II 
Calendar No. 495 
115TH CONGRESS 
2D SESSION 
H. R. 3776 
IN THE SENATE OF THE UNITED STATES 
JANUARY 18, 2018 
Received; read twice and referred to the Committee on Foreign Relations 
JUNE 28, 2018 
Reported by Mr. CORKER, with an amendment 
[Strike out all after the enacting clause and insert the part printed in italic] 
AN ACT 
To support United States international cyber diplomacy, and 
for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Cyber Diplomacy Act 
of 2017’’. 
SEC. 2. FINDINGS. 
Congress finds the following: 
(1) The stated goal of the United States Inter-
national Strategy for Cyberspace, launched on May 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
16, 2011, is to ‘‘work internationally to promote an 
open, interoperable, secure, and reliable information 
and communications infrastructure that supports 
international trade and commerce, strengthens inter-
national security, and fosters free expression and in-
novation * * * in which norms of responsible behav-
ior guide States’ actions, sustain partnerships, and 
support the rule of law in cyberspace.’’. 
(2) The Group of Governmental Experts (GGE) 
on Developments in the Field of Information and 
Telecommunications in the Context of International 
Security, established by the United Nations General 
Assembly, concluded in its June 24, 2013, report 
‘‘that State sovereignty and the international norms 
and principles that flow from it apply to States’ con-
duct of [information and communications technology 
or ICT] related activities and to their jurisdiction 
over ICT infrastructure with their territory.’’. 
(3) On January 13, 2015, China, Kazakhstan, 
Kyrgyzstan, Russia, Tajikistan, and Uzbekistan pro-
posed a troubling international code of conduct for 
information security which defines responsible State 
behavior in cyberspace to include ‘‘curbing the dis-
semination of information’’ and the ‘‘right to inde-
pendent control of information and communications 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
technology’’ when a country’s political security is 
threatened. 
(4) The July 22, 2015, GGE consensus report 
found that, ‘‘norms of responsible State behavior can 
reduce risks to international peace, security and sta-
bility.’’. 
(5) On September 25, 2015, the United States 
and China announced a commitment ‘‘that neither 
country’s government will conduct or knowingly sup-
port cyber-enabled theft of intellectual property, in-
cluding trade secrets or other confidential business 
information, with the intent of providing competitive 
advantages to companies or commercial sectors.’’. 
(6) At the Antalya Summit from November 15– 
16, 2015, the Group of 20 (G20) Leaders’ Commu-
nique affirmed the applicability of international law 
to State behavior in cyberspace, called on States to 
refrain from cyber-enabled theft of intellectual prop-
erty for commercial gain, and endorsed the view that 
all States should abide by norms of responsible be-
havior. 
(7) The March 2016 Department of State 
International Cyberspace Policy Strategy noted that, 
‘‘the Department of State anticipates a continued in-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
crease and expansion of our cyber-focused diplomatic 
efforts for the foreseeable future.’’. 
(8) On December 1, 2016, the Commission on 
Enhancing National Cybersecurity established within 
the Department of Commerce recommended ‘‘the 
President should appoint an Ambassador for Cyber-
security to lead U.S. engagement with the inter-
national
community
on
cybersecurity
strategies, 
standards, and practices.’’. 
(9) The 2017 Group of 7 (G7) Declaration on 
Responsible States Behavior in Cyberspace recog-
nized on April 11, 2017, ‘‘the urgent necessity of in-
creased international cooperation to promote secu-
rity and stability in cyberspace * * * consisting of 
the applicability of existing international law to 
State behavior in cyberspace, the promotion of vol-
untary, non-binding norms of responsible State be-
havior during peacetime’’ and reaffirmed ‘‘that the 
same rights that people have offline must also be 
protected online.’’. 
