146 
‘‘(2) carry out research associated with miti-
gating privacy risks associated with information sys-
tems and networks, including to inform periodic up-
dates to the privacy risk management framework de-
veloped pursuant to paragraph (1); 
‘‘(3) in consultation with the Director of the 
Digital Privacy Agency, the Federal Trade Commis-
sion, and other related sector-specific risk manage-
ment agencies, support the development of guidance 
and risk profiles to help organizations utilize the pri-
vacy risk management framework developed pursu-
ant to paragraph (1), to the extent practicable, to 
adopt privacy requirements and regulations estab-
lished by the Federal Government, States, and inter-
national policymakers; 
‘‘(4) support activities to improve the efficacy 
and applicability of privacy-preserving computing, 
de-identification techniques and processes, and other 
technological means of mitigating individuals’ pri-
vacy risks by enhancing predictability, manage-
ability, disassociability, and confidentiality; 
‘‘(5) support and strategically engage in the de-
velopment of voluntary, consensus-based technical 
standards for privacy-enhanced systems and net-
works, including international technical standards, 
VerDate Sep 11 2014 
02:53 Apr 27, 2023
Jkt 039200
PO 00000
Frm 00146
Fmt 6652
Sfmt 6201
E:\BILLS\H2701.IH
H2701
pbinns on DSKJLVW7X2PROD with $$_JOB
147 
through open, transparent, and consensus-based 
processes; and 
‘‘(6) conduct such other activities as determined 
necessary by the Director to help public and private 
sector organizations mitigate the privacy risks asso-
ciated with information systems and networks.’’. 
SEC. 602. NATIONAL PRIVACY AWARENESS AND EDU-
CATION INITIATIVE. 
(a) NATIONAL PRIVACY AWARENESS
AND EDU-
CATION INITIATIVE.—The Director of the National Insti-
tute of Standards and Technology, in consultation and col-
laboration with relevant Federal agencies, State, local, and 
Tribal governments, industry, educational institutions, 
civil society, and other nonprofit organizations, as appro-
priate, shall carry out privacy-related education and public 
awareness activities, including— 
(1) the widespread dissemination of privacy-re-
lated technical standards and best practices identi-
fied by the Director; 
(2) efforts to make privacy-related technical 
standards and best practices usable by individuals, 
small-to-medium-sized businesses, educational insti-
tutions, and State, local, and Tribal governments; 
VerDate Sep 11 2014 
02:53 Apr 27, 2023
Jkt 039200
PO 00000
Frm 00147
Fmt 6652
Sfmt 6201
E:\BILLS\H2701.IH
H2701
pbinns on DSKJLVW7X2PROD with $$_JOB
148 
(3) activities to increase the awareness of pri-
vacy risks, individual privacy rights, and responsibil-
ities; and 
(4) supporting the development of technical 
standards and best practices to describe privacy-re-
lated tasks, knowledge, skills, abilities, competencies, 
and work roles to guide career development, edu-
cation, and training activities in industry, academia, 
nonprofit organizations, and the Federal Govern-
ment, including support for credentialing. 
(b) CONSIDERATIONS.—In carrying out the authority 
described in subsection (a), the Director of the National 
Institute of Standards and Technology, in consultation 
with appropriate Federal agencies, shall leverage, to the 
extent practicable, the national cybersecurity awareness 
and education program under section 303 of the Cyberse-
curity Enhancement Act of 2014 (15 U.S.C. 7443). 
(c) BIENNIAL BRIEFINGS.—Not later than one year 
after the date of the enactment of this Act and biennially 
thereafter, the Director of the National Institute of Stand-
ards and Technology shall brief the Committee on Com-
merce, Science, and Transportation of the Senate and the 
Committee on Science, Space, and Technology of the 
House of Representatives on the activities carried out pur-
suant to subsection (a). 
VerDate Sep 11 2014 
02:53 Apr 27, 2023
Jkt 039200
PO 00000
Frm 00148
Fmt 6652
Sfmt 6201
E:\BILLS\H2701.IH
H2701
pbinns on DSKJLVW7X2PROD with $$_JOB
149 
(d) AUTHORIZATION OF APPROPRIATIONS.—There is 
authorized to be appropriated to carry out this section 
$3,000,000 for each of fiscal years 2024 through 2028. 
SEC. 603. NATIONAL SCIENCE FOUNDATION PRIVACY RE-
SEARCH. 
The Director of the National Science Foundation 
shall make awards on a competitive basis to institutions 
of higher education or non-profit organizations (or con-
sortia of such institutions or organizations) to support 
multidisciplinary and transdisciplinary socio-technical re-
search to design, prototype, and translate to practice pri-
vacy-preserving technologies and increase understanding 
of the human, social, behavioral, and economic dimensions 
of such potential technologies, including research on the 
following: 
(1) Public understanding, expectations, and 
perspectives on privacy. 
(2) Consumer privacy rights, including right to 
access, correction, deletion, data portability, indi-
vidual autonomy, impermanence, and to be in-
formed. 
(3) Privacy governance and transparency, in-
cluding notice and consent processes and the efficacy 
of privacy policies. 
VerDate Sep 11 2014 
02:53 Apr 27, 2023
Jkt 039200
PO 00000
Frm 00149
Fmt 6652
Sfmt 6201
E:\BILLS\H2701.IH
H2701
pbinns on DSKJLVW7X2PROD with $$_JOB
150 
(4) Empowering consumers for data ownership 
and control. 
(5) Privacy by design. 
(6) Privacy-preserving automated decision-mak-
ing systems and human review of automated deci-
sion-making systems. 
(7) Ensuring privacy in consumer surveillance 
systems. 
(8) User interfaces, including design elements 
that deliberately obscure, mislead, coerce, or deceive 
consumers. 
(9) Privacy implications of emerging tech-
nologies. 
(10) Incentives to implement privacy protec-
tions. 
Æ 
VerDate Sep 11 2014 
02:53 Apr 27, 2023
Jkt 039200
PO 00000
Frm 00150
Fmt 6652
Sfmt 6301
E:\BILLS\H2701.IH
H2701
pbinns on DSKJLVW7X2PROD with $$_JOB