(2) LIMITATION.—The authority provided in 
paragraph (1) does not include the intentional or 
reckless operation of any defensive measure that is 
designed or deployed to destroy, render unusable (in 
whole or in part), substantially harm, or initiate a 
new action, process, or procedure on an information 
system or information stored on, processed by, or 
transiting such information system not belonging 
to— 
(A) the private entity operating such de-
fensive measure; or 
(B) a non-Federal entity or a Federal enti-
ty that has provided written authorization to 
that private entity for operation of such defen-
sive measure in accordance with this subsection. 
(3) CONSTRUCTION.—Nothing in this sub-
section shall be construed— 
(A) to authorize the use of a defensive 
measure other than as provided in this sub-
section; or 
(B) to limit otherwise lawful activity. 
(c) AUTHORIZATION FOR SHARING OR RECEIVING 
CYBER
THREAT
INDICATORS
OR
DEFENSIVE
MEAS-
URES.— 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00008
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(1) IN GENERAL.—Except as provided in para-
graph (2) and notwithstanding any other provision 
of law, a non-Federal entity may, for a cybersecurity 
purpose and consistent with the requirement under 
subsection (d)(2) to remove personal information of, 
or information identifying, a specific person not di-
rectly related to a cybersecurity threat and the pro-
tection of classified information— 
(A) share a cyber threat indicator or de-
fensive measure with any other non-Federal en-
tity or an appropriate Federal entity (other 
than the Department of Defense or any compo-
nent of the Department, including the National 
Security Agency); and 
(B) receive a cyber threat indicator or de-
fensive measure from any other non-Federal en-
tity or an appropriate Federal entity. 
(2) LAWFUL RESTRICTION.—A non-Federal en-
tity receiving a cyber threat indicator or defensive 
measure from another non-Federal entity or a Fed-
eral entity shall comply with otherwise lawful restric-
tions placed on the sharing or use of such cyber 
threat indicator or defensive measure by the sharing 
non-Federal entity or Federal entity. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00009
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(3) CONSTRUCTION.—Nothing in this sub-
section shall be construed to— 
(A) authorize the sharing or receiving of a 
cyber threat indicator or defensive measure 
other than as provided in this subsection; 
(B) authorize the sharing or receiving of 
classified information by or with any person not 
authorized to access such classified information; 
(C) prohibit any Federal entity from en-
gaging in formal or informal technical discus-
sion regarding cyber threat indicators or defen-
sive measures with a non-Federal entity or from 
providing 
technical 
assistance 
to 
address 
vulnerabilities or mitigate threats at the request 
of such an entity; 
(D) authorize the Federal Government to 
conduct surveillance of any person; or 
(E) limit otherwise lawful activity. 
(d) PROTECTION AND USE OF INFORMATION.— 
(1) SECURITY OF INFORMATION.—A non-Fed-
eral entity monitoring an information system, oper-
ating a defensive measure, or providing or receiving 
a cyber threat indicator or defensive measure under 
this section shall implement an appropriate security 
control to protect against unauthorized access to, or 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00010
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
acquisition of, such cyber threat indicator or defen-
sive measure. 
(2) REMOVAL OF CERTAIN PERSONAL INFORMA-
TION.—A non-Federal entity sharing a cyber threat 
indicator pursuant to this Act shall, prior to such 
sharing, take reasonable efforts to— 
(A) review such cyber threat indicator to 
assess whether such cyber threat indicator con-
tains any information that the non-Federal en-
tity knows at the time of sharing to be personal 
information of, or information identifying, a 
specific person not directly related to a cyberse-
curity threat and remove such information; or 
(B) implement a technical capability con-
figured to remove any information contained 
within such indicator that the non-Federal enti-
ty knows at the time of sharing to be personal 
information of, or information identifying, a 
specific person not directly related to a cyberse-
curity threat. 
(3) USE OF CYBER THREAT INDICATORS AND 
DEFENSIVE
MEASURES
BY
NON-FEDERAL
ENTI-
TIES.—A non-Federal entity may, for a cybersecu-
rity purpose— 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00011
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(A) use a cyber threat indicator or defen-
sive measure shared or received under this sec-
tion to monitor or operate a defensive measure 
on— 
(i) an information system of such non- 
Federal entity; or 
(ii) an information system of another 
non-Federal entity or a Federal entity 
upon the written authorization of that 
other non-Federal entity or that Federal 
entity; and 
(B) otherwise use, retain, and further 
share such cyber threat indicator or defensive 
measure subject to— 
(i) an otherwise lawful restriction 
placed by the sharing non-Federal entity 
or Federal entity on such cyber threat in-
dicator or defensive measure; or 
(ii) an otherwise applicable provision 
of law. 
