priorities, influence events and foreign percep-
tions, and counter threats’’; 
(D) 
North 
Korea, 
for 
‘‘previously 
conduct[ing] cyber-attacks against US commer-
cial entities—specifically, Sony Pictures Enter-
tainment in 2014’’; 
(E) terrorists, who ‘‘use the Internet to or-
ganize, recruit, spread propaganda, raise funds, 
collect intelligence, inspire action by followers, 
and coordinate operations’’; and 
(F) criminals, who ‘‘are also developing 
and using sophisticated cyber tools for a variety 
of purposes including theft, extortion, and fa-
cilitation of other criminal activities’’. 
(11) On May 11, 2017, President Donald J. 
Trump issued Executive Order 13800 (82 Fed. Reg. 
22391), entitled ‘‘Strengthening the Cybersecurity of 
Federal Networks and Infrastructure’’, which— 
(A) designates the Secretary of State to 
lead an interagency effort to develop an engage-
ment strategy for international cooperation in 
cybersecurity; and 
(B) notes that ‘‘the United States is espe-
cially dependent on a globally secure and resil-
ient internet and must work with allies and 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
other partners toward maintaining . . . the pol-
icy of the executive branch to promote an open, 
interoperable, reliable, and secure internet that 
fosters efficiency, innovation, communication, 
and economic prosperity, while respecting pri-
vacy and guarding against disruption, fraud, 
and theft’’. 
SEC. 3. DEFINITIONS. 
In this Act: 
(1) APPROPRIATE
CONGRESSIONAL
COMMIT-
TEES.—The term ‘‘appropriate congressional com-
mittees’’ means the Committee on Foreign Relations 
of the Senate and the Committee on Foreign Affairs 
of the House of Representatives. 
(2) 
INFORMATION
AND
COMMUNICATIONS 
TECHNOLOGY; ICT.—The terms ‘‘information and 
communications technology’’ and ‘‘ICT’’ include 
hardware, software, and other products or services 
primarily intended to fulfill or enable the function of 
information processing and communication by elec-
tronic means, including transmission and display, in-
cluding via the Internet. 
(3) EXECUTIVE AGENCY.—The term ‘‘Executive 
agency’’ has the meaning given the term in section 
105 of title 5, United States Code. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
SEC. 4. UNITED STATES INTERNATIONAL CYBERSPACE 
POLICY. 
(a) IN GENERAL.—It is the policy of the United 
States to work internationally to promote an open, inter-
operable, reliable, unfettered, and secure Internet gov-
erned by the multi-stakeholder model, which— 
(1) promotes human rights, democracy, and 
rule of law, including freedom of expression, innova-
tion, communication, and economic prosperity; and 
(2) respects privacy and guards against decep-
tion, fraud, and theft. 
(b) IMPLEMENTATION.—In implementing the policy 
described in subsection (a), the President, in consultation 
with outside actors, including private sector companies, 
nongovernmental organizations, security researchers, and 
other relevant stakeholders, in the conduct of bilateral and 
multilateral relations, shall pursue the following objectives: 
(1) Clarifying the applicability of international 
laws and norms to the use of ICT. 
(2) Reducing and limiting the risk of escalation 
and retaliation in cyberspace, damage to critical in-
frastructure, and other malicious cyber activity that 
impairs the use and operation of critical infrastruc-
ture that provides services to the public. 
(3) Cooperating with like-minded democratic 
countries that share common values and cyberspace 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
policies with the United States, including respect for 
human rights, democracy, and the rule of law, to ad-
vance such values and policies internationally. 
(4) Encouraging the responsible development of 
new, innovative technologies and ICT products that 
strengthen a secure Internet architecture that is ac-
cessible to all. 
(5) Securing and implementing commitments 
on responsible country behavior in cyberspace based 
upon accepted norms, including the following: 
(A) Countries should not conduct, or 
knowingly support, cyber-enabled theft of intel-
lectual property, including trade secrets or 
other confidential business information, with 
the intent of providing competitive advantages 
to companies or commercial sectors. 
