IB 
Union Calendar No. 224 
116TH CONGRESS 
1ST SESSION H. R. 3699 
[Report No. 116–279] 
To codify the Transportation Security Administration’s responsibility relating 
to securing pipelines against cybersecurity threats, acts of terrorism, 
and other nefarious acts that jeopardize the physical security or cyberse-
curity of pipelines, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 11, 2019 
Mr. CLEAVER introduced the following bill; which was referred to the 
Committee on Homeland Security 
NOVEMBER 12, 2019 
Additional sponsor: Mr. TAYLOR 
NOVEMBER 12, 2019 
Committed to the Committee of the Whole House on the State of the Union 
and ordered to be printed 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6652
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
A BILL 
To codify the Transportation Security Administration’s re-
sponsibility relating to securing pipelines against cyberse-
curity threats, acts of terrorism, and other nefarious 
acts that jeopardize the physical security or cybersecurity 
of pipelines, and for other purposes. 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6652
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Pipeline Security Act’’. 
SEC. 2. PIPELINE SECURITY RESPONSIBILITIES. 
Subsection (f) of section 114 of title 49, United 
States Code, is amended— 
(1) in paragraph (15), by striking ‘‘and’’ after 
the semicolon at the end; 
(2) by redesignating paragraph (16) as para-
graph (17); and 
(3) by inserting after paragraph (15) the fol-
lowing new paragraph: 
‘‘(16) maintain responsibility, in coordination 
with the Director of the Cybersecurity and Infra-
structure Security Agency, as appropriate, relating 
to securing pipeline transportation and pipeline fa-
cilities (as such terms are defined in section 60101 
of this title) against cybersecurity threats (as such 
term is defined in section 102 of the Cybersecurity 
Information Sharing Act of 2015 (Public Law 114– 
113; 6 U.S.C. 1501)), an act of terrorism (as such 
term is defined in section 3077 of title 18), and 
other nefarious acts that jeopardize the physical se-
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
curity or cybersecurity of such transportation or fa-
cilities; and’’. 
SEC. 3. PIPELINE SECURITY SECTION. 
(a) IN GENERAL.—Title XII of the Implementing 
Recommendations of the 9/11 Commission Act of 2007 
(Public Law 110–53) is amended by adding at the end 
the following new section: 
‘‘SEC. 1209. PIPELINE SECURITY SECTION. 
‘‘(a) ESTABLISHMENT.—There is within the Trans-
portation Security Administration a pipeline security sec-
tion to carry out pipeline security programs in furtherance 
of section 114(f)(16) of title 49, United States Code. 
‘‘(b) MISSION.—The mission of the section referred 
to in subsection (a) is to oversee, in coordination with the 
the Cybersecurity and Infrastructure Security Agency of 
the Department of Homeland Security, the security of 
pipeline transportation and pipeline facilities (as such 
terms are defined in section 60101 of title 49, United 
States Code) against cybersecurity threats (as such term 
is defined in section 102 of the Cybersecurity Information 
Sharing Act of 2015 (Public Law 114–113; 6 U.S.C. 
1501)), an act of terrorism (as such term is defined in 
section 3077 of title 18, United States Code), and other 
nefarious acts that jeopardize the physical security or cy-
bersecurity of such transportation or facilities. 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
‘‘(c) LEADERSHIP; STAFFING.—The Administrator of 
the Transportation Security Administration shall appoint 
as the head of the section an individual with knowledge 
of the pipeline industry and security best practices, as de-
termined appropriate by the Administrator. The section 
shall be staffed by a workforce that includes personnel 
with cybersecurity expertise. 
‘‘(d) RESPONSIBILITIES.—The section shall be re-
sponsible for carrying out the duties of the section as di-
rected by the Administrator of the Transportation Secu-
rity Administration, acting through the head appointed 
pursuant to subsection (c). Such duties shall include the 
following: 
‘‘(1) Developing, in consultation with relevant 
Federal, State, local, Tribal, territorial entities and 
public and private sector stakeholders, guidelines for 
improving the security of pipeline transportation and 
pipeline facilities against cybersecurity threats, an 
act of terrorism, and other nefarious acts that jeop-
ardize the physical security or cybersecurity of such 
transportation or facilities, consistent with the Na-
tional Institute of Standards and Technology 
Framework for Improvement of Critical Infrastruc-
ture Cybersecurity and any update to such guide-
lines pursuant to section 2(c)(15) of the National 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
Institute for Standards and Technology Act (15 
U.S.C. 272(c)(15)). 
‘‘(2) Updating such guidelines as necessary 
based on intelligence and risk assessments, but not 
less frequently than every three years. 
‘‘(3) Sharing of such guidelines and, as appro-
priate, intelligence and information regarding such 
security threats to pipeline transportation and pipe-
line facilities, as appropriate, with relevant Federal, 
State, local, Tribal, and territorial entities and pub-
lic and private sector stakeholders. 
‘‘(4) Conducting voluntary security assessments 
based on the guidelines developed pursuant to para-
graph (1) to provide recommendations for the im-
provement of the security of pipeline transportation 
and pipeline facilities against cybersecurity threats, 
an act of terrorism, and other nefarious acts that 
jeopardize the physical security or cybersecurity of 
such transportation or facilities, including the secu-
rity policies, plans, practices, and training programs 
maintained by owners and operators of pipeline fa-
cilities. 
