I 
118TH CONGRESS 
1ST SESSION H. R. 4623 
To establish a voluntary program to identify and promote internet-connected 
products that meet industry-leading cybersecurity and data security 
standards, guidelines, best practices, methodologies, procedures, and proc-
esses, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 13, 2023 
Mr. LIEU introduced the following bill; which was referred to the Committee 
on Energy and Commerce 
A BILL 
To establish a voluntary program to identify and promote 
internet-connected products that meet industry-leading 
cybersecurity and data security standards, guidelines, 
best practices, methodologies, procedures, and processes, 
and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Cyber Shield Act of 
2023’’. 
SEC. 2. DEFINITIONS. 
In this Act— 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
Committee shall provide recommendations to the 
Secretary regarding— 
(A) the format and content of the Cyber 
Shield labels required to be established under 
section 4; and 
(B) the process for identifying, estab-
lishing, reporting on, adopting, maintaining, 
and promoting compliance with the voluntary 
cybersecurity and data security benchmarks re-
quired to be established under section 4. 
(2) PUBLIC
AVAILABILITY
OF
RECOMMENDA-
TIONS.—The Advisory Committee shall publish, and 
provide the public with an opportunity to comment 
on, the recommendations provided to the Secretary 
under paragraph (1). 
(c) MEMBERS, CHAIR, AND DUTIES.— 
(1) APPOINTMENT.— 
(A) IN
GENERAL.—The Advisory Com-
mittee shall be composed of members appointed 
by the Secretary from among individuals who 
are specially qualified to serve on the Advisory 
Committee based on the education, training, or 
experience of those individuals. 
(B) 
REPRESENTATION.—Members 
ap-
pointed under subparagraph (A) shall include— 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
(i) representatives of the covered 
products industry, including small, me-
dium, and large businesses; 
(ii) cybersecurity experts, including 
independent cybersecurity researchers that 
specialize in areas such as cryptanalysis, 
hardware and software security, wireless 
and network security, cloud security, and 
data privacy; 
(iii) public interest advocates; 
(iv) a liaison from the Information Se-
curity and Privacy Advisory Board estab-
lished under section 21(a) of the National 
Institute of Standards and Technology Act 
(15 U.S.C. 278g–4(a)) who is a member of 
that Board as described in paragraph (3) 
of such section 21(a); 
(v) Federal employees with expertise 
in certification, covered devices, or cyberse-
curity, including employees of— 
(I) the Department of Commerce; 
(II) the National Institute of 
Standards and Technology; 
(III) the Federal Trade Commis-
sion; 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
(IV) the Federal Communications 
Commission; and 
(V) the Consumer Product Safety 
Commission; and 
(vi) an expert who shall ensure that, 
subject to subsection (e), the Advisory 
Committee conforms to and complies with 
the requirements under the Federal Advi-
sory Committee Act (5 U.S.C. App.). 
(C) LIMITATION.—In appointing members 
under subparagraph (A), the Secretary shall en-
sure that— 
(i) each interest group described in 
clauses (i), (ii), (iii), and (v) of subpara-
graph (B) is proportionally represented on 
the Advisory Committee, including— 
(I) businesses of each size de-
scribed in clause (i) of that subpara-
graph; 
(II) Federal employees with ex-
pertise in each subject described in 
clause (v) of that subparagraph; and 
(III) Federal employees from 
each agency described in subclauses 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
(I) through (V) of clause (v) of that 
subparagraph; and 
(ii) no single interest group described 
in clauses (i), (ii), (iii), and (v) of subpara-
graph (B) is represented by a majority of 
the members of the Advisory Committee. 
(2) CHAIR.—The Secretary shall designate a 
member of the Advisory Committee to serve as 
Chair. 
(3) PAY.—Members of the Advisory Committee 
shall serve without pay, except that the Secretary 
may allow a member, while attending meetings of 
the Advisory Committee or a subcommittee of the 
Advisory Committee, per diem, travel, and transpor-
tation expenses authorized under section 5703 of 
title 5, United States Code. 
(d) SUPPORT STAFF; ADMINISTRATIVE SERVICES.— 
(1) SUPPORT STAFF.—The Secretary shall pro-
vide support staff for the Advisory Committee. 
(2) ADMINISTRATIVE SERVICES.—Upon the re-
quest of the Advisory Committee, the Secretary shall 
provide any information, administrative services, and 
supplies that the Secretary considers necessary for 
the Advisory Committee to carry out the duties and 
powers of the Advisory Committee. 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
(e) NO TERMINATION.—Section 14 of the Federal 
Advisory Committee Act (5 U.S.C. App.) shall not apply 
to the Advisory Committee. 
(f) AUTHORIZATION
OF APPROPRIATIONS.—There 
are authorized to be appropriated such sums as may be 
necessary to carry out this section. 
SEC. 4. CYBER SHIELD PROGRAM. 
(a) ESTABLISHMENT OF PROGRAM.— 
(1) IN GENERAL.—The Secretary shall establish 
a voluntary program to identify and certify covered 
products through voluntary certification and labeling 
of, and other forms of communication about, covered 
products and subsets of covered products that meet 
industry-leading cybersecurity and data security 
benchmarks to enhance cybersecurity and protect 
data. 
(2) LABELS.—Labels applied to covered prod-
ucts under the Cyber Shield program— 
(A) shall be digital and, if feasible, phys-
ical and affixed to the covered product or pack-
aging; and 
(B) may be in the form of different grades 
that display the extent to which a covered prod-
uct meets the industry-leading cybersecurity 
and data security benchmarks. 
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS
(b) CONSULTATION.—Not later than 90 days after 
the date of enactment of this Act, the Secretary shall es-
tablish a process for consulting interested parties, the Sec-
retary of Health and Human Services, the Commissioner 
of Food and Drugs, the Secretary of Homeland Security, 
and the heads of other Federal agencies in carrying out 
the Cyber Shield program. 
(c) DUTIES.—In carrying out the Cyber Shield pro-
gram, the Secretary— 
(1) shall— 
(A) by convening and consulting interested 
parties and the heads of other Federal agencies, 
establish and maintain cybersecurity and data 
security benchmarks for covered products with 
the Cyber Shield label to ensure that those cov-
ered products perform better than counterparts 
of those covered products that do not have the 
Cyber Shield label; and 
(B) in carrying out subparagraph (A)— 
(i) engage in an open public review 
and comment process; 
(ii) in consultation with the Advisory 
Committee, identify and apply cybersecu-
rity and data security benchmarks to dif-
VerDate Sep 11 2014 
22:48 Aug 05, 2023
Jkt 039200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H4623.IH
H4623
kjohnson on DSK79L0C42PROD with BILLS