Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘National Computer 
Forensics Institute Reauthorization Act of 2022’’. 
SEC. 2. REAUTHORIZATION OF THE NATIONAL COMPUTER 
FORENSICS INSTITUTE OF THE DEPARTMENT 
OF HOMELAND SECURITY. 
(a) IN GENERAL.—Section 822 of the Homeland Secu-
rity Act of 2002 (6 U.S.C. 383) is amended— 
(1) in subsection (a)— 
(A) in the subsection heading, by striking 
‘‘IN GENERAL’’ and inserting ‘‘IN GENERAL; 
MISSION’’; 
(B) by striking ‘‘2022’’ and inserting 
‘‘2032’’; and 
(C) by striking the second sentence and in-
serting ‘‘The Institute’s mission shall be to edu-
cate, train, and equip State, local, territorial, 
and Tribal law enforcement officers, prosecutors, 
judges, participants in the United States Secret 
Service’s network of cyber fraud task forces, and 
other appropriate individuals regarding the in-
vestigation and prevention of cybersecurity inci-
dents, electronic crimes, and related cybersecu-
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
rity threats, including through the dissemination 
of homeland security information, in accordance 
with relevant Department guidance regarding 
privacy, civil rights, and civil liberties protec-
tions.’’; 
(2) by redesignating subsections (c) through (f) 
as subsections (d) through (g), respectively; 
(3) by striking subsection (b) and inserting the 
following new subsections: 
‘‘(b) CURRICULUM.—In furtherance of subsection (a), 
all education and training of the Institute shall be con-
ducted in accordance with relevant Federal law and policy 
regarding privacy, civil rights, and civil liberties protec-
tions, including best practices for safeguarding data pri-
vacy and fair information practice principles. Education 
and training provided pursuant to subsection (a) shall re-
late to the following: 
‘‘(1) Investigating and preventing cybersecurity 
incidents, electronic crimes, and related cybersecurity 
threats, including relating to instances involving il-
licit use of digital assets and emerging trends in cy-
bersecurity and electronic crime. 
‘‘(2) Conducting forensic examinations of com-
puters, mobile devices, and other information systems. 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(3) Prosecutorial and judicial considerations 
related to cybersecurity incidents, electronic crimes, 
related cybersecurity threats, and forensic examina-
tions of computers, mobile devices, and other informa-
tion systems. 
‘‘(4) Methods to obtain, process, store, and admit 
digital evidence in court. 
‘‘(c) RESEARCH AND DEVELOPMENT.—In furtherance 
of subsection (a), the Institute shall research, develop, and 
share information relating to investigating cybersecurity 
incidents, electronic crimes, and related cybersecurity 
threats that prioritize best practices for forensic examina-
tions of computers, mobile devices, and other information 
systems. Such information may include training on meth-
ods to investigate ransomware and other threats involving 
the use of digital assets.’’; 
(4) in subsection (d), as so redesignated— 
(A) by striking ‘‘cyber and electronic crime 
and related threats is shared with State, local, 
tribal, and territorial law enforcement officers 
and prosecutors’’ and inserting ‘‘cybersecurity 
incidents, electronic crimes, and related cyberse-
curity threats is shared with recipients of edu-
cation and training provided pursuant to sub-
section (a)’’; and 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
(B) by adding at the end the following new 
sentence: ‘‘The Institute shall prioritize pro-
viding education and training to individuals 
from 
geographically-diverse 
jurisdictions 
throughout the United States.’’; 
(5) in subsection (e), as so redesignated— 
(A) by striking ‘‘State, local, tribal, and 
territorial law enforcement officers’’ and insert-
ing ‘‘recipients of education and training pro-
vided pursuant to subsection (a)’’; and 
(B) by striking ‘‘necessary to conduct cyber 
and electronic crime and related threat inves-
tigations and computer and mobile device foren-
sic examinations’’ and inserting ‘‘for inves-
tigating and preventing cybersecurity incidents, 
electronic crimes, related cybersecurity threats, 
and for forensic examinations of computers, mo-
bile devices, and other information systems’’; 
(6) in subsection (f), as so redesignated— 
(A) by amending the heading to read as fol-
lows: ‘‘CYBER FRAUD TASK FORCES’’; 
(B) by striking ‘‘Electronic Crime’’ and in-
serting ‘‘Cyber Fraud’’; 
(C) by striking ‘‘State, local, tribal, and ter-
ritorial law enforcement officers’’ and inserting 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘recipients of education and training provided 
pursuant to subsection (a)’’; and 
(D) by striking ‘‘at’’ and inserting ‘‘by’’; 
(7) by redesignating subsection (g), as redesig-
nated pursuant to paragraph (2), as subsection (j); 
and 
(8) by inserting after subsection (f), as so redes-
ignated, the following new subsections: 
‘‘(g) EXPENSES.—The Director of the United States 
Secret Service may pay for all or a part of the education, 
training, or equipment provided by the Institute, including 
relating to the travel, transportation, and subsistence ex-
penses of recipients of education and training provided pur-
suant to subsection (a). 