(10) In testimony before the Select Committee 
on Intelligence of the Senate on May 11, 2017, the 
Director of National Intelligence identified six cyber 
threat actors, including Russia for ‘‘efforts to influ-
ence the 2016 US election’’; China, for ‘‘actively tar-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
geting the US Government, its allies, and US com-
panies for cyber espionage’’; Iran for ‘‘leverage[ing] 
cyber espionage, propaganda, and attacks to support 
its security priorities, influence events and foreign 
perceptions, and counter threats’’; North Korea for 
‘‘previously conduct[ing] cyber-attacks against US 
commercial entities—specifically, Sony Pictures En-
tertainment in 2014’’; terrorists, who ‘‘use the Inter-
net to organize, recruit, spread propaganda, raise 
funds, collect intelligence, inspire action by followers, 
and coordinate operations’’; and criminals who ‘‘are 
also developing and using sophisticated cyber tools 
for a variety of purposes including theft, extortion, 
and facilitation of other criminal activities’’. 
(11) On May 11, 2017, President Trump issued 
Presidential
Executive
Order
No.
13800
on 
Strengthening the Cybersecurity of Federal Net-
works and Infrastructure which designated the Sec-
retary of State to lead an interagency effort to de-
velop strategic options for the President to deter ad-
versaries from cyber threats and an engagement 
strategy for international cooperation in cybersecu-
rity, noting that ‘‘the United States is especially de-
pendent on a globally secure and resilient internet 
and must work with allies and other partners’’ to-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
ward maintaining ‘‘the policy of the executive branch 
to promote an open, interoperable, reliable, and se-
cure internet that fosters efficiency, innovation, com-
munication, and economic prosperity, while respect-
ing privacy and guarding against deception, fraud, 
and theft.’’. 
SEC.
3.
UNITED
STATES
INTERNATIONAL
CYBERSPACE 
POLICY. 
(a) IN GENERAL.—Congress declares that it is the 
policy of the United States to work internationally with 
allies and other partners to promote an open, interoper-
able, reliable, unfettered, and secure internet governed by 
the multistakeholder model which promotes human rights, 
democracy, and rule of law, including freedom of expres-
sion, innovation, communication, and economic prosperity, 
while respecting privacy and guarding against deception, 
fraud, and theft. 
(b) IMPLEMENTATION.—In implementing the policy 
described in subsection (a), the President, in consultation 
with outside actors, including technology companies, non-
governmental organizations, security researchers, and 
other relevant stakeholders, shall pursue the following ob-
jectives in the conduct of bilateral and multilateral rela-
tions: 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(1) Clarifying the applicability of international 
laws and norms, including the law of armed conflict, 
to the use of ICT. 
(2) Clarifying that countries that fall victim to 
malicious cyber activities have the right to take pro-
portionate countermeasures under international law, 
provided such measures do not violate a funda-
mental human right or peremptory norm. 
(3) Reducing and limiting the risk of escalation 
and retaliation in cyberspace, such as massive de-
nial-of-service attacks, damage to critical infrastruc-
ture, or other malicious cyber activity that impairs 
the use and operation of critical infrastructure that 
provides services to the public. 
(4) Cooperating with like-minded democratic 
countries that share common values and cyberspace 
policies with the United States, including respect for 
human rights, democracy, and rule of law, to ad-
vance such values and policies internationally. 
(5) Securing and implementing commitments 
on responsible country behavior in cyberspace based 
upon accepted norms, including the following: 
(A) Countries should not conduct or know-
ingly support cyber-enabled theft of intellectual 
property, including trade secrets or other con-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
fidential business information, with the intent 
of providing competitive advantages to compa-
nies or commercial sectors. 
(B) Countries should cooperate in devel-
oping and applying measures to increase sta-
bility and security in the use of ICTs and to 
prevent ICT practices that are acknowledged to 
be harmful or that may pose threats to inter-
national peace and security. 
(C) Countries should take all appropriate 
and reasonable efforts to keep their territories 
clear of intentionally wrongful acts using ICTs 
in violation of international commitments. 