(4) USE
OF
CYBER
THREAT
INDICATORS
BY 
STATE, TRIBAL, OR LOCAL GOVERNMENT.— 
(A) LAW ENFORCEMENT USE.— 
(i) PRIOR
WRITTEN
CONSENT.—Ex-
cept as provided in clause (ii), a cyber 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00012
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
threat indicator shared with a State, tribal, 
or local government under this section 
may, with the prior written consent of the 
non-Federal entity sharing such indicator, 
be used by a State, tribal, or local govern-
ment for the purpose of preventing, inves-
tigating, or prosecuting a felonious crimi-
nal act. 
(ii) ORAL CONSENT.—If exigent cir-
cumstances prevent obtaining written con-
sent under clause (i), such consent may be 
provided orally with subsequent docu-
mentation of the consent. 
(B) EXEMPTION
FROM
DISCLOSURE.—A 
cyber threat indicator shared with a State, trib-
al, or local government under this section shall 
be— 
(i) deemed voluntarily shared informa-
tion; and 
(ii) exempt from disclosure under any 
State, tribal, or local law requiring disclo-
sure of information or records, except as 
otherwise required by applicable State, 
tribal, or local law requiring disclosure in 
any criminal prosecution. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00013
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(e) NO RIGHT OR BENEFIT.—The sharing of a cyber 
threat indicator with a non-Federal entity under this Act 
shall not create a right or benefit to similar information 
by such non-Federal entity or any other non-Federal enti-
ty. 
SEC. 4. SHARING OF CYBER THREAT INDICATORS AND DE-
FENSIVE 
MEASURES 
WITH 
APPROPRIATE 
FEDERAL ENTITIES OTHER THAN THE DE-
PARTMENT OF DEFENSE OR THE NATIONAL 
SECURITY AGENCY. 
(a) REQUIREMENT
FOR
POLICIES
AND
PROCE-
DURES.— 
(1) IN GENERAL.—Section 111 of the National 
Security Act of 1947, as inserted by section 2 of this 
Act, is amended by— 
(A) redesignating subsection (b) as sub-
section (c); and 
(B) by inserting after subsection (a) the 
following new subsection: 
‘‘(b) POLICIES
AND PROCEDURES
FOR SHARING 
WITH
THE APPROPRIATE FEDERAL ENTITIES OTHER 
THAN
THE DEPARTMENT
OF DEFENSE
OR
THE NA-
TIONAL SECURITY AGENCY.— 
‘‘(1) ESTABLISHMENT.—The President shall 
develop and submit to Congress policies and proce-
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00014
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
dures relating to the receipt of cyber threat indica-
tors and defensive measures by the Federal Govern-
ment. 
‘‘(2) REQUIREMENTS
CONCERNING
POLICIES 
AND PROCEDURES.—The policies and procedures re-
quired under paragraph (1) shall— 
‘‘(A) be developed in accordance with the 
privacy and civil liberties guidelines required 
under section 4(b) of the Protecting Cyber Net-
works Act; 
‘‘(B) ensure that— 
‘‘(i) a cyber threat indicator shared by 
a non-Federal entity with an appropriate 
Federal entity (other than the Department 
of Defense or any component of the De-
partment, including the National Security 
Agency) pursuant to section 3 of such Act 
is shared in real-time with all of the appro-
priate Federal entities (including all rel-
evant components thereof); 
‘‘(ii) the sharing of such cyber threat 
indicator with appropriate Federal entities 
is not subject to any delay, modification, or 
any other action without good cause that 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
could impede receipt by all of the appro-
priate Federal entities; and 
‘‘(iii) such cyber threat indicator is 
provided to each other Federal entity to 
which such cyber threat indicator is rel-
evant; and 
‘‘(C) ensure there— 
‘‘(i) is an audit capability; and 
‘‘(ii) are appropriate sanctions in 
place for officers, employees, or agents of 
a Federal entity who knowingly and will-
fully use a cyber threat indicator or de-
fense measure shared with the Federal 
Government by a non-Federal entity under 
the Protecting Cyber Networks Act other 
than in accordance with this section and 
such Act.’’. 
