the requirement 
under subsection (a). 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00045
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
SEC. 8. ANNUAL COUNTRY REPORTS ON HUMAN RIGHTS 
PRACTICES. 
Section 116 of the Foreign Assistance Act of 1961 (22 
U.S.C. 2151n) is amended by adding at the end the fol-
lowing: 
‘‘(h)(1) The report required under subsection (d) shall 
include an assessment of freedom of expression with respect 
to electronic information in each foreign country that in-
cludes the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in the country inappropriately 
attempt to filter, censor, or otherwise block or remove 
nonviolent expression of political or religious opinion 
or belief through the Internet, including electronic 
mail, and a description of the means by which such 
authorities attempt to inappropriately block or re-
move such expression. 
‘‘(B) An assessment of the extent to which gov-
ernment authorities in the country have persecuted or 
otherwise punished, arbitrarily and without due proc-
ess, an individual or group for the nonviolent expres-
sion of political, religious, or ideological opinion or 
belief through the Internet, including electronic mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in the country have sought, inap-
propriately and with malicious intent, to collect, re-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00046
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
quest, obtain, or disclose without due process person-
ally identifiable information of a person in connec-
tion with that person’s nonviolent expression of polit-
ical, religious, or ideological opinion or belief, includ-
ing expression that would be protected by the Inter-
national Covenant on Civil and Political Rights, 
adopted at New York December 16, 1966, and entered 
into force March 23, 1976, as interpreted by the 
United States. 
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without due process and in contravention 
to United States policy with respect to the principles 
of privacy, human rights, democracy, and rule of law. 
‘‘(2) In compiling data and making assessments under 
paragraph (1), United States diplomatic personnel should 
consult with relevant entities, including human rights orga-
nizations, the private sector, the governments of like-minded 
countries, technology and Internet companies, and other ap-
propriate nongovernmental organizations or entities. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has the 
meaning given the term in section 2510 of title 18, 
United States Code; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00047
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(B) the term ‘Internet’ has the meaning given 
the term in section 231(e)(3) of the Communications 
Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and 
‘‘(D) the term ‘wire communication’ has the 
meaning given the term in section 2510 of title 18, 
United States Code.’’. 
SEC. 9. GAO REPORT ON CYBER THREATS AND DATA MIS-
USE. 
Not later than 1 year after the date of the enactment 
of this Act, the Comptroller General of the United States 
shall submit a report and provide a briefing to the appro-
priate congressional committees that includes— 
(1) a description of the primary threats to the 
personal information of United States citizens from 
international actors within the cyberspace domain; 
(2) an assessment of the extent to which United 
States diplomatic processes and other efforts with for-
eign countries, including through multilateral fora, 
bilateral engagements, and negotiated cyberspace 
agreements, strengthen the protections of United 
States citizens’ personal information; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00048
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(3) an assessment of the Department of State’s 
report in response to Executive Order 13800 (82 Fed. 
Reg. 22391), which documents an engagement strat-
egy for international cooperation in cybersecurity and 
the extent to which this strategy addresses protections 
of United States citizens’ personal information; 
(4) recommendations for United States policy-
makers on methods to properly address and strength-
en the protections of United States citizens’ personal 
information from misuse by international actors; and 
(5) any other matters deemed relevant by the 
Comptroller General. 
SEC. 10. SENSE OF CONGRESS ON CYBERSECURITY SANC-
TIONS AGAINST NORTH KOREA AND CYBER-
SECURITY LEGISLATION IN VIETNAM. 
It is the sense of Congress that— 
(1) the President should designate all entities 
that knowingly engage in significant activities under-
mining cybersecurity through the use of computer net-
works or systems against foreign persons, govern-
ments, or other entities on behalf of the Government 
of North Korea, consistent with section 209(b) of the 
North Korea Sanctions and Policy Enhancement Act 
of 2016 (22 U.S.C. 9229(b)); 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00049
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS