I 
110TH CONGRESS 
1ST SESSION H. R. 2290 
To amend title 18, United States Code, to better assure cyber-security, 
and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
MAY 14, 2007 
Mr. SCHIFF (for himself, Mr. CHABOT, Mr. DELAHUNT, Mr. DANIEL E. LUN-
GREN of California, Mr. DAVIS of Alabama, Ms. CARSON, Mr. GOOD-
LATTE, Ms. ESHOO, Mr. WEXLER, Mr. ISSA, Ms. LINDA T. SA´NCHEZ of 
California, Mr. MCCAUL of Texas, and Mr. THOMPSON of Mississippi) in-
troduced the following bill; which was referred to the Committee on the 
Judiciary 
A BILL 
To amend title 18, United States Code, to better assure 
cyber-security, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Cyber-Security En-
hancement Act of 2007’’. 
SEC. 2. PERSONAL ELECTRONIC RECORDS. 
Section 1030(a)(2) of title 18, United States Code, 
is amended— 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
(1) by striking ‘‘or’’ at the end of subparagraph 
(B); and 
(2) by adding at the end the following: 
‘‘(D) a unique electronic identification 
number, address or routing code, or access de-
vice (as defined in section 1029(e)(1)), from a 
protected computer; or’’. 
SEC. 3. USE OF FULL INTERSTATE AND FOREIGN COM-
MERCE POWER FOR CRIMINAL PENALTIES. 
(a) BROADENING OF SCOPE.—Section 1030(e)(2)(B) 
of title 18, United States Code, is amended by inserting 
‘‘or affecting’’ after ‘‘which is used in’’. 
(b) ELIMINATION OF REQUIREMENT OF AN INTER-
STATE OR FOREIGN COMMUNICATION FOR CERTAIN OF-
FENSES INVOLVING PROTECTED COMPUTERS.—Section 
1030(a)(2)(C) of title 18, United States Code, is amended 
by striking ‘‘if the conduct involved an interstate or for-
eign communication’’. 
SEC. 4. RICO PREDICATES. 
Section 1961(1)(B) of title 18, United States Code, 
is amended by inserting ‘‘section 1030 (relating to fraud 
and related activity in connection with computers),’’ before 
‘‘section 1084’’. 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
SEC. 5. CYBER-EXTORTION. 
Section 1030(a)(7) of title 18, United States Code, 
is amended by inserting ‘‘, or to access without authoriza-
tion or exceed authorized access to a protected computer’’ 
after ‘‘cause damage to a protected computer’’. 
SEC. 6. CONSPIRACY TO COMMIT CYBER-CRIMES. 
Section 1030(b) of title 18, United States Code, is 
amended by inserting ‘‘or conspires’’ after ‘‘attempts’’. 
SEC. 7. PENALTIES FOR SECTION 1030 VIOLATIONS. 
Subsection (c) of section 1030 of title 18, United 
States Code, is amended to read as follows: 
‘‘(c) The court, in imposing sentence for an offense 
under subsection (a) or (b), shall, in addition to any other 
sentence imposed and irrespective of any provision of 
State law, order that the person forfeit to the United 
States— 
‘‘(1) the person’s interest in any personal prop-
erty that was used or intended to be used to commit 
or to facilitate the commission of such violation; and 
‘‘(2) any property, real or personal, constituting 
or derived from, any proceeds the person obtained, 
directly or indirectly, as a result of such violation.’’. 
SEC. 8. DIRECTIVE TO SENTENCING COMMISSION. 
(a) DIRECTIVE.—Pursuant to its authority under 
section 994(p) of title 28, United States Code, and in ac-
cordance with this section, the United States Sentencing 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
Commission shall forthwith review its guidelines and pol-
icy statements applicable to persons convicted of offenses 
under sections 1028, 1028A, 1030, 1030A, 2511 and 
2701 of title 18, United States Code and any other rel-
evant provisions of law, in order to reflect the intent of 
Congress that such penalties be increased in comparison 
to those currently provided by such guidelines and policy 
statements. 
(b) REQUIREMENTS.—In determining its guidelines 
and policy statements on the appropriate sentence for the 
crimes enumerated in paragraph (a), the Commission shall 
consider the extent to which the guidelines and policy 
statements may or may not account for the following fac-
tors in order to create an effective deterrent to computer 
crime and the theft or misuse of personally identifiable 
data— 
(1) the level of sophistication and planning in-
volved in such offense; 
(2) whether such offense was committed for 
purpose of commercial advantage or private financial 
benefit; 
(3) the potential and actual loss resulting from 
the offense; 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
(4) whether the defendant acted with intent to 
cause either physical or property harm in commit-
ting the offense; 
(5) the extent to which the offense violated the 
privacy rights of individuals; 
(6) the effect of the offense upon the operations 
of a government agency of the United States, or of 
a State or local government; 
(7) whether the offense involved a computer 
used by the government in furtherance of national 
defense, national security or the administration of 
justice; 
(8) whether the offense was intended to, or had 
the effect of significantly interfering with or dis-
rupting a critical infrastructure; 
(9) whether the offense was intended to, or had 
the effect of creating a threat to public health or 
safety, injury to any person, or death; and 
(10) whether the defendant purposefully in-
volved a juvenile in the commission of the offense to 
avoid punishment. 
(c) ADDITIONAL REQUIREMENTS.—In carrying out 
this section, the Commission shall— 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
(1) assure reasonable consistency with other 
relevant directives and with other sentencing guide-
lines; 
(2) account for any additional aggravating or 
mitigating circumstances that might justify excep-
tions to the generally applicable sentencing ranges; 
(3) make any conforming changes to the sen-
tencing guidelines; and 
(4) assure that the guidelines adequately meet 
the purposes of sentencing as set forth in section 
3553(a)(2) of title 18, United States Code. 
SEC. 9. DAMAGE TO PROTECTED COMPUTERS. 
(a) Section 1030(a)(5)(B) of title 18, United States 
Code, is amended— 
(1) by striking ‘‘or’’ at the end of clause (iv); 
(2) by inserting ‘‘or’’ at the end of clause (v); 
and 
(3) by adding at the end the following: 
‘‘(vi) damage affecting ten or more 
protected computers during any 1-year pe-
riod.’’. 
(b) Section 2332b(g)(5)(B)(i) of title 18, United 
States Code, is amended by striking ‘‘(v) (relating to pro-
tection of computers)’’ and inserting ‘‘(vi) (relating to the 
protection of computers)’’. 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
SEC. 10. ADDITIONAL FUNDING FOR RESOURCES TO INVES-
TIGATE AND PROSECUTE CRIMINAL ACTIV-
ITY INVOLVING COMPUTERS. 
(a) ADDITIONAL FUNDING FOR RESOURCES.— 
(1) AUTHORIZATION.—In addition to amounts 
otherwise authorized for resources to investigate and 
prosecute criminal activity involving computers, 
there are authorized to be appropriated for each of 
the fiscal years 2007 through 2011— 
(A) $10,000,000 to the Director of the 
United States Secret Service; 
(B) $10,000,000 to the Attorney General 
for the Criminal Division of the Department of 
Justice; and 
(C) $10,000,000 to the Director of the 
Federal Bureau of Investigation. 
(2) AVAILABILITY.—Any amounts appropriated 
under paragraph (1) shall remain available until ex-
pended. 
(b) USE OF ADDITIONAL FUNDING.—Funds made 
available under subsection (a) shall be used by the Direc-
tor of the United States Secret Service, the Director of 
the Federal Bureau of Investigation, and the Attorney 
General, for the United States Secret Service, the Federal 
Bureau of Investigation, and the criminal division of the 
Department of Justice, respectively, to— 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS
(1) hire and train law enforcement officers to— 
(A) investigate crimes committed through 
the use of computers and other information 
technology, including through the use of the 
Internet; and 
(B) assist in the prosecution of such 
crimes; and 
(2) procure advanced tools of forensic science to 
investigate, prosecute, and study such crimes. 
Æ 
VerDate Aug 31 2005 
03:52 May 15, 2007
Jkt 059200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6301
E:\BILLS\H2290.IH
H2290
jcorcoran on PROD1PC62 with BILLS