I 
116TH CONGRESS 
1ST SESSION H. R. 3850 
To amend the Federal Election Campaign Act of 1971 to exempt assistance 
provided by political parties to the campaigns of candidates who are 
affiliated with such parties for secure information communications tech-
nology or cybersecurity products or services from the limitations on 
the amount of coordinated expenditures parties may make in connection 
with the campaigns of such candidates, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 18, 2019 
Mr. SARBANES introduced the following bill; which was referred to the 
Committee on House Administration 
A BILL 
To amend the Federal Election Campaign Act of 1971 to 
exempt assistance provided by political parties to the 
campaigns of candidates who are affiliated with such 
parties for secure information communications technology 
or cybersecurity products or services from the limitations 
on the amount of coordinated expenditures parties may 
make in connection with the campaigns of such can-
didates, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
05:00 Jul 30, 2019
Jkt 089200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H3850.IH
H3850
dlhill on DSKBBY8HB2PROD with BILLS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Creating Candidate 
Capacity to Protect Act’’. 
SEC. 2. EXEMPTION OF CYBERSECURITY ASSISTANCE 
FROM LIMITATIONS ON AMOUNT OF COORDI-
NATED POLITICAL PARTY EXPENDITURES. 
(a) EXEMPTION.—Section 315(d)(5) of the Federal 
Election Campaign Act of 1971 (52 U.S.C. 30116(d)(5)) 
is amended— 
(1) by striking ‘‘(5)’’ and inserting ‘‘(5)(A)’’; 
(2) by striking the period at the end and insert-
ing ‘‘, or to expenditures (whether provided as funds 
or provided as in-kind services) for secure informa-
tion communications technology or for a cybersecu-
rity product or service.’’; and 
(3) by adding at the end the following new sub-
paragraph: 
‘‘(B) In subparagraph (A)— 
‘‘(i) the term ‘secure information communica-
tions technology’ means a commercial-off-the-shelf 
computing device which has been configured to re-
strict unauthorized access and uses publicly available 
baseline configurations; and 
‘‘(ii) the term ‘cybersecurity product or service’ 
means a product or service which helps an organiza-
tion to achieve the set of standards, guidelines, best 
VerDate Sep 11 2014 
05:00 Jul 30, 2019
Jkt 089200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3850.IH
H3850
dlhill on DSKBBY8HB2PROD with BILLS
practices, methodologies, procedures, and processes 
to cost-effectively identify, detect, protect, respond 
to, and recover from cyber risks as developed by the 
National Institute of Standards and Technology pur-
suant to subsections (c)(15) and (e) of section 2 of 
the National Institute of Standards and Technology 
Act (15 U.S.C. 272).’’. 
(b) EFFECTIVE DATE.—The amendments made by 
subsection (a) shall apply with respect to expenditures 
made on or after the date of the enactment of this Act. 
Æ 
VerDate Sep 11 2014 
05:00 Jul 30, 2019
Jkt 089200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6301
E:\BILLS\H3850.IH
H3850
dlhill on DSKBBY8HB2PROD with BILLS