114 
by non-intelligence community partners to counter 
such foreign malign influence. 
‘‘(c) FORM.—Each report submitted under subsection 
(a) may be submitted in classified form, but if so submitted 
shall include an unclassified executive summary. 
‘‘(d) DEFINITIONS.—In this section: 
‘‘(1) COVERED
COUNTRY.—The term ‘covered 
country’ means— 
‘‘(A) China; 
‘‘(B) Iran; 
‘‘(C) North Korea; 
‘‘(D) Russia; and 
‘‘(E) any other foreign country— 
‘‘(i) from which the Director of Na-
tional Intelligence determines a biological 
threat emanates; or 
‘‘(ii) that the Director determines has 
a known history of, or has been assessed as 
having conditions present for, infectious dis-
ease outbreaks or epidemics. 
‘‘(2) FOREIGN BIOLOGICAL THREAT.—The term 
‘foreign biological threat’ means biological warfare, 
bioterrorism, naturally occurring infectious diseases, 
or accidental exposures to biological materials, with-
out regard to whether the threat originates from a 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00114
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
115 
state actor, a non-state actor, natural conditions, or 
an undetermined source. 
‘‘(3) FOREIGN
MALIGN
INFLUENCE.—The term 
‘foreign malign influence’ has the meaning given such 
term in section 119C(e). 
‘‘(4) 
NON-INTELLIGENCE
COMMUNITY
PART-
NER.—The term ‘non-intelligence community partner’ 
means a Federal department or agency that is not an 
element of the intelligence community.’’. 
(b) FIRST REPORT.—Not later than 120 days after the 
date of the enactment of this Act, the Director of National 
Intelligence shall submit to the congressional intelligence 
committees the first report required under section 1111 of 
the National Security Act of 1947, as added by subsection 
(a). 
SEC. 705. ANNUAL REPORTS ON DOMESTIC ACTIVITIES OF 
INTELLIGENCE COMMUNITY. 
(a) SENSE OF CONGRESS.—It is the sense of Congress 
that— 
(1) the Federal Bureau of Investigation and the 
Department of Homeland Security conduct vital work 
in enforcing the rule of law and safeguarding the peo-
ple of the United States from harm; 
(2) the Intelligence Reform and Terrorism Pre-
vention Act of 2004 (Public Law 108–458; 118 Stat. 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00115
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
116 
3638) sought to facilitate greater information sharing 
between law enforcement and intelligence commu-
nities for the purpose of thwarting attacks on the 
homeland from international terrorist organizations; 
(3) National Intelligence Program funds should 
be expended only in support of intelligence activities 
with a foreign nexus, consistent with the definition of 
‘‘intelligence’’ provided by Congress in section 3 of the 
National Security Act of 1947 (50 U.S.C. 3003); and 
(4) the intelligence community should not engage 
in the collection, assessment, or analysis of informa-
tion that pertains exclusively to United States persons 
absent a foreign nexus. 
(b) REQUIREMENT.—Title XI of the National Security 
Act of 1947 (50 U.S.C. 3231 et seq.), as amended by section 
704, is further amended by adding at the end the following 
new section (and conforming the table of contents at the 
beginning of such Act accordingly): 
‘‘SEC. 1112. ANNUAL REPORTS ON THE DOMESTIC ACTIVI-
TIES OF THE INTELLIGENCE COMMUNITY. 
‘‘(a) REPORTS.—Not later than January 31 of each 
year, the Director of National Intelligence shall submit to 
the congressional intelligence committees a report— 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00116
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
117 
‘‘(1) identifying all domestic activities under-
taken by each element of the intelligence community 
during the prior fiscal year; and 
‘‘(2) for each activity identified under paragraph 
(1), a statement of the legal authority authorizing 
such activity to be undertaken. 
‘‘(b) FORM.—Each report under subsection (a) shall 
be submitted in unclassified form, but may include a classi-
fied annex.’’. 
(c) FIRST REPORT.—Not later than 90 days after the 
date of the enactment of this Act, the Director of National 
Intelligence shall submit to the congressional intelligence 
committees the first report required under section 1112 of 
the National Security Act of 1947, as added by subsection 
(a). 
SEC. 
706. 
ANNUAL 
REPORTS 
ON 
CERTAIN 
CYBER 
VULNERABILITIES 
PROCURED 
BY 
INTEL-
LIGENCE COMMUNITY AND FOREIGN COM-
MERCIAL 
PROVIDERS 
OF 
CYBER 
VULNERABILITIES. 
(a) REQUIREMENT.—Title XI of the National Security 
Act of 1947 (50 U.S.C. 3231 et seq.), as amended by section 
705, is further amended by adding at the end the following 
new section (and conforming the table of contents at the 
beginning of such Act accordingly): 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00117
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
118 
‘‘SEC. 
1113. 
ANNUAL 
REPORTS 
ON 
CERTAIN 
CYBER 
VULNERABILITIES 
PROCURED 
BY 
INTEL-
LIGENCE COMMUNITY AND FOREIGN COM-
MERCIAL 
PROVIDERS 
OF 
CYBER 
VULNERABILITIES. 
‘‘(a) ANNUAL REPORTS.—On an annual basis through 
2026, the Director of the Central Intelligence Agency and 
the Director of the National Security Agency, in coordina-
tion with the Director of National Intelligence, shall jointly 
submit to the congressional intelligence committees a report 
containing information on foreign commercial providers 
and the cyber vulnerabilities procured by the intelligence 
community through foreign commercial providers. 
‘‘(b) ELEMENTS.—Each report under subsection (a) 
shall include, with respect to the period covered by the re-
port, the following: 
‘‘(1) A description of each cyber vulnerability 
procured through a foreign commercial provider, in-
cluding— 
‘‘(A) a description of the vulnerability; 
‘‘(B) the date of the procurement; 
‘‘(C) whether the procurement consisted of 
only 
that 
vulnerability 
or 
included 
other 
vulnerabilities; 
‘‘(D) the cost of the procurement; 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00118
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
119 
‘‘(E) the identity of the commercial pro-
vider and, if the commercial provider was not 
the original supplier of the vulnerability, a de-
scription of the original supplier; 
‘‘(F) the country of origin of the vulner-
ability; and 
‘‘(G) an assessment of the ability of the in-
telligence community to use the vulnerability, in-
cluding whether such use will be operational or 
for research and development, and the approxi-
mate timeline for such use. 
‘‘(2) An assessment of foreign commercial pro-
viders that— 
‘‘(A) pose a significant threat to the na-
tional security of the United States; or 
‘‘(B) have provided cyber vulnerabilities to 
any foreign government that— 
‘‘(i) has used the cyber vulnerabilities 
to target United States persons, the United 
States Government, journalists, or dis-
sidents; or 
‘‘(ii) has an established pattern or 
practice of violating human rights or sup-
pressing dissent. 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00119
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
120 
‘‘(3) An assessment of whether the intelligence 
community has conducted business with the foreign 
commercial providers identified under paragraph (2) 
during the 5-year period preceding the date of the re-
port. 
‘‘(c) FORM.—Each report under subsection (a) may be 
submitted in classified form. 
‘‘(d) DEFINITIONS.—In this section: 
‘‘(1) COMMERCIAL PROVIDER.—The term ‘com-
mercial provider’ means any person that sells, or acts 
as a broker, for a cyber vulnerability. 
‘‘(2) CYBER VULNERABILITY.—The term ‘cyber 
vulnerability’ means any tool, exploit, vulnerability, 
or code that is intended to compromise a device, net-
work, or system, including such a tool, exploit, vul-
nerability, or code procured by the intelligence com-
munity for purposes of research and development.’’. 
(b) FIRST REPORT.—Not later than 90 days after the 
date of the enactment of this Act, the Director of the Central 
Intelligence Agency and the Director of the National Secu-
rity Agency shall jointly submit to the appropriate congres-
sional committees the first report required under section 
1113 of the National Security Act of 1947, as added by sub-
section (a). 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00120
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
121 
SEC. 707. IMPROVEMENTS TO ANNUAL REPORT ON DEMO-
GRAPHIC DATA OF EMPLOYEES OF INTEL-
LIGENCE COMMUNITY. 
Section 5704(c) of the Damon Paul Nelson and Mat-
thew Young Pollard Intelligence Authorization Act for Fis-
cal Years 2018, 2019, and 2020 (50 U.S.C. 3334b(c)) is 
amended— 
(1) in the matter preceding paragraph (1), by 
striking ‘‘After making available a report under sub-
section (b), the Director of National Intelligence shall 
annually provide a report’’ and inserting ‘‘Not later 
than March 31 of each year, the Director of National 
Intelligence shall provide a report’’; and 
(2) by striking paragraph (1) and inserting the 
following new paragraph: 
‘‘(1) demographic data and information on the 
status of diversity and inclusion efforts of the intel-
ligence community, including demographic data re-
lating to— 
‘‘(A) the average years of service; 
‘‘(B) the average number of years of service 
for each level in the General Schedule, Senior 
Executive Service, Senior Intelligence Service, or 
equivalent; and 
‘‘(C) career categories;’’. 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00121
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
122 
SEC. 708. NATIONAL INTELLIGENCE ESTIMATE ON ESCA-
LATION AND DE-ESCALATION OF GRAY ZONE 
ACTIVITIES IN GREAT POWER COMPETITION. 
(a) FINDINGS.—Congress finds the following: 
(1) The conventional power of the United States 
has driven foreign adversaries to a level of competi-
tion that does not always depend on military con-
frontation with the United States. 
(2) Rather than challenging the United States in 
a manner that could provoke a kinetic military re-
sponse, foreign adversaries of the United States have 
turned to carrying out gray zone activities to advance 
the interests of such adversaries, weaken the power of 
the United States, and erode the norms that underpin 
the United States-led international order. 
(3) Gray zone activity falls on a spectrum of at-
tribution and deniability that ranges from covert ad-
versary operations, to detectible covert adversary op-
erations, to unattributable adversary operations, to 
deniable adversary operations, to open adversary op-
erations. 
(4) To adequately address such a shift to gray 
zone activity, the United States must understand 
what actions tend to either escalate or de-escalate such 
activity by our adversaries. 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00122
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
123 
(5) The laws, principles, and values of the 
United States are strategic advantages in great power 
competition with authoritarian foreign adversaries 
that carry out gray zone activities, because such laws, 
principles, and values increase the appeal of the gov-
ernance model of the United States, and the United 
States-led international order, to states and peoples 
around the world. 
(6) The international security environment has 
demonstrated numerous examples of gray zone activi-
ties carried out by foreign adversaries, including the 
following activities of foreign adversaries: 
(A) Information operations, such as efforts 
by Russia to influence the 2020 United States 
Federal elections (as described in the March 15, 
2021, intelligence community assessment of the 
Office of the Director of National Intelligence 
made publicly available on March 15, 2021). 
(B) Adversary political coercion operations, 
such as the wielding of energy by Russia, par-
ticularly in the context of Ukrainian gas pipe-
lines, to coerce its neighbors into compliance 
with its policies. 
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00123
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS
124 
(C) Cyber operations, such as the use by 
China of cyber tools to conduct industrial espio-
nage. 
(D) Provision of support to proxy forces, 
such as the support provided by Iran to 
Hezbollah and Shia militia groups. 
(E) Provocation by armed forces controlled 
by the government of the foreign adversary 
through measures that do not rise to the level of 
an armed attack, such as the use of the China 
Coast Guard and maritime militia by China to 
harass the fishing vessels of other countries in the 
South China Sea. 
(F) Alleged uses of lethal force on foreign 
soil, such as the 2018 poisoning of Sergei 
Skripal in London by Russia. 
(G) The potential use by an adversary of 
technology that causes anomalous health inci-
dents among United States Government per-
sonnel. 
(b) NATIONAL INTELLIGENCE ESTIMATE.— 
(1) REQUIREMENT.—The Director of National 
Intelligence, acting through the National Intelligence 
Council, shall produce a National Intelligence Esti-
mate on how foreign adversaries use gray zone activi-
VerDate Sep 11 2014 
22:55 Oct 28, 2021
Jkt 029200
PO 00000
Frm 00124
Fmt 6652
Sfmt 6203
E:\BILLS\H5412.RH
H5412
pamtmann on DSKBC07HB2PROD with BILLS