(D) Countries should not conduct or know-
ingly support ICT activity that, contrary to 
international law, intentionally damages or oth-
erwise impairs the use and operation of critical 
infrastructure,
and
should
take
appropriate 
measures to protect their critical infrastructure 
from ICT threats. 
(E) Countries should not conduct or know-
ingly support malicious international activity 
that, contrary to international law, harms the 
information systems of authorized emergency 
response teams (sometimes known as ‘‘com-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
puter emergency response teams’’ or ‘‘cyberse-
curity incident response teams’’) or related pri-
vate sector companies of another country. 
(F) Countries should identify economic 
drivers and incentives to promote securely-de-
signed ICT products and to develop policy and 
legal frameworks to promote the development of 
secure internet architecture. 
(G) Countries should respond to appro-
priate requests for assistance to mitigate mali-
cious ICT activity aimed at the critical infra-
structure of another country emanating from 
their territory. 
(H) Countries should not restrict cross- 
border data flows or require local storage or 
processing of data. 
(I) Countries should protect the exercise of 
human rights and fundamental freedoms on the 
Internet and commit to the principle that the 
human rights that people have offline enjoy the 
same protections online. 
SEC. 4. DEPARTMENT OF STATE RESPONSIBILITIES. 
(a) OFFICE OF CYBER ISSUES.—Section 1 of the 
State Department Basic Authorities Act of 1956 (22 
U.S.C. 2651a) is amended— 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(1) by redesignating subsection (g) as sub-
section (h); and 
(2) by inserting after subsection (f) the fol-
lowing new subsection: 
‘‘(g) OFFICE OF CYBER ISSUES.— 
‘‘(1) IN GENERAL.—There is established an Of-
fice of Cyber Issues (in this subsection referred to 
as the ‘Office’). The head of the Office shall have 
the rank and status of ambassador and be appointed 
by the President, by and with the advice and consent 
of the Senate. 
‘‘(2) DUTIES.— 
‘‘(A) IN GENERAL.—The head of the Of-
fice shall perform such duties and exercise such 
powers as the Secretary of State shall prescribe, 
including implementing the policy of the United 
States described in section 3 of the Cyber Di-
plomacy Act of 2017. 
‘‘(B) DUTIES DESCRIBED.—The principal 
duties of the head of the Office shall be to— 
‘‘(i) serve as the principal cyber-policy 
official within the senior management of 
the Department of State and advisor to 
the Secretary of State for cyber issues; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(ii) lead the Department of State’s 
diplomatic cyberspace efforts generally, in-
cluding relating to international cybersecu-
rity, internet access, internet freedom, dig-
ital economy, cybercrime, deterrence and 
international responses to cyber threats; 
‘‘(iii) promote an open, interoperable, 
reliable, unfettered, and secure information 
and communications technology infrastruc-
ture globally; 
‘‘(iv) represent the Secretary of State 
in interagency efforts to develop and ad-
vance
the
United
States
international 
cyberspace policy; 
‘‘(v) coordinate within the Depart-
ment of State and with other components 
of the United States Government cyber-
space efforts and other relevant functions, 
including
countering
terrorists’
use
of 
cyberspace; and 
‘‘(vi) act as liaison to public and pri-
vate sector entities on relevant cyberspace 
issues. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(3) QUALIFICATIONS.—The head of the Office 
should be an individual of demonstrated competency 
in the field of— 
‘‘(A) cybersecurity and other relevant cyber 
issues; and 
‘‘(B) international diplomacy. 
‘‘(4) ORGANIZATIONAL PLACEMENT.—The head 
of the Office shall report to the Under Secretary for 
Political Affairs or official holding a higher position 
in the Department of State. 