(B) Countries should take all appropriate 
and reasonable efforts to keep their territories 
clear of intentionally wrongful acts using ICTs 
in violation of international commitments. 
(C) Countries should not conduct or know-
ingly support ICT activity that, contrary to 
international law, intentionally damages or oth-
erwise impairs the use and operation of critical 
infrastructure providing services to the public, 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
and should take appropriate measures to pro-
tect their critical infrastructure from ICT 
threats. 
(D) Countries should not conduct or know-
ingly support malicious international activity 
that, contrary to international law, harms the 
information systems of authorized emergency 
response teams (also known as ‘‘computer 
emergency response teams’’ or ‘‘cybersecurity 
incident response teams’’) of another country or 
authorize emergency response teams to engage 
in malicious international activity. 
(E) Countries should respond to appro-
priate requests for assistance to mitigate mali-
cious ICT activity emanating from their terri-
tory and aimed at the critical infrastructure of 
another country. 
(F) Countries should not restrict cross-bor-
der data flows or require local storage or proc-
essing of data. 
(G) Countries should protect the exercise 
of human rights and fundamental freedoms on 
the Internet and commit to the principle that 
the human rights that people have offline 
should also be protected online. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
(6) Advancing, encouraging, and supporting the 
development and adoption of internationally recog-
nized technical standards and best practices. 
SEC. 5. DEPARTMENT OF STATE RESPONSIBILITIES. 
(a) IN GENERAL.—Section 1 of the State Depart-
ment Basic Authorities Act of 1956 (22 U.S.C. 2651a) 
is amended— 
(1) by redesignating subsection (g) as sub-
section (h); and 
(2) by inserting after subsection (f) the fol-
lowing: 
‘‘(g) OFFICE OF INTERNATIONAL CYBERSPACE POL-
ICY.— 
‘‘(1) IN GENERAL.—There is established, within 
the Department of State, an Office of International 
Cyberspace Policy (referred to in this subsection as 
the ‘Office’). The head of the Office shall have the 
rank and status of ambassador and shall be ap-
pointed by the President, by and with the advice and 
consent of the Senate. 
‘‘(2) DUTIES.— 
‘‘(A) IN GENERAL.—The head of the Of-
fice shall perform such duties and exercise such 
powers as the Secretary of State shall prescribe, 
including implementing the policy of the United 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
States described in section 4 of the Cyber Di-
plomacy Act of 2019. 
‘‘(B) DUTIES DESCRIBED.—The principal 
duties and responsibilities of the head of the 
Office shall be— 
‘‘(i) to serve as the principal cyber-
space policy official within the senior man-
agement of the Department of State and 
as the advisor to the Secretary of State for 
cyberspace issues; 
‘‘(ii) to lead the Department of 
State’s diplomatic cyberspace efforts, in-
cluding efforts relating to international cy-
bersecurity, Internet access, Internet free-
dom, digital economy, cybercrime, deter-
rence and international responses to cyber 
threats, and other issues that the Sec-
retary assigns to the Office; 
‘‘(iii) to promote an open, interoper-
able, reliable, unfettered, and secure infor-
mation and communications technology in-
frastructure globally; 
‘‘(iv) to represent the Secretary of 
State in interagency efforts to develop and 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
advance the policy described in section 4 of 
the Cyber Diplomacy Act of 2019; 
‘‘(v) to coordinate cyberspace efforts 
and other relevant functions, including 
countering terrorists’ use of cyberspace, 
within the Department of State and with 
other components of the United States 
Government; 
‘‘(vi) to act as a liaison to public and 
private sector entities on relevant inter-
national cyberspace issues; 
‘‘(vii) to lead United States Govern-
ment efforts to establish a global deter-
rence framework for malicious cyber activ-
ity; 
‘‘(viii) to develop and execute adver-
sary-specific strategies to influence adver-