(2) SUBMISSION.—The President shall submit 
to Congress— 
(A) not later than 90 days after the date 
of the enactment of this Act, interim policies 
and 
procedures 
required 
under 
section 
111(b)(1) of the National Security Act of 1947, 
as inserted by paragraph (1) of this section; 
and 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(B) not later than 180 days after such 
date, final policies and procedures required 
under such section 111(b)(1). 
(b) PRIVACY AND CIVIL LIBERTIES.— 
(1) GUIDELINES OF ATTORNEY GENERAL.—The 
Attorney General, in consultation with the heads of 
the other appropriate Federal agencies and with offi-
cers designated under section 1062 of the Intel-
ligence Reform and Terrorism Prevention Act of 
2004 (42 U.S.C. 2000ee–1), shall develop and peri-
odically review guidelines relating to privacy and 
civil liberties that govern the receipt, retention, use, 
and dissemination of cyber threat indicators by a 
Federal entity obtained in accordance with this Act 
and the amendments made by this Act. 
(2) CONTENT.—The guidelines developed and 
reviewed under paragraph (1) shall, consistent with 
the need to protect information systems from cyber-
security threats and mitigate cybersecurity threats— 
(A) limit the impact on privacy and civil 
liberties of activities by the Federal Government 
under this Act, including guidelines to ensure 
that personal information of, or information 
identifying, specific persons is properly removed 
from information received, retained, used, or 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
disseminated by a Federal entity in accordance 
with this Act or the amendments made by this 
Act; 
(B) limit the receipt, retention, use, and 
dissemination of cyber threat indicators con-
taining personal information of, or information 
identifying, specific persons, including by estab-
lishing— 
(i) a process for the timely destruction 
of such information that is known not to 
be directly related to a use for a cybersecu-
rity purpose; 
(ii) specific limitations on the length 
of any period in which a cyber threat indi-
cator may be retained; and 
(iii) a process to inform recipients 
that such indicators may only be used for 
a cybersecurity purpose; 
(C) include requirements to safeguard 
cyber threat indicators containing personal in-
formation of, or identifying, specific persons 
from unauthorized access or acquisition, includ-
ing appropriate sanctions for activities by offi-
cers, employees, or agents of the Federal Gov-
ernment in contravention of such guidelines; 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00018
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(D) include procedures for notifying non- 
Federal entities and Federal entities if informa-
tion received pursuant to this section is known 
or determined by a Federal entity receiving 
such information not to constitute a cyber 
threat indicator; 
(E) be consistent with any other applicable 
provisions of law and the fair information prac-
tice principles set forth in appendix A of the 
document entitled ‘‘National Strategy for 
Trusted Identities in Cyberspace’’ and pub-
lished by the President in April, 2011; and 
(F) include steps that may be needed so 
that dissemination of cyber threat indicators is 
consistent with the protection of classified infor-
mation and other sensitive national security in-
formation. 
(c) NATIONAL CYBER THREAT INTELLIGENCE INTE-
GRATION CENTER.— 
(1) ESTABLISHMENT.—Title I of the National 
Security Act of 1947 (50 U.S.C. 3021 et seq.), as 
amended by section 2 of this Act, is further amend-
ed— 
(A) by redesignating section 119B as sec-
tion 119C; and 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00019
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(B) by inserting after section 119A the fol-
lowing new section: 
‘‘SEC. 119B. CYBER THREAT INTELLIGENCE INTEGRATION 
CENTER. 
‘‘(a) ESTABLISHMENT.—There is within the Office of 
the Director of National Intelligence a Cyber Threat Intel-
ligence Integration Center. 
‘‘(b) DIRECTOR.—There is a Director of the Cyber 
Threat Intelligence Integration Center, who shall be the 
head of the Cyber Threat Intelligence Integration Center, 
and who shall be appointed by the Director of National 
Intelligence. 