‘‘(5) RULE
OF
CONSTRUCTION.—Nothing in 
this subsection may be construed as precluding— 
‘‘(A) the Office from being elevated to a 
Bureau of the Department of State; and 
‘‘(B) the head of the Office from being ele-
vated to an Assistant Secretary, if such an As-
sistant Secretary position does not increase the 
number of Assistant Secretary positions at the 
Department above the number authorized under 
subsection (c)(1).’’. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that the Office of Cyber Issues established under 
section 1(g) of the State Department Basic Authorities 
Act of 1956 (as amended by subsection (a) of this section) 
should be a Bureau of the Department of State headed 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
by an Assistant Secretary, subject to the rule of construc-
tion specified in paragraph (5)(B) of such section 1(g). 
(c) UNITED NATIONS.—The Permanent Representa-
tive of the United States to the United Nations shall use 
the voice, vote, and influence of the United States to op-
pose any measure that is inconsistent with the United 
States international cyberspace policy described in section 
3. 
SEC.
5.
INTERNATIONAL
CYBERSPACE
EXECUTIVE
AR-
RANGEMENTS. 
(a) IN GENERAL.—The President is encouraged to 
enter into executive arrangements with foreign govern-
ments that support the United States international cyber-
space policy described in section 3. 
(b) TRANSMISSION TO CONGRESS.—The text of any 
executive arrangement (including the text of any oral ar-
rangement, which shall be reduced to writing) entered into 
by the United States under subsection (a) shall be trans-
mitted to the Committee on Foreign Affairs of the House 
of Representatives and the Committee on Foreign Rela-
tions of the Senate not later than 5 days after such ar-
rangement is signed or otherwise agreed to, together with 
an explanation of such arrangement, its purpose, how such 
arrangement is consistent with the United States inter-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
national cyberspace policy described in section 3, and how 
such arrangement will be implemented. 
(c) STATUS REPORT.—Not later than 1 year after 
the text of an executive arrangement is transmitted to 
Congress pursuant to subsection (b) and annually there-
after for 7 years, or until such an arrangement has been 
discontinued, the President shall report to the Committee 
on Foreign Affairs of the House of Representatives and 
the Committee on Foreign Relations of the Senate on the 
status of such arrangement, including an evidence-based 
assessment of whether all parties to such arrangement 
have fulfilled their commitments under such arrangement 
and if not, what steps the United States has taken or 
plans to take to ensure all such commitments are fulfilled, 
whether the stated purpose of such arrangement is being 
achieved, and whether such arrangement positively im-
pacts building of cyber norms internationally. Each such 
report shall include metrics to support its findings. 
(d) EXISTING EXECUTIVE ARRANGEMENTS.—Not 
later than 60 days after the date of the enactment of this 
Act, the President shall satisfy the requirements of sub-
section (c) for the following executive arrangements al-
ready in effect: 
(1) The arrangement announced between the 
United States and Japan on April 25, 2014. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(2) The arrangement announced between the 
United States and the United Kingdom on January 
16, 2015. 
(3) The arrangement announced between the 
United States and China on September 25, 2015. 
(4) The arrangement announced between the 
United States and Korea on October 16, 2015. 
(5) The arrangement announced between the 
United States and Australia on January 19, 2016. 
(6) The arrangement announced between the 
United States and India on June 7, 2016. 
(7) The arrangement announced between the 
United States and Argentina on April 27, 2017. 
(8) The arrangement announced between the 
United States and Kenya on June 22, 2017. 
(9) The arrangement announced between the 
United States and Israel on June 26, 2017. 
(10) Any other similar bilateral or multilateral 
arrangement announced before the date of the en-
actment of this Act. 
SEC. 6. INTERNATIONAL STRATEGY FOR CYBERSPACE. 
(a) STRATEGY REQUIRED.—Not later than 1 year 
after the date of the enactment of this Act, the Secretary 
of State, in coordination with the heads of other relevant 
Federal departments and agencies, shall produce a strat-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
egy relating to United States international policy with re-
gard to cyberspace. 
(b) ELEMENTS.—The strategy required under sub-
section (a) shall include the following: 
(1) A review of actions and activities under-
taken to support the United States international 
cyberspace policy described in section 3. 