‘‘(h) ANNUAL REPORTS TO CONGRESS.—The Secretary 
shall include in the annual report required pursuant to sec-
tion 1116 of title 31, United States Code, information re-
garding the activities of the Institute, including relating to 
the following: 
‘‘(1) Activities of the Institute, including, where 
possible, an identification of jurisdictions with recipi-
ents of education and training provided pursuant to 
subsection (a) of this section during such year and in-
formation relating to the costs associated with such 
education and training. 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(2) Any information regarding projected future 
demand for such education and training. 
‘‘(3) Impacts of the Institute’s activities on juris-
dictions’ capability to investigate and prevent cyber-
security incidents, electronic crimes, and related cy-
bersecurity threats. 
‘‘(4) A description of the nomination process for 
State, local, territorial, and Tribal law enforcement 
officers, prosecutors, judges, participants in the 
United States Secret Service’s network of cyber fraud 
task forces, and other appropriate individuals to re-
ceive the education and training provided pursuant 
to subsection (a). 
‘‘(5) Any other issues determined relevant by the 
Secretary. 
‘‘(i) DEFINITIONS.—In this section— 
‘‘(1) CYBERSECURITY
THREAT.—The term ‘cy-
bersecurity threat’ has the meaning given such term 
in section 102 of the Cybersecurity Act of 2015 (en-
acted as division N of the Consolidated Appropria-
tions Act, 2016 (Public Law 114–113; 6 U.S.C. 
1501)) 
‘‘(2) INCIDENT.—The term ‘incident’ has the 
meaning given such term in section 2209(a). 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
‘‘(3) INFORMATION SYSTEM.—The term ‘informa-
tion system’ has the meaning given such term in sec-
tion 102 of the Cybersecurity Act of 2015 (enacted as 
division N of the Consolidated Appropriations Act, 
2016 (Public Law 114–113; 6 U.S.C. 1501(9))).’’. 
(b) GUIDANCE FROM
THE PRIVACY OFFICER
AND 
CIVIL RIGHTS AND CIVIL LIBERTIES OFFICER.—The Pri-
vacy Officer and the Officer for Civil Rights and Civil Lib-
erties of the Department of Homeland Security shall pro-
vide guidance, upon the request of the Director of the United 
States Secret Service, regarding the functions specified in 
subsection (b) of section 822 of the Homeland Security Act 
of 2002 (6 U.S.C. 383), as amended by subsection (a). 
(c) TEMPLATE FOR INFORMATION COLLECTION FROM 
PARTICIPATING JURISDICTIONS.—Not later than 180 days 
after the date of the enactment of this Act, the Director of 
the United States Secret Service shall develop and dissemi-
nate to jurisdictions that are recipients of education and 
training provided by the National Computer Forensics In-
stitute pursuant to subsection (a) of section 822 of the 
Homeland Security Act of 2002 (6 U.S.C. 383), as amended 
by subsection (a), a template to permit each such jurisdic-
tion to submit to the Director reports on the impacts on 
such jurisdiction of such education and training, including 
information on the number of digital forensics exams con-
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
ducted annually. The Director shall, as appropriate, revise 
such template and disseminate to jurisdictions described in 
this subsection any such revised templates. 
(d) REQUIREMENTS ANALYSIS.— 
(1) IN GENERAL.—Not later than one year after 
the date of the enactment of this Act, the Director of 
the United States Secret Service shall carry out a re-
quirements analysis of approaches to expand capacity 
of the National Computer Forensics Institute to carry 
out the Institute’s mission as set forth in subsection 
(a) of section 822 of the Homeland Security Act of 
2002 (6 U.S.C. 383), as amended by subsection (a). 
(2) SUBMISSION.—Not later than 90 days after 
completing the requirements analysis under para-
graph (1), the Director of the United States Secret 
Service shall submit to Congress such analysis, to-
gether with a plan to expand the capacity of the Na-
tional Computer Forensics Institute to provide edu-
cation and training described in such subsection. 
Such analysis and plan shall consider the following: 
(A) Expanding the physical operations of 
the Institute. 
(B) Expanding the availability of virtual 
education and training to all or a subset of po-
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
tential recipients of education and training from 
the Institute. 
(C) Some combination of the considerations 
set forth in subparagraphs (A) and (B). 
(e) RESEARCH AND DEVELOPMENT.—The Director of 
the United States Secret Service may coordinate with the 
Under Secretary for Science and Technology of the Depart-
ment of Homeland Security to carry out research and devel-
opment of systems and procedures to enhance the National 
Computer Forensics Institute’s capabilities and capacity to 
carry out the Institute’s mission as set forth in subsection 
(a) of section 822 of the Homeland Security Act of 2002 
(6 U.S.C. 383), as amended by subsection (a). 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6203
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB
Union Calendar No. 287 
117TH CONGRESS 
2D SESSION 
H. R. 7174 
[Report No. 117–376, Part I] 
A BILL 
To amend the Homeland Security Act of 2002 to 
reauthorize the National Computer Forensics In-
stitute of the United States Secret Service, and 
for other purposes. 
JUNE 17, 2022 
Committee on the Judiciary discharged; committed to the 
Committee of the Whole House on the State of the 
Union and ordered to be printed 
VerDate Sep 11 2014 
23:27 Jun 17, 2022
Jkt 029200
PO 00000
Frm 00012
Fmt 6651
Sfmt 6651
E:\BILLS\H7174.RH
H7174
pbinns on DSKJLVW7X2PROD with $$_JOB