‘‘(c) PRIMARY MISSIONS.—The Cyber Threat Intel-
ligence Integration Center shall— 
‘‘(1) serve as the primary organization within 
the Federal Government for analyzing and inte-
grating all intelligence possessed or acquired by the 
United States pertaining to cyber threats; 
‘‘(2) ensure that appropriate departments and 
agencies have full access to and receive all-source in-
telligence support needed to execute the cyber threat 
intelligence activities of such agencies and to per-
form independent, alternative analyses; 
‘‘(3) disseminate cyber threat analysis to the 
President, the appropriate departments and agencies 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00020
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
of the Federal Government, and the appropriate 
committees of Congress; 
‘‘(4) coordinate cyber threat intelligence activi-
ties of the departments and agencies of the Federal 
Government; and 
‘‘(5) conduct strategic cyber threat intelligence 
planning for the Federal Government. 
‘‘(d) LIMITATIONS.—The Cyber Threat Intelligence 
Integration Center shall— 
‘‘(1) have not more than 50 permanent posi-
tions; 
‘‘(2) in carrying out the primary missions of the 
Center described in subsection (c), may not augment 
staffing through detailees, assignees, or core con-
tractor personnel or enter into any personal services 
contracts to exceed the limitation under paragraph 
(1); and 
‘‘(3) be located in a building owned or operated 
by an element of the intelligence community as of 
the date of the enactment of this section.’’. 
(4) TABLE OF CONTENTS AMENDMENTS.—The 
table of contents in the first section of the National 
Security Act of 1947, as amended by section 2 of 
this Act, is further amended by striking the item re-
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00021
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
lating to section 119B and inserting the following 
new items: 
‘‘Sec. 119B. Cyber Threat Intelligence Integration Center. 
‘‘Sec. 119C. National intelligence centers.’’. 
(d) INFORMATION SHARED WITH OR PROVIDED TO 
THE FEDERAL GOVERNMENT.— 
(1) NO
WAIVER
OF
PRIVILEGE
OR
PROTEC-
TION.—The provision of a cyber threat indicator or 
defensive measure to the Federal Government under 
this Act shall not constitute a waiver of any applica-
ble privilege or protection provided by law, including 
trade secret protection. 
(2) PROPRIETARY
INFORMATION.—Consistent 
with section 3(c)(2), a cyber threat indicator or de-
fensive measure provided by a non-Federal entity to 
the Federal Government under this Act shall be con-
sidered the commercial, financial, and proprietary 
information of the non-Federal entity that is the 
originator of such cyber threat indicator or defensive 
measure when so designated by such non-Federal 
entity or a non-Federal entity acting in accordance 
with the written authorization of the non-Federal 
entity that is the originator of such cyber threat in-
dicator or defensive measure. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00022
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(3) EXEMPTION FROM DISCLOSURE.—A cyber 
threat indicator or defensive measure provided to the 
Federal Government under this Act shall be— 
(A) deemed voluntarily shared information 
and exempt from disclosure under section 552 
of title 5, United States Code, and any State, 
tribal, or local law requiring disclosure of infor-
mation or records; and 
(B) withheld, without discretion, from the 
public under section 552(b)(3)(B) of title 5, 
United States Code, and any State, tribal, or 
local provision of law requiring disclosure of in-
formation or records, except as otherwise re-
quired by applicable Federal, State, tribal, or 
local law requiring disclosure in any criminal 
prosecution. 
(4) EX PARTE COMMUNICATIONS.—The provi-
sion of a cyber threat indicator or defensive measure 
to the Federal Government under this Act shall not 
be subject to a rule of any Federal department or 
agency or any judicial doctrine regarding ex parte 
communications with a decision-making official. 
(5) DISCLOSURE, RETENTION, AND USE.— 
(A) AUTHORIZED
ACTIVITIES.—A cyber 
threat indicator or defensive measure provided 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00023
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
to the Federal Government under this Act may 
be disclosed to, retained by, and used by, con-
sistent with otherwise applicable provisions of 
Federal law, any department, agency, compo-
nent, officer, employee, or agent of the Federal 
Government solely for— 
(i) a cybersecurity purpose; 
(ii) the purpose of responding to, 
prosecuting, or otherwise preventing or 
mitigating a threat of death or serious 
bodily harm or an offense arising out of 
such a threat; 
(iii) the purpose of responding to, or 
otherwise preventing or mitigating, a seri-
ous threat to a minor, including sexual ex-
ploitation and threats to physical safety; or 
(iv) the purpose of preventing, inves-
tigating, disrupting, or prosecuting any of 
the offenses listed in sections 1028, 1029, 
1030, and 3559(c)(2)(F) and chapters 37 
and 90 of title 18, United States Code. 