(2) A plan of action to guide the diplomacy of 
the Department of State with regard to foreign 
countries, including conducting bilateral and multi-
lateral activities to develop the norms of responsible 
international behavior in cyberspace, and status re-
view of existing efforts in multilateral fora to obtain 
agreements on international norms in cyberspace. 
(3) A review of alternative concepts with regard 
to international norms in cyberspace offered by for-
eign countries. 
(4) A detailed description of new and evolving 
threats to United States national security in cyber-
space from foreign countries, State-sponsored actors, 
and private actors to Federal and private sector in-
frastructure of the United States, intellectual prop-
erty in the United States, and the privacy of citizens 
of the United States. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(5) A review of policy tools available to the 
President to deter and de-escalate tensions with for-
eign countries, State-sponsored actors, and private 
actors regarding threats in cyberspace, and to what 
degree such tools have been used and whether or not 
such tools have been effective. 
(6) A review of resources required to conduct 
activities to build responsible norms of international 
cyber behavior. 
(7) A clarification of the applicability of inter-
national laws and norms, including the law of armed 
conflict, to the use of ICT. 
(8) A clarification that countries that fall victim 
to malicious cyber activities have the right to take 
proportionate countermeasures under international 
law, including exercising the right to collective and 
individual self-defense. 
(9) A plan of action to guide the diplomacy of 
the Department of State with regard to existing mu-
tual defense agreements, including the inclusion in 
such agreements of information relating to the appli-
cability of malicious cyber activities in triggering 
mutual defense obligations. 
(c) FORM OF STRATEGY.— 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(1) PUBLIC
AVAILABILITY.—The strategy re-
quired under subsection (a) shall be available to the 
public in unclassified form, including through publi-
cation in the Federal Register. 
(2) CLASSIFIED ANNEX.— 
(A) IN
GENERAL.—If the Secretary of 
State determines that such is appropriate, the 
strategy required under subsection (a) may in-
clude a classified annex consistent with United 
States national security interests. 
(B) RULE OF CONSTRUCTION.—Nothing in 
this subsection may be construed as authorizing 
the public disclosure of an unclassified annex 
under subparagraph (A). 
(d) BRIEFING.—Not later than 30 days after the pro-
duction of the strategy required under subsection (a), the 
Secretary of State shall brief the Committee on Foreign 
Affairs of the House of Representatives and the Com-
mittee on Foreign Relations of the Senate on such strat-
egy, including any material contained in a classified 
annex. 
(e) UPDATES.—The strategy required under sub-
section (a) shall be updated— 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(1) not later than 90 days after there has been 
any material change to United States policy as de-
scribed in such strategy; and 
(2) not later than 1 year after each inaugura-
tion of a new President. 
(f) PREEXISTING REQUIREMENT.—Upon the produc-
tion and publication of the report required under section 
3(c) of the Presidential Executive Order No. 13800 on 
Strengthening the Cybersecurity of Federal Networks and 
Critical Infrastructure on May 11, 2017, such report shall 
be considered as satisfying the requirement under sub-
section (a) of this section. 
SEC. 7. ANNUAL COUNTRY REPORTS ON HUMAN RIGHTS 
PRACTICES. 
(a)
REPORT
RELATING
TO
ECONOMIC
ASSIST-
ANCE.—Section 116 of the Foreign Assistance Act of 
1961 (22 U.S.C. 2151n) is amended by adding at the end 
the following new subsection: 
‘‘(h)(1) The report required by subsection (d) shall 
include an assessment of freedom of expression with re-
spect to electronic information in each foreign country. 
Such assessment shall consist of the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in each country inappropriately 
attempt to filter, censor, or otherwise block or re-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
move nonviolent expression of political or religious 
opinion or belief via the internet, including electronic 
mail, as well as a description of the means by which 
such authorities attempt to block or remove such ex-
pression. 