sary decisionmaking through the imposi-
tion of costs and deterrence strategies, in 
coordination with other relevant Executive 
agencies; 
‘‘(ix) to advise the Secretary and co-
ordinate with foreign governments on ex-
ternal responses to national-security-level 
cyber incidents, including coordination on 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
diplomatic response efforts to support al-
lies threatened by malicious cyber activity, 
in conjunction with members of the North 
Atlantic Treaty Organization and other 
like-minded countries; 
‘‘(x) to promote the adoption of na-
tional processes and programs that enable 
threat detection, prevention, and response 
to malicious cyber activity emanating from 
the territory of a foreign country, including 
as such activity relates to the United 
States’ European allies, as appropriate; 
‘‘(xi) to promote the building of for-
eign capacity to protect the global network 
with the goal of enabling like-minded par-
ticipation in deterrence frameworks; 
‘‘(xii) to promote the maintenance of 
an open and interoperable Internet gov-
erned by the multi-stakeholder model, in-
stead of by centralized government control; 
‘‘(xiii) to promote an international 
regulatory environment for technology in-
vestments and the Internet that benefits 
United States economic and national secu-
rity interests; 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(xiv) to promote cross-border flow of 
data and combat international initiatives 
seeking to impose unreasonable require-
ments on United States businesses; 
‘‘(xv) to promote international policies 
to protect the integrity of United States 
and international telecommunications in-
frastructure from foreign-based, cyber-en-
abled threats; 
‘‘(xvi) to lead engagement, in coordi-
nation with Executive agencies, with for-
eign governments on cyberspace and digital 
economy issues as described in the Cyber 
Diplomacy Act of 2019; 
‘‘(xvii) to promote international poli-
cies to secure radio frequency spectrum for 
United States businesses and national se-
curity needs; 
‘‘(xviii) to promote and protect the ex-
ercise of human rights, including freedom 
of speech and religion, through the Inter-
net; 
‘‘(xix) to build capacity of United 
States diplomatic officials to engage on 
cyber issues; 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(xx) to encourage the development 
and adoption by foreign countries of inter-
nationally recognized standards, policies, 
and best practices; and 
‘‘(xxi) to consult, as appropriate, with 
other Executive agencies with related func-
tions vested in such Executive agencies by 
law. 
‘‘(3) QUALIFICATIONS.—The head of the Office 
should be an individual of demonstrated competency 
in the fields of— 
‘‘(A) cybersecurity and other relevant cyber 
issues; and 
‘‘(B) international diplomacy. 
‘‘(4) ORGANIZATIONAL
PLACEMENT.—During 
the 4-year period beginning on the date of the enact-
ment of the Cyber Diplomacy Act of 2019, the head 
of the Office shall report to the Under Secretary for 
Political Affairs or to an official holding a higher po-
sition than the Under Secretary for Political Affairs 
in the Department of State. After the conclusion of 
such period, the head of the Office shall report to 
an appropriate Under Secretary or to an official 
holding a higher position than Under Secretary. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(5) RULE
OF
CONSTRUCTION.—Nothing in 
this subsection may be construed to preclude— 
‘‘(A) the Office from being elevated to a 
Bureau within the Department of State; or 
‘‘(B) the head of the Office from being ele-
vated to an Assistant Secretary, if such an As-
sistant Secretary position does not increase the 
number of Assistant Secretary positions at the 
Department above the number authorized under 
subsection (c)(1).’’. 
(b) SENSE OF CONGRESS.—It is the sense of Con-
gress that the Office of International Cyberspace Policy 
established under section 1(g) of the State Department 
Basic Authorities Act of 1956, as added by subsection (a), 
should be a Bureau of the Department of State and the 
head of such Office should report directly to the Secretary 
of State or Deputy Secretary of State. 
