H. R. 4346—208 
safeguarding of sensitive information and other relevant 
regulations and Federal guidelines. 
(B) STRUCTURE.—In carrying out the pilot program 
established pursuant to subparagraph (A), the Director 
shall select, for the development, installation, maintenance, 
or sustainment of secure computing enclaves, three institu-
tions of higher education that have an established graduate 
student program and a demonstrated history of working 
with secure information, consistent with appropriate secu-
rity protocols. 
(C) REGIONALIZATION.— 
(i) IN GENERAL.—In selecting universities pursuant 
to subparagraph (B), the Director shall give preference 
to institutions of higher education with the capability 
of serving other regional universities. 
(ii) GEOGRAPHIC DISPERSAL.—The enclaves should 
be geographically dispersed to better meet the needs 
of regional interests. 
(D) PROGRAM ELEMENTS.—The Director shall work with 
institutions of higher education selected pursuant to 
subparagraph (B) to— 
(i) develop an approved design blueprint for compli-
ance with Federal data protection protocols; 
(ii) develop a comprehensive and confidential list, 
or a bill of materials, of each binary component of 
the software, firmware, or product that is required 
to deploy additional secure computing enclaves; 
(iii) develop templates for all policies and proce-
dures required to operate the secure computing enclave 
in a research setting; 
(iv) develop a system security plan template; and 
(v) develop a process for managing a plan of action 
and milestones for the secure computing enclave. 
(E) SUSTAINABILITY.—In reviewing applications for 
awards, the Director shall review and consider plans and 
prospects of the applicant institution of higher education 
to ensure long-term sustainability of the computing enclave, 
beyond the availability of Federal funds. 
(F) DURATION.—Subject to other availability of appro-
priations, the pilot program established pursuant to 
subparagraph (A) shall operate for not less than 3 years. 
(G) REPORT.— 
(i) IN GENERAL.—The Director shall report to Con-
gress not later than 6 months after the completion 
of the pilot program under subparagraph (A). 
(ii) CONTENTS.—The report required under clause 
(i) shall include— 
(I) an assessment of the pilot program under 
subparagraph (A), including an assessment of the 
security benefits provided by such secure com-
puting enclaves; 
(II) recommendations related to the value of 
expanding the network of secure computing 
enclaves; and 
(III) recommendations on the efficacy of the 
use of secure computing enclaves by other Federal
H. R. 4346—209 
agencies in a broader effort to expand security 
of Federal research. 
(H) AUTHORIZATION
OF
APPROPRIATIONS.—There is 
authorized to be appropriated to the Director, $38,000,000 
for fiscal years 2023 through 2025, to carry out the activi-
ties outlined in this paragraph. 
SEC. 10375. NATIONAL SECURE DATA SERVICE. 
(a) IN
GENERAL.—The Director, in consultation with the 
Director of the Office of Management and Budget and the inter-
agency committee established under section 5103 of the National 
Artificial Intelligence Initiative Act of 2020 (15 U.S.C. 9415), shall 
establish a demonstration project to develop, refine, and test models 
to inform the full implementation of the Commission on Evidence- 
Based Policymaking recommendation for a governmentwide data 
linkage and access infrastructure for statistical activities conducted 
for statistical purposes, as defined in chapter 35 of title 44, United 
States Code. 
(b) ESTABLISHMENT.—Not later than one year after the date 
of enactment of this Act, the Director shall establish a National 
Secure Data Service demonstration project. The National Secure 
Data Service demonstration project shall be— 
(1) aligned with the principles, best practices, and priority 
actions recommended by the Advisory Committee on Data for 
Evidence Building, to the extent feasible; and 
(2) operated directly by or via a contract that is managed 
by the National Center for Science and Engineering Statistics. 
(c) DATA.—In carrying out this section, the Director shall 
engage with Federal and State agencies to collect, acquire, analyze, 
report, and disseminate statistical data in the United States and 
other nations to support governmentwide evidence-building activi-
ties consistent with the Foundations for Evidence-Based Policy-
making Act of 2018. 
(d) VOLUNTARY PARTICIPATION.—Participation in the National 
Secure Data Service demonstration project by Federal and State 
agencies shall be voluntary. 
(e) PRIVACY
AND
CONFIDENTIALITY
PROTECTIONS.—If the 
Director issues a management contract under subsection (b), the 
recipient shall be designated as an ‘‘agent’’ under subchapter III 
of chapter 35 of title 44, United States Code, with all requirements 
and obligations for protecting confidential information delineated 
in the Confidential Information Protection and Statistical Efficiency 
Act of 2018 and the Privacy Act of 1974. 
