HR 1560 RFS
‘‘(III) minimize any impact on 
privacy and civil liberties; 
‘‘(IV) 
provide 
data 
integrity 
through the prompt removal and de-
struction of obsolete or erroneous 
names and personal information that 
is unrelated to the cybersecurity risk 
or incident information shared and re-
tained by the Center in accordance 
with this section; 
‘‘(V) include requirements to 
safeguard cyber threat indicators and 
defensive measures retained by the 
Center, including information that is 
proprietary or business-sensitive, or 
that may be used to identify specific 
persons from unauthorized access or 
acquisition; 
‘‘(VI) protect the confidentiality 
of cyber threat indicators and defen-
sive measures associated with specific 
persons to the greatest extent prac-
ticable; and 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00079
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
HR 1560 RFS
‘‘(VII) ensure all relevant con-
stitutional, legal, and privacy protec-
tions are observed. 
‘‘(ii) SUBMISSION
TO
CONGRESS.— 
Not later than 180 days after the date of 
the enactment of this section and annually 
thereafter, the Chief Privacy Officer and 
the Officer for Civil Rights and Civil Lib-
erties of the Department, in consultation 
with the Privacy and Civil Liberties Over-
sight Board (established pursuant to sec-
tion 1061 of the Intelligence Reform and 
Terrorism Prevention Act of 2004 (42 
U.S.C. 2000ee)), shall submit to the Com-
mittee on Homeland Security of the House 
of Representatives and the Committee on 
Homeland Security and Governmental Af-
fairs of the Senate the policies and proce-
dures governing the sharing of cyber threat 
indicators, defensive measures, and infor-
mation related to cybersecurity risks and 
incidents described in clause (i) of sub-
paragraph (A). 
‘‘(iii) PUBLIC NOTICE AND ACCESS.— 
The Under Secretary for Cybersecurity 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00080
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
HR 1560 RFS
and Infrastructure Protection, in consulta-
tion with the Chief Privacy Officer and the 
Chief Civil Rights and Civil Liberties Offi-
cer of the Department, and the Privacy 
and Civil Liberties Oversight Board (estab-
lished pursuant to section 1061 of the In-
telligence Reform and Terrorism Preven-
tion Act of 2004 (42 U.S.C. 2000ee)), 
shall ensure there is public notice of, and 
access to, the policies and procedures gov-
erning the sharing of cyber threat indica-
tors, defensive measures, and information 
related to cybersecurity risks and inci-
dents. 
‘‘(iv) 
CONSULTATION.—The 
Under 
Secretary for Cybersecurity and Infrastruc-
ture Protection when establishing policies 
and procedures to support privacy and civil 
liberties may consult with the National In-
stitute of Standards and Technology. 
‘‘(B) IMPLEMENTATION.—The Chief Pri-
vacy Officer of the Department, on an ongoing 
basis, shall— 
‘‘(i) monitor the implementation of 
the policies and procedures governing the 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00081
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
HR 1560 RFS
sharing of cyber threat indicators and de-
fensive measures established pursuant to 
clause (i) of subparagraph (A); 
‘‘(ii) regularly review and update pri-
vacy impact assessments, as appropriate, 
to ensure all relevant constitutional, legal, 
and privacy protections are being followed; 
‘‘(iii) work with the Under Secretary 
for Cybersecurity and Infrastructure Pro-
tection to carry out paragraphs (10) and 
(11) of subsection (c); 
‘‘(iv) annually submit to the Com-
mittee on Homeland Security of the House 
of Representatives and the Committee on 
Homeland Security and Governmental Af-
fairs of the Senate a report that contains 
a review of the effectiveness of such poli-
cies and procedures to protect privacy and 
civil liberties; and 
‘‘(v) ensure there are appropriate 
sanctions in place for officers, employees, 
or agents of the Department who inten-
tionally or willfully conduct activities under 
this section in an unauthorized manner. 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00082
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
HR 1560 RFS
‘‘(C) INSPECTOR GENERAL REPORT.—The 
Inspector General of the Department, in con-
sultation with the Privacy and Civil Liberties 
Oversight Board and the Inspector General of 
each Federal agency that receives cyber threat 
indicators or defensive measures shared with 
the Center under this section, shall, not later 
than two years after the date of the enactment 
of this subsection and periodically thereafter 
submit to the Committee on Homeland Security 
of the House of Representatives and the Com-
mittee on Homeland Security and Govern-
mental Affairs of the Senate a report con-
taining a review of the use of cybersecurity risk 
information shared with the Center, including 
the following: 
‘‘(i) A report on the receipt, use, and 
dissemination of cyber threat indicators 
and defensive measures that have been 
shared with Federal entities under this 
section. 
‘‘(ii) Information on the use by the 
Center of such information for a purpose 
other than a cybersecurity purpose. 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00083
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS
HR 1560 RFS
‘‘(iii) A review of the type of informa-
tion shared with the Center under this sec-
tion. 
‘‘(iv) A review of the actions taken by 
the Center based on such information. 
‘‘(v) The appropriate metrics that 
exist to determine the impact, if any, on 
privacy and civil liberties as a result of the 
sharing of such information with the Cen-
ter. 
‘‘(vi) A list of other Federal agencies 
receiving such information. 
‘‘(vii) A review of the sharing of such 
information within the Federal Govern-
ment to identify inappropriate stove piping 
of such information. 
‘‘(viii) Any recommendations of the 
Inspector General of the Department for 
improvements or modifications to informa-
tion sharing under this section. 
‘‘(D) PRIVACY AND CIVIL LIBERTIES OFFI-
CERS REPORT.—The Chief Privacy Officer and 
the Chief Civil Rights and Civil Liberties Offi-
cer of the Department, in consultation with the 
Privacy and Civil Liberties Oversight Board, 
VerDate Sep 11 2014 
22:57 Jul 15, 2016
Jkt 059200
PO 00000
Frm 00084
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.RFS
H1560
sradovich on DSK3GMQ082PROD with BILLS