‘‘(B) An assessment of the extent to which gov-
ernment authorities in each country have persecuted 
or otherwise punished an individual or group for the 
nonviolent expression of political, religious, or ideo-
logical opinion or belief via the internet, including 
electronic mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in each country have sought to 
inappropriately collect, request, obtain, or disclose 
personally identifiable information of a person in 
connection with such person’s nonviolent expression 
of political, religious, or ideological opinion or belief, 
including expression that would be protected by the 
International Covenant on Civil and Political Rights. 
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without regard to the principles of pri-
vacy, human rights, democracy, and rule of law. 
‘‘(2) In compiling data and making assessments for 
the purposes of paragraph (1), United States diplomatic 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
personnel shall consult with human rights organizations, 
technology and internet companies, and other appropriate 
nongovernmental organizations. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has 
the meaning given such term in section 2510 of title 
18, United States Code; 
‘‘(B) the term ‘internet’ has the meaning given 
such term in section 231(e)(3) of the Communica-
tions Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and 
‘‘(D) the term ‘wire communication’ has the 
meaning given such term in section 2510 of title 18, 
United States Code.’’. 
(b) REPORT RELATING TO SECURITY ASSISTANCE.— 
Section 502B of the Foreign Assistance Act of 1961 (22 
U.S.C. 2304) is amended— 
(1) by redesignating the second subsection (i) 
(relating to child marriage status) as subsection (j); 
and 
(2) by adding at the end the following new sub-
section: 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
‘‘(k)(1) The report required by subsection (b) shall 
include an assessment of freedom of expression with re-
spect to electronic information in each foreign country. 
Such assessment shall consist of the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in each country inappropriately 
attempt to filter, censor, or otherwise block or re-
move nonviolent expression of political or religious 
opinion or belief via the internet, including electronic 
mail, as well as a description of the means by which 
such authorities attempt to block or remove such ex-
pression. 
‘‘(B) An assessment of the extent to which gov-
ernment authorities in each country have persecuted 
or otherwise punished an individual or group for the 
nonviolent expression of political, religious, or ideo-
logical opinion or belief via the internet, including 
electronic mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in each country have sought to 
inappropriately collect, request, obtain, or disclose 
personally identifiable information of a person in 
connection with such person’s nonviolent expression 
of political, religious, or ideological opinion or belief, 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
including expression that would be protected by the 
International Covenant on Civil and Political Rights. 
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without regard to the principles of pri-
vacy, human rights, democracy, and rule of law. 
‘‘(2) In compiling data and making assessments for 
the purposes of paragraph (1), United States diplomatic 
personnel shall consult with human rights organizations, 
technology and internet companies, and other appropriate 
nongovernmental organizations. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has 
the meaning given such term in section 2510 of title 
18, United States Code; 
‘‘(B) the term ‘internet’ has the meaning given 
such term in section 231(e)(3) of the Communica-
tions Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and 
‘‘(D) the term ‘wire communication’ has the 
meaning given such term in section 2510 of title 18, 
United States Code.’’. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6401
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
SECTION 1. SHORT TITLE; TABLE OF CONTENTS. 
(a) SHORT TITLE.—This Act may be cited as the 
‘‘Cyber Diplomacy Act of 2018’’. 
(b) TABLE OF CONTENTS.—The table of contents for 
this Act is as follows: 
Sec. 1. Short title; table of contents. 
Sec. 2. Findings. 
Sec. 3. Definitions. 
Sec. 4. United States International Cyberspace Policy. 
Sec. 5. Department of State responsibilities. 
Sec. 6. International cyberspace executive arrangements. 
Sec. 7. International strategy for cyberspace. 
Sec. 8. Annual country reports on human rights practices. 
Sec. 9. GAO report on cyber threats and data misuse. 
Sec. 10. Sense of Congress on cybersecurity sanctions against North Korea and 
cybersecurity legislation in Vietnam. 
SEC. 2. FINDINGS. 