(c) UNITED NATIONS.—The Permanent Representa-
tive of the United States to the United Nations should 
use the voice, vote, and influence of the United States to 
oppose any measure that is inconsistent with the policy 
described in section 4. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
SEC. 6. INTERNATIONAL CYBERSPACE EXECUTIVE AR-
RANGEMENTS. 
(a) IN GENERAL.—The President is encouraged to 
enter into executive arrangements with foreign govern-
ments that support the policy described in section 4. 
(b) TRANSMISSION TO CONGRESS.—Section 112b of 
title 1, United States Code, is amended— 
(1) in subsection (a) by striking ‘‘International 
Relations’’ and inserting ‘‘Foreign Affairs’’; 
(2) in subsection (e)(2)(B), by adding at the 
end the following: 
‘‘(iii) A bilateral or multilateral cyberspace 
agreement.’’; 
(3) by redesignating subsection (f) as sub-
section (g); and 
(4) by inserting after subsection (e) the fol-
lowing: 
‘‘(f) With respect to any bilateral or multilateral 
cyberspace agreement under subsection (e)(2)(B)(iii) and 
the information required to be transmitted to Congress 
under subsection (a), or with respect to any arrangement 
that seeks to secure commitments on responsible country 
behavior in cyberspace consistent with section 4(b)(5) of 
the Cyber Diplomacy Act of 2019, the Secretary of State 
shall provide an explanation of such arrangement, includ-
ing— 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(1) the purpose of such arrangement; 
‘‘(2) how such arrangement is consistent with 
the policy described in section 4 of such Act; and 
‘‘(3) how such arrangement will be imple-
mented.’’. 
(c) STATUS REPORT.—During the 5-year period im-
mediately following the transmittal to Congress of an 
agreement described in section 112b(e)(2)(B)(iii) of title 
1, United States Code, as added by subsection (b)(2), or 
until such agreement has been discontinued, if discon-
tinued within 5 years, the President shall— 
(1) notify the appropriate congressional com-
mittees if another country fails to adhere to signifi-
cant commitments contained in such agreement; and 
(2) describe the steps that the United States 
has taken or plans to take to ensure that all such 
commitments are fulfilled. 
(d) EXISTING EXECUTIVE ARRANGEMENTS.—Not 
later than 180 days after the date of the enactment of 
this Act, the Secretary of State shall brief the appropriate 
congressional committees regarding any executive bilateral 
or multilateral cyberspace arrangement in effect before the 
date of enactment of this Act, including— 
(1) the arrangement announced between the 
United States and Japan on April 25, 2014; 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
(2) the arrangement announced between the 
United States and the United Kingdom on January 
16, 2015; 
(3) the arrangement announced between the 
United States and China on September 25, 2015; 
(4) the arrangement announced between the 
United States and Korea on October 16, 2015; 
(5) the arrangement announced between the 
United States and Australia on January 19, 2016; 
(6) the arrangement announced between the 
United States and India on June 7, 2016; 
(7) the arrangement announced between the 
United States and Argentina on April 27, 2017; 
(8) the arrangement announced between the 
United States and Kenya on June 22, 2017; 
(9) the arrangement announced between the 
United States and Israel on June 26, 2017; 
(10) the arrangement announced between the 
United States and France on February 9, 2018; 
(11) the arrangement announced between the 
United States and Brazil on May 14, 2018; and 
(12) any other similar bilateral or multilateral 
arrangement announced before such date of enact-
ment. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
SEC. 7. INTERNATIONAL STRATEGY FOR CYBERSPACE. 
(a) STRATEGY REQUIRED.—Not later than 1 year 
after the date of the enactment of this Act, the President, 
acting through the Secretary of State, and in coordination 
with the heads of other relevant Federal departments and 
agencies, shall develop a strategy relating to United States 
engagement with foreign governments on international 
norms with respect to responsible state behavior in cyber-
space. 
(b) ELEMENTS.—The strategy required under sub-
section (a) shall include the following: 
(1) A review of actions and activities under-
taken to support the policy described in section 4. 
