Department above the number authorized under 
subsection (c)(1).’’. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that the Office of Cyber Issues established under 
section 1(g) of the State Department Basic Authorities 
Act of 1956 (as amended by subsection (a) of this section) 
should be a Bureau of the Department of State headed 
by an Assistant Secretary, subject to the rule of construc-
tion specified in paragraph (5)(B) of such section 1(g). 
(c) UNITED NATIONS.—The Permanent Representa-
tive of the United States to the United Nations shall use 
the voice, vote, and influence of the United States to op-
pose any measure that is inconsistent with the United 
States international cyberspace policy described in section 
3. 
SEC. 5. INTERNATIONAL CYBERSPACE EXECUTIVE AR-
RANGEMENTS. 
(a) IN GENERAL.—The President is encouraged to 
enter into executive arrangements with foreign govern-
ments that support the United States international cyber-
space policy described in section 3. 
(b) TRANSMISSION TO CONGRESS.—The text of any 
executive arrangement (including the text of any oral ar-
rangement, which shall be reduced to writing) entered into 
by the United States under subsection (a) shall be trans-
mitted to the Committee on Foreign Affairs of the House 
of Representatives and the Committee on Foreign Rela-
tions of the Senate not later than 5 days after such ar-
rangement is signed or otherwise agreed to, together with 
an explanation of such arrangement, its purpose, how such 
arrangement is consistent with the United States inter-
national cyberspace policy described in section 3, and how 
such arrangement will be implemented. 
(c) STATUS REPORT.—Not later than 1 year after 
the text of an executive arrangement is transmitted to 
Congress pursuant to subsection (b) and annually there-
after for 7 years, or until such an arrangement has been 
discontinued, the President shall report to the Committee 
on Foreign Affairs of the House of Representatives and 
the Committee on Foreign Relations of the Senate on the 
status of such arrangement, including an evidence-based 
assessment of whether all parties to such arrangement 
have fulfilled their commitments under such arrangement 
and if not, what steps the United States has taken or 
plans to take to ensure all such commitments are fulfilled, 
whether the stated purpose of such arrangement is being 
achieved, and whether such arrangement positively im-
pacts building of cyber norms internationally. Each such 
report shall include metrics to support its findings.
(d) EXISTING EXECUTIVE ARRANGEMENTS.—Not 
later than 60 days after the date of the enactment of this 
Act, the President shall satisfy the requirements of sub-
section (c) for the following executive arrangements al-
ready in effect: 
(1) The arrangement announced between the 
United States and Japan on April 25, 2014. 
(2) The arrangement announced between the 
United States and the United Kingdom on January 
16, 2015. 
(3) The arrangement announced between the 
United States and China on September 25, 2015. 
(4) The arrangement announced between the 
United States and Korea on October 16, 2015. 
(5) The arrangement announced between the 
United States and Australia on January 19, 2016. 
(6) The arrangement announced between the 
United States and India on June 7, 2016. 
(7) The arrangement announced between the 
United States and Argentina on April 27, 2017. 
(8) The arrangement announced between the 
United States and Kenya on June 22, 2017. 
(9) The arrangement announced between the 
United States and Israel on June 26, 2017.
(10) Any other similar bilateral or multilateral 
arrangement announced before the date of the en-
actment of this Act. 
SEC. 6. INTERNATIONAL STRATEGY FOR CYBERSPACE. 
(a) STRATEGY REQUIRED.—Not later than 1 year 
after the date of the enactment of this Act, the Secretary 
of State, in coordination with the heads of other relevant 
Federal departments and agencies, shall produce a strat-
egy relating to United States international policy with re-
gard to cyberspace. 
(b) ELEMENTS.—The strategy required under sub-
section (a) shall include the following: 
(1) A review of actions and activities under-
taken to support the United States international 
cyberspace policy described in section 3. 
(2) A plan of action to guide the diplomacy of 
the Department of State with regard to foreign 
countries, including conducting bilateral and multi-
lateral activities to develop the norms of responsible 
international behavior in cyberspace, and status re-
view of existing efforts in multilateral fora to obtain 
agreements on international norms in cyberspace. 
(3) A review of alternative concepts with regard 
to international norms in cyberspace offered by for-
eign countries.
(4) A detailed description of new and evolving 
threats to United States national security in cyber-
space from foreign countries, State-sponsored actors, 
and private actors to Federal and private sector in-
frastructure of the United States, intellectual prop-
erty in the United States, and the privacy of citizens 
of the United States. 
(5) A review of policy tools available to the 
President to deter and de-escalate tensions with for-
eign countries, State-sponsored actors, and private 
actors regarding threats in cyberspace, and to what 
degree such tools have been used and whether or not 
such tools have been effective. 
(6) A review of resources required to conduct 
activities to build responsible norms of international 
cyber behavior. 
(7) A clarification of the applicability of inter-
national laws and norms, including the law of armed 
conflict, to the use of ICT. 
(8) A clarification that countries that fall victim 
to malicious cyber activities have the right to take 
proportionate countermeasures under international 
law, including exercising the right to collective and 
individual self-defense.
(9) A plan of action to guide the diplomacy of 
the Department of State with regard to existing mu-
tual defense agreements, including the inclusion in 
such agreements of information relating to the appli-
cability of malicious cyber activities in triggering 
mutual defense obligations. 