(B) PROHIBITED
ACTIVITIES.—A cyber 
threat indicator or defensive measure provided 
to the Federal Government under this Act shall 
not be disclosed to, retained by, or used by any 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00024
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
Federal department or agency for any use not 
permitted under subparagraph (A). 
(C) PRIVACY
AND
CIVIL
LIBERTIES.—A 
cyber threat indicator or defensive measure pro-
vided to the Federal Government under this Act 
shall be retained, used, and disseminated by the 
Federal Government in accordance with— 
(i) the policies and procedures relating 
to the receipt of cyber threat indicators 
and defensive measures by the Federal 
Government required by subsection (b) of 
section 111 of the National Security Act of 
1947, as added by subsection (a) of this 
section; and 
(ii) the privacy and civil liberties 
guidelines required by subsection (b). 
SEC. 5. FEDERAL GOVERNMENT LIABILITY FOR VIOLA-
TIONS OF PRIVACY OR CIVIL LIBERTIES. 
(a) IN GENERAL.—If a department or agency of the 
Federal Government intentionally or willfully violates the 
privacy and civil liberties guidelines issued by the Attorney 
General under section 4(b), the United States shall be lia-
ble to a person injured by such violation in an amount 
equal to the sum of— 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00025
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
(1) the actual damages sustained by the person 
as a result of the violation or $1,000, whichever is 
greater; and 
(2) the costs of the action together with reason-
able attorney fees as determined by the court. 
(b) VENUE.—An action to enforce liability created 
under this section may be brought in the district court 
of the United States in— 
(1) the district in which the complainant re-
sides; 
(2) the district in which the principal place of 
business of the complainant is located; 
(3) the district in which the department or 
agency of the Federal Government that violated such 
privacy and civil liberties guidelines is located; or 
(4) the District of Columbia. 
(c) STATUTE OF LIMITATIONS.—No action shall lie 
under this subsection unless such action is commenced not 
later than two years after the date of the violation of the 
privacy and civil liberties guidelines issued by the Attorney 
General under section 4(b) that is the basis for the action. 
(d) EXCLUSIVE CAUSE OF ACTION.—A cause of ac-
tion under this subsection shall be the exclusive means 
available to a complainant seeking a remedy for a violation 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00026
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
by a department or agency of the Federal Government 
under this Act. 
SEC. 6. PROTECTION FROM LIABILITY. 
(a) MONITORING OF INFORMATION SYSTEMS.—No 
cause of action shall lie or be maintained in any court 
against any private entity, and such action shall be 
promptly dismissed, for the monitoring of an information 
system and information under section 3(a) that is con-
ducted in good faith in accordance with this Act and the 
amendments made by this Act. 
(b) SHARING OR RECEIPT OF CYBER THREAT INDI-
CATORS.—No cause of action shall lie or be maintained 
in any court against any non-Federal entity, and such ac-
tion shall be promptly dismissed, for the sharing or receipt 
of a cyber threat indicator or defensive measure under sec-
tion 3(c), or a good faith failure to act based on such shar-
ing or receipt, if such sharing or receipt is conducted in 
good faith in accordance with this Act and the amend-
ments made by this Act. 
(c) WILLFUL MISCONDUCT.— 
(1) RULE OF CONSTRUCTION.—Nothing in this 
section shall be construed— 
(A) to require dismissal of a cause of ac-
tion against a non-Federal entity (including a 
private entity) that has engaged in willful mis-
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00027
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
conduct in the course of conducting activities 
authorized by this Act or the amendments made 
by this Act; or 
(B) to undermine or limit the availability 
of otherwise applicable common law or statu-
tory defenses. 
(2) PROOF OF WILLFUL MISCONDUCT.—In any 
action claiming that subsection (a) or (b) does not 
apply due to willful misconduct described in para-
graph (1), the plaintiff shall have the burden of 
proving by clear and convincing evidence the willful 
misconduct by each non-Federal entity subject to 
such claim and that such willful misconduct proxi-
mately caused injury to the plaintiff. 