(2) A plan of action to guide the diplomacy of 
the Department of State with regard to foreign 
countries, including— 
(A) conducting bilateral and multilateral 
activities to develop norms of responsible coun-
try behavior in cyberspace consistent with the 
objectives under section 4(b)(5); and 
(B) reviewing the status of existing efforts 
in relevant multilateral fora, as appropriate, to 
obtain commitments on international norms in 
cyberspace. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
(3) A review of alternative concepts with regard 
to international norms in cyberspace offered by for-
eign countries. 
(4) A detailed description of new and evolving 
threats in cyberspace from foreign adversaries, state- 
sponsored actors, and private actors to— 
(A) United States national security; 
(B) Federal and private sector cyberspace 
infrastructure of the United States; 
(C) intellectual property in the United 
States; and 
(D) the privacy of citizens of the United 
States. 
(5) A review of policy tools available to the 
President to deter and de-escalate tensions with for-
eign countries, state-sponsored actors, and private 
actors regarding threats in cyberspace, the degree to 
which such tools have been used, and whether such 
tools have been effective deterrents. 
(6) A review of resources required to conduct 
activities to build responsible norms of international 
cyber behavior. 
(7) A plan of action, developed in consultation 
with relevant Federal departments and agencies as 
the President may direct, to guide the diplomacy of 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
the Department of State with regard to inclusion of 
cyber issues in mutual defense agreements. 
(c) FORM OF STRATEGY.— 
(1) PUBLIC
AVAILABILITY.—The strategy re-
quired under subsection (a) shall be available to the 
public in unclassified form, including through publi-
cation in the Federal Register. 
(2) CLASSIFIED ANNEX.—The strategy required 
under subsection (a) may include a classified annex, 
consistent with United States national security inter-
ests, if the Secretary of State determines that such 
annex is appropriate. 
(d) BRIEFING.—Not later than 30 days after the 
completion of the strategy required under subsection (a), 
the Secretary of State shall brief the appropriate congres-
sional committees on the strategy, including any material 
contained in a classified annex. 
(e) UPDATES.—The strategy required under sub-
section (a) shall be updated— 
(1) not later than 90 days after any material 
change to United States policy described in such 
strategy; and 
(2) not later than 1 year after the inauguration 
of each new President. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
(f) 
PREEXISTING
REQUIREMENT.—The 
Rec-
ommendations to the President on Protecting American 
Cyber Interests through International Engagement, pre-
pared by the Office of the Coordinator for Cyber Issues 
on May 31, 2018, pursuant to section 3(c) of Executive 
Order 13800 (82 Fed. Reg. 22391), shall be deemed to 
satisfy the requirement under subsection (a). 
SEC. 8. ANNUAL COUNTRY REPORTS ON HUMAN RIGHTS 
PRACTICES. 
Section 116 of the Foreign Assistance Act of 1961 
(22 U.S.C. 2151n) is amended by adding at the end the 
following: 
‘‘(h)(1) The report required under subsection (d) 
shall include an assessment of freedom of expression with 
respect to electronic information in each foreign country 
that includes the following: 
‘‘(A) An assessment of the extent to which gov-
ernment authorities in the country inappropriately 
attempt to filter, censor, or otherwise block or re-
move nonviolent expression of political or religious 
opinion or belief through the Internet, including 
electronic mail, and a description of the means by 
which such authorities attempt to inappropriately 
block or remove such expression. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(B) An assessment of the extent to which gov-
ernment authorities in the country have persecuted 
or otherwise punished, arbitrarily and without due 
process, an individual or group for the nonviolent ex-
pression of political, religious, or ideological opinion 
or belief through the Internet, including electronic 
mail. 
‘‘(C) An assessment of the extent to which gov-
ernment authorities in the country have sought, in-
appropriately and with malicious intent, to collect, 
request, obtain, or disclose without due process per-
sonally identifiable information of a person in con-
nection with that person’s nonviolent expression of 
political, religious, or ideological opinion or belief, in-
cluding expression that would be protected by the 
International Covenant on Civil and Political Rights, 
adopted at New York December 16, 1966, and en-
tered into force March 23, 1976, as interpreted by 
the United States. 