(f) TECHNOLOGY AND PRIVACY STANDARDS.—In carrying out this 
subsection, the Director shall— 
(1) consider application and use only of systems and tech-
nologies that incorporate protection measures to reasonably 
ensure confidential data and statistical products are protected 
in accordance with obligations under subchapter III of chapter 
35 of title 44, United States Code, including systems and tech-
nologies that ensure— 
(A) raw data and other sensitive inputs are not acces-
sible to recipients of statistical outputs from the National 
Secure Data Service demonstration project;
H. R. 4346—210 
(B) no individual entity’s data or information is 
revealed by the National Secure Data Service demonstra-
tion project platform to any other party in an identifiable 
form; 
(C) no information about the data assets used in the 
National Secure Data Service demonstration project is 
revealed to any other party, except as incorporated into 
the final statistical output; 
(D) the National Secure Data Service demonstration 
project permits only authorized analysts to perform statis-
tical queries necessary to answer approved project ques-
tions, and prohibits any other queries; and 
(E) the National Secure Data Service demonstration 
project conducts privacy risk assessments to minimize the 
privacy risks to individual entities whose data has been 
made available by a reporting entity, including those pri-
vacy risks that could result from data breaches of any 
system operated by the reporting entity, as well as for 
determining approved project questions under subpara-
graph (D) to minimize the privacy risks to individuals 
affected by uses of the statistical output; and 
(2) the National Secure Data Service demonstration project 
shall implement reasonable measures commensurate with the 
risks to individuals’ privacy to achieve the outcomes under 
subparagraphs (A) through (E) of paragraph (1), which may 
include the appropriate application of privacy-enhancing tech-
nologies and appropriate measures to minimize or prevent re-
identification risks consistent with any applicable guidance or 
regulations issued under subchapter III of chapter 35 of title 
44, United States Code. 
(g) TRANSPARENCY.—The National Secure Data Service estab-
lished under subsection (b) shall maintain a public website with 
up-to-date information on supported projects. 
(h) REPORT.—Not later than 2 years after the date of enactment 
of this Act, the National Secure Data Service demonstration project 
established under subsection (b) shall submit a report to Congress 
that includes— 
(1) a description of policies for protecting data, consistent 
with applicable Federal law; 
(2) a comprehensive description of all completed or active 
data linkage activities and projects; 
(3) an assessment of the effectiveness of the demonstration 
project for mitigating risks and removing barriers to a sustained 
implementation of the National Secure Data Service as rec-
ommended by the Commission on Evidence-Based Policy-
making; and 
(4) if deemed effective by the Director, a plan for scaling 
up the demonstration project to facilitate data access for evi-
dence building while ensuring transparency and privacy. 
(i) AUTHORIZATION OF APPROPRIATIONS.—There are authorized 
to be appropriated to the Director to carry out this subsection 
$9,000,000 for each of fiscal years 2023 through 2027.
H. R. 4346—211 
Subtitle G—Directorate for Technology, 
Innovation, and Partnerships 
SEC. 10381. ESTABLISHMENT. 
There is established within the Foundation the Directorate 
for Technology, Innovation, and Partnerships to advance research 
and development, technology development, and related solutions 
to address United States societal, national, and geostrategic chal-
lenges, for the benefit of all Americans. 
SEC. 10382. PURPOSES. 
The purposes of the Directorate established under section 10381 
are to— 
(1) support use-inspired and translational research and 
accelerate the development and use of federally funded 
research; 
(2) strengthen United States competitiveness by accel-
erating the development of key technologies; and 
(3) grow the domestic workforce in key technology focus 
areas, and expand the participation of United States students 
and researchers in areas of societal, national, and geostrategic 
importance, at all levels of education. 
SEC. 10383. ACTIVITIES. 
Subject to the availability of appropriated funds, the Director 
shall achieve the purposes described in section 10382 by making 
awards through the Directorate that— 
(1) support transformational advances in use-inspired and 
translational research and technology development, including 
through diverse funding mechanisms and models at different 
scales, to include convergence accelerators and projects designed 
to achieve specific technology metrics or objectives; 
(2) encourage the translation of research into innovations, 
processes, and products, including by— 
(A) engaging researchers on topics relevant to United 
States societal, national, and geostrategic challenges, 
including by educating researchers on engaging with end 
users and the public; 
(B) advancing novel approaches and reducing barriers 
to technology transfer, including through intellectual prop-
erty frameworks between academia and industry, nonprofit 
entities, venture capital communities, and approaches to 
technology transfer for applications with public benefit that 
may not rely on traditional commercialization tools; and 
(C) establishing partnerships that connect researchers 
and research products to businesses, accelerators, and 
incubators that enable research uptake, prototype develop-
ment and scaling, entrepreneurial education, and the 
formation and growth of new companies; 
(3) develop mutually-beneficial research and technology 
development partnerships and collaborations among institu-
tions of higher education, including historically Black colleges 
and universities, Tribal Colleges or Universities, minority- 
serving institutions, emerging research institutions, EPSCoR 
institutions, and nonprofit organizations, labor organizations,