(c) FORM OF STRATEGY.— 
(1) PUBLIC
AVAILABILITY.—The strategy re-
quired under subsection (a) shall be available to the 
public in unclassified form, including through publi-
cation in the Federal Register. 
(2) CLASSIFIED ANNEX.— 
(A) IN
GENERAL.—If the Secretary of 
State determines that such is appropriate, the 
strategy required under subsection (a) may in-
clude a classified annex consistent with United 
States national security interests. 
(B) RULE OF CONSTRUCTION.—Nothing in 
this subsection may be construed as authorizing 
the public disclosure of an unclassified annex 
under subparagraph (A). 
(d) BRIEFING.—Not later than 30 days after the pro-
duction of the strategy required under subsection (a), the 
Secretary of State shall brief the Committee on Foreign 
Affairs of the House of Representatives and the Com-
mittee on Foreign Relations of the Senate on such strat-
egy, including any material contained in a classified 
annex. 
(e) UPDATES.—The strategy required under sub-
section (a) shall be updated— 
(1) not later than 90 days after there has been 
any material change to United States policy as de-
scribed in such strategy; and 
(2) not later than 1 year after each inaugura-
tion of a new President. 
(f) PREEXISTING REQUIREMENT.—Upon the produc-
tion and publication of the report required under section 
3(c) of the Presidential Executive Order No. 13800 on 
Strengthening the Cybersecurity of Federal Networks and 
Critical Infrastructure on May 11, 2017, such report shall 
be considered as satisfying the requirement under sub-
section (a) of this section. 
SEC. 7. ANNUAL COUNTRY REPORTS ON HUMAN RIGHTS 
PRACTICES. 
(a) REPORT
RELATING
TO
ECONOMIC
ASSIST-
ANCE.—Section 116 of the Foreign Assistance Act of 
1961 (22 U.S.C. 2151n) is amended by adding at the end 
the following new subsection: 
‘‘(h)(1) The report required by subsection (d) shall 
include an assessment of freedom of expression with re-
spect to electronic information in each foreign country. 
Such assessment shall consist of the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in each country inappropriately 
attempt to filter, censor, or otherwise block or re-
move nonviolent expression of political or religious 
opinion or belief via the internet, including electronic 
mail, as well as a description of the means by which 
such authorities attempt to block or remove such ex-
pression. 
‘‘(B) An assessment of the extent to which gov-
ernment authorities in each country have persecuted 
or otherwise punished an individual or group for the 
nonviolent expression of political, religious, or ideo-
logical opinion or belief via the internet, including 
electronic mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in each country have sought to 
inappropriately collect, request, obtain, or disclose 
personally identifiable information of a person in 
connection with such person’s nonviolent expression 
of political, religious, or ideological opinion or belief, 
including expression that would be protected by the 
International Covenant on Civil and Political Rights.
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without regard to the principles of pri-
vacy, human rights, democracy, and rule of law. 
‘‘(2) In compiling data and making assessments for 
the purposes of paragraph (1), United States diplomatic 
personnel shall consult with human rights organizations, 
technology and internet companies, and other appropriate 
nongovernmental organizations. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has 
the meaning given such term in section 2510 of title 
18, United States Code; 
‘‘(B) the term ‘internet’ has the meaning given 
such term in section 231(e)(3) of the Communica-
tions Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and 
‘‘(D) the term ‘wire communication’ has the 
meaning given such term in section 2510 of title 18, 
United States Code.’’. 
(b) REPORT RELATING TO SECURITY ASSISTANCE.— 
Section 502B of the Foreign Assistance Act of 1961 (22 
U.S.C. 2304) is amended—
(1) by redesignating the second subsection (i) 
(relating to child marriage status) as subsection (j); 
and 
(2) by adding at the end the following new sub-
section: 
‘‘(k)(1) The report required by subsection (b) shall 
include an assessment of freedom of expression with re-
spect to electronic information in each foreign country. 
Such assessment shall consist of the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in each country inappropriately 
attempt to filter, censor, or otherwise block or re-
move nonviolent expression of political or religious 
opinion or belief via the internet, including electronic 
mail, as well as a description of the means by which 
such authorities attempt to block or remove such ex-
pression. 
‘‘(B) An assessment of the extent to which gov-
ernment authorities in each country have persecuted 
or otherwise punished an individual or group for the 
nonviolent expression of political, religious, or ideo-
logical opinion or belief via the internet, including 
electronic mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in each country have sought to
inappropriately collect, request, obtain, or disclose 
personally identifiable information of a person in 
connection with such person’s nonviolent expression 
of political, religious, or ideological opinion or belief, 
including expression that would be protected by the 
International Covenant on Civil and Political Rights. 
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without regard to the principles of pri-
vacy, human rights, democracy, and rule of law. 
‘‘(2) In compiling data and making assessments for 
the purposes of paragraph (1), United States diplomatic 
personnel shall consult with human rights organizations, 
technology and internet companies, and other appropriate 
nongovernmental organizations. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has 
the meaning given such term in section 2510 of title 
18, United States Code; 
‘‘(B) the term ‘internet’ has the meaning given 
such term in section 231(e)(3) of the Communica-
tions Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and
‘‘(D) the term ‘wire communication’ has the 
meaning given such term in section 2510 of title 18, 
United States Code.’’. 
Passed the House of Representatives January 17, 
2018. 
Attest: 
Clerk.
115TH CONGRESS 
2D SESSION 
H. R. 3776 
AN ACT 
To support United States international cyber 
diplomacy, and for other purposes.