‘‘(D) An assessment of the extent to which wire 
communications and electronic communications are 
monitored without due process and in contravention 
to United States policy with respect to the principles 
of privacy, human rights, democracy, and rule of 
law. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
‘‘(2) In compiling data and making assessments 
under paragraph (1), United States diplomatic personnel 
should consult with relevant entities, including human 
rights organizations, the private sector, the governments 
of like-minded countries, technology and Internet compa-
nies, and other appropriate nongovernmental organiza-
tions or entities. 
‘‘(3) In this subsection— 
‘‘(A) the term ‘electronic communication’ has 
the meaning given the term in section 2510 of title 
18, United States Code; 
‘‘(B) the term ‘Internet’ has the meaning given 
the term in section 231(e)(3) of the Communications 
Act of 1934 (47 U.S.C. 231(e)(3)); 
‘‘(C) the term ‘personally identifiable informa-
tion’ means data in a form that identifies a par-
ticular person; and 
‘‘(D) the term ‘wire communication’ has the 
meaning given the term in section 2510 of title 18, 
United States Code.’’. 
SEC. 9. GAO REPORT ON CYBER THREATS AND DATA MIS-
USE. 
Not later than 1 year after the date of the enactment 
of this Act, the Comptroller General of the United States 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
shall submit a report and provide a briefing to the appro-
priate congressional committees that includes— 
(1) a description of the primary threats to the 
personal information of United States citizens from 
international actors within the cyberspace domain; 
(2) an assessment of the extent to which United 
States diplomatic processes and other efforts with 
foreign countries, including through multilateral 
fora, bilateral engagements, and negotiated cyber-
space agreements, strengthen the protections of 
United States citizens’ personal information; 
(3) an assessment of the Department of State’s 
report in response to Executive Order 13800 (82 
Fed. Reg. 22391), which documents an engagement 
strategy for international cooperation in cybersecu-
rity and the extent to which this strategy addresses 
protections of United States citizens’ personal infor-
mation; 
(4) recommendations for United States policy-
makers on methods to properly address and 
strengthen the protections of United States citizens’ 
personal information from misuse by international 
actors; and 
(5) any other matters deemed relevant by the 
Comptroller General. 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
SEC. 10. SENSE OF CONGRESS ON CYBERSECURITY SANC-
TIONS AGAINST NORTH KOREA AND CYBER-
SECURITY LEGISLATION IN VIETNAM. 
It is the sense of Congress that— 
(1) the President should designate all entities 
that knowingly engage in significant activities under-
mining cybersecurity through the use of computer 
networks or systems against foreign persons, govern-
ments, or other entities on behalf of the Government 
of North Korea, consistent with section 209(b) of 
the North Korea Sanctions and Policy Enhancement 
Act of 2016 (22 U.S.C. 9229(b)); 
(2) the cybersecurity law approved by the Na-
tional Assembly of Vietnam on June 12, 2018— 
(A) may not be consistent with inter-
national trade standards; and 
(B) may endanger the privacy of citizens 
of Vietnam; and 
(3) the Government of Vietnam should work 
with the United States and other countries to ensure 
that such law meets all relevant international stand-
ards. 
SEC. 11. RULE OF CONSTRUCTION. 
(a) RULE OF CONSTRUCTION.—Nothing in this Act 
may be construed to infringe upon the related functions 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6201
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS
of any Executive agency vested in such agency under any 
provision of law. 
Æ 
VerDate Sep 11 2014 
22:02 Feb 02, 2019
Jkt 089200
PO 00000
Frm 00029
Fmt 6652
Sfmt 6301
E:\BILLS\H739.IH
H739
pbinns on DSK79D2C42PROD with BILLS