‘‘(5) Carrying out a program through which the 
Administrator identifies and ranks the relative risk 
of pipelines and inspects pipeline facilities des-
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
ignated by owners and operators of such facilities as 
critical based on the guidelines developed pursuant 
to paragraph (1). 
‘‘(6) Preparing notice and comment regulations 
for publication, if determined necessary by the Ad-
ministrator. 
‘‘(e) DETAILS.—In furtherance of the section’s mis-
sion, as set forth in subsection (b), the Administrator and 
the Director of the Cybersecurity and Infrastructure Secu-
rity Agency may detail personnel between their compo-
nents to leverage expertise. Personnel detailed from the 
Cybersecurity and Infrastructure Security Agency may be 
considered as fulfilling the cybersecurity expertise require-
ments in referred to in subsection (c).’’. 
(b) UPDATED GUIDELINES.—Not later than March 
31, 2021, the section shall publish updated guidelines pur-
suant to section 1209 of the Implementing Recommenda-
tions of the 9/11 Commission Act of 2007, as added by 
subsection (a). 
(c) CLERICAL AMENDMENT.—The table of contents 
for the Implementing Recommendations of the 9/11 Com-
mission Act of 2007 is amended by inserting after the item 
relating to section 1208 the following new item: 
‘‘Sec. 1209. Pipeline security section.’’. 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6211
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
SEC. 4. PERSONNEL STRATEGY. 
(a) IN GENERAL.—Not later than 180 days after the 
date of the enactment of this Act, the Administrator of 
the Transportation Security Administration, in coordina-
tion with the Director of the Cybersecurity and Infrastruc-
ture Security Agency of the Department of Homeland Se-
curity, shall develop a personnel strategy for enhancing 
operations within the pipeline security section of the 
Transportation Security Administration, as established 
pursuant to section 1209 of the Implementing Rec-
ommendations of the 9/11 Commission Act of 2007, as 
added by section 3. 
(b) CONTENTS.—The strategy required under sub-
section (a) shall take into consideration the most recently 
published versions of each of the following documents: 
(1) The Transportation Security Administration 
National Strategy for Transportation Security. 
(2) The Department of Homeland Security Cy-
bersecurity Strategy. 
(3) The Transportation Security Administration 
Cybersecurity Roadmap. 
(4) The Department of Homeland Security Bal-
anced Workforce Strategy. 
(5) The Department of Homeland Security 
Quadrennial Homeland Security Review. 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
(c) RESOURCES.—The strategy shall include an as-
sessment of resources determined necessary by the Admin-
istrator. 
(d) SUBMISSION TO CONGRESS.—Upon development 
of the strategy, the Administrator of the Transportation 
Security Administration shall provide to the Committee on 
Homeland Security of the House of Representatives and 
the Committee on Commerce, Science, and Transportation 
of the Senate a copy of such strategy. 
SEC. 5. OVERSIGHT. 
(a) REPORT TO CONGRESS.—The Administrator of 
the Transportation Security Administration shall report to 
the Committee on Homeland Security of the House of 
Representatives and the Committee on Commerce, 
Science, and Transportation of the Senate not less than 
annually on activities of the pipeline security section of 
the Administration, as established pursuant to section 
1209 of the Implementing Recommendations of the 9/11 
Commission Act of 2007, as added by section 3, including 
information with respect to guidelines, security assess-
ments, and inspections. Each such report shall include a 
determination by the Administrator regarding whether 
there is a need for new regulations or non-regulatory ini-
tiatives and the basis for such determination. 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
(b) GAO REVIEW.—Not later than two years after 
the date of the enactment of this Act, the Comptroller 
General of the United States shall conduct a review of the 
implementation of this Act and the amendments made by 
this Act. 
SEC. 6. STAKEHOLDER ENGAGEMENT. 
Not later than one year after the date of the enact-
ment of this Act, the Administrator of the Transportation 
Security Administration shall convene not less than two 
industry days to engage with relevant pipeline transpor-
tation and pipeline facilities stakeholders on matters re-
lated to the security of pipeline transportation and pipeline 
facilities (as such terms are defined in section 60101 of 
title 49, United States Code). 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS
Union Calendar No. 224 
116TH CONGRESS 
1ST SESSION 
H. R. 3699 
[Report No. 116–279] 
A BILL 
To codify the Transportation Security Administra-
tion’s responsibility relating to securing pipelines 
against cybersecurity threats, acts of terrorism, 
and other nefarious acts that jeopardize the 
physical security or cybersecurity of pipelines, 
and for other purposes. 
NOVEMBER 12, 2019 
Committed to the Committee of the Whole House on the 
State of the Union and ordered to be printed 
VerDate Sep 11 2014 
00:38 Nov 13, 2019
Jkt 099200
PO 00000
Frm 00012
Fmt 6651
Sfmt 6651
E:\BILLS\H3699.RH
H3699
pamtmann on DSKBC07HB2PROD with BILLS