Congress makes the following findings: 
(1) The stated goal of the United States Inter-
national Strategy for Cyberspace, launched on May 
16, 2011, is to ‘‘work internationally to promote an 
open, interoperable, secure, and reliable information 
and communications infrastructure that supports 
international trade and commerce, strengthens inter-
national security, and fosters free expression and in-
novation . . . in which norms of responsible behavior 
guide states’ actions, sustain partnerships, and sup-
port the rule of law in cyberspace’’. 
(2) In its June 24, 2013 report, the Group of 
Governmental Experts on Developments in the Field 
of Information and Telecommunications in the Con-
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
text of International Security (referred to in this sec-
tion as ‘‘GGE’’), established by the United Nations 
General Assembly, concluded that ‘‘State sovereignty 
and the international norms and principles that flow 
from it apply to States’ conduct of [information and 
communications technology] ICT-related activities 
and to their jurisdiction over ICT infrastructure with 
their territory’’. 
(3) In January 2015, China, Kazakhstan, 
Kyrgyzstan, Russia, Tajikistan, and Uzbekistan pro-
posed a troubling international code of conduct for 
information security, which could be used as a pretext 
for restricting political dissent, and includes ‘‘curbing 
the dissemination of information that incites ter-
rorism, separatism or extremism or that inflames ha-
tred on ethnic, racial or religious grounds’’. 
(4) In its July 22, 2015 consensus report, GGE 
found that ‘‘norms of responsible State behavior can 
reduce risks to international peace, security and sta-
bility’’. 
(5) On September 25, 2015, the United States 
and China announced a commitment that neither 
country’s government ‘‘will conduct or knowingly 
support cyber-enabled theft of intellectual property, 
including trade secrets or other confidential business 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
information, with the intent of providing competitive 
advantages to companies or commercial sectors’’. 
(6) At the Antalya Summit on November 15 and 
16, 2015, the Group of 20 Leaders’ communique´— 
(A) affirmed the applicability of inter-
national law to state behavior in cyberspace; 
(B) called on states to refrain from cyber- 
enabled theft of intellectual property for commer-
cial gain; and 
(C) endorsed the view that all states should 
abide by norms of responsible behavior. 
(7) The March 2016 Department of State Inter-
national Cyberspace Policy Strategy noted that ‘‘the 
Department of State anticipates a continued increase 
and expansion of our cyber-focused diplomatic efforts 
for the foreseeable future’’. 
(8) On December 1, 2016, the Commission on 
Enhancing National Cybersecurity, which was estab-
lished within the Department of Commerce by Execu-
tive Order 13718 (81 Fed. Reg. 7441), recommended 
that ‘‘the President should appoint an Ambassador 
for Cybersecurity to lead U.S. engagement with the 
international community on cybersecurity strategies, 
standards, and practices’’. 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS
(9) On April 11, 2017, the 2017 Group of 7 Dec-
laration on Responsible States Behavior in Cyber-
space— 
(A) recognized ‘‘the urgent necessity of in-
creased international cooperation to promote se-
curity and stability in cyberspace’’; 
(B) expressed commitment to ‘‘promoting a 
strategic framework for conflict prevention, co-
operation and stability in cyberspace, consisting 
of the recognition of the applicability of existing 
international law to State behavior in cyber-
space, the promotion of voluntary, non-binding 
norms of responsible State behavior during 
peacetime, and the development and the imple-
mentation of practical cyber confidence building 
measures (CBMs) between States’’; and 
(C) reaffirmed that ‘‘the same rights that 
people have offline must also be protected on-
line’’. 
(10) In testimony before the Select Committee on 
Intelligence of the Senate on May 11, 2017, Director 
of National Intelligence Daniel R. Coats identified 6 
cyber threat actors, including— 
(A) Russia, for ‘‘efforts to influence the 
2016 US election’’; 
VerDate Sep 11 2014 
00:35 Jun 29, 2018
Jkt 079200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6203
E:\BILLS\H3776.RS
H3776
dlhill on DSK3GLQ082PROD with BILLS