(3) WILLFUL MISCONDUCT DEFINED.—In this 
subsection, the term ‘‘willful misconduct’’ means an 
act or omission that is taken— 
(A) intentionally to achieve a wrongful 
purpose; 
(B) knowingly without legal or factual jus-
tification; and 
(C) in disregard of a known or obvious risk 
that is so great as to make it highly probable 
that the harm will outweigh the benefit. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00028
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
SEC. 7. OVERSIGHT OF GOVERNMENT ACTIVITIES. 
(a) BIENNIAL REPORT ON IMPLEMENTATION.— 
(1) IN GENERAL.—Section 111 of the National 
Security Act of 1947, as amended by section 4(a) of 
this Act, is further amended— 
(A) by redesignating subsection (c) (as re-
designated by such section 4(a)) as subsection 
(d); and 
(B) by inserting after subsection (b) (as 
inserted by such section 4(a)) the following new 
subsection: 
‘‘(c) BIENNIAL REPORT ON IMPLEMENTATION.— 
‘‘(1) IN GENERAL.—Not less frequently than 
once every two years, the Director of National Intel-
ligence, in consultation with the heads of the other 
appropriate Federal entities, shall submit to Con-
gress a report concerning the implementation of this 
section and the Protecting Cyber Networks Act. 
‘‘(2) CONTENTS.—Each report submitted under 
paragraph (1) shall include the following: 
‘‘(A) An assessment of the sufficiency of 
the policies, procedures, and guidelines required 
by this section and section 4 of the Protecting 
Cyber Networks Act in ensuring that cyber 
threat indicators are shared effectively and re-
sponsibly within the Federal Government. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00029
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
‘‘(B) An assessment of whether the proce-
dures developed under section 3 of such Act 
comply with the goals described in subpara-
graphs (A), (B), and (C) of subsection (a)(1). 
‘‘(C) An assessment of whether cyber 
threat indicators have been properly classified 
and an accounting of the number of security 
clearances authorized by the Federal Govern-
ment for the purposes of this section and such 
Act. 
‘‘(D) A review of the type of cyber threat 
indicators shared with the Federal Government 
under this section and such Act, including the 
following: 
‘‘(i) The degree to which such infor-
mation may impact the privacy and civil 
liberties of specific persons. 
‘‘(ii) A quantitative and qualitative as-
sessment of the impact of the sharing of 
such cyber threat indicators with the Fed-
eral Government on privacy and civil lib-
erties of specific persons. 
‘‘(iii) The adequacy of any steps taken 
by the Federal Government to reduce such 
impact. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00030
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
‘‘(E) A review of actions taken by the Fed-
eral Government based on cyber threat indica-
tors shared with the Federal Government under 
this section or such Act, including the appro-
priateness of any subsequent use or dissemina-
tion of such cyber threat indicators by a Fed-
eral entity under this section or section 4 of 
such Act. 
‘‘(F) A description of any significant viola-
tions of the requirements of this section or such 
Act by the Federal Government. 
‘‘(G) A summary of the number and type 
of non-Federal entities that received classified 
cyber threat indicators from the Federal Gov-
ernment under this section or such Act and an 
evaluation of the risks and benefits of sharing 
such cyber threat indicators. 
‘‘(3) RECOMMENDATIONS.—Each report sub-
mitted under paragraph (1) may include such rec-
ommendations as the heads of the appropriate Fed-
eral entities may have for improvements or modifica-
tions to the authorities and processes under this sec-
tion or such Act. 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00031
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS
‘‘(4) FORM OF REPORT.—Each report required 
by paragraph (1) shall be submitted in unclassified 
form, but may include a classified annex.’’. 
(2) INITIAL REPORT.—The first report required 
under subsection (c) of section 111 of the National 
Security Act of 1947, as inserted by paragraph (1) 
of this subsection, shall be submitted not later than 
one year after the date of the enactment of this Act. 
(b) REPORTS ON PRIVACY AND CIVIL LIBERTIES.— 
(1) BIENNIAL
REPORT
FROM
PRIVACY
AND 
CIVIL LIBERTIES OVERSIGHT BOARD.— 
(A) IN GENERAL.—Section 1061(e) of the 
Intelligence Reform and Terrorism Prevention 
Act of 2004 (42 U.S.C. 2000ee(e)) is amended 
by adding at the end the following new para-
graph: 
‘‘(3) BIENNIAL REPORT ON CERTAIN CYBER AC-
TIVITIES.—The Privacy and Civil Liberties Over-
sight Board shall biennially submit to Congress and 
the President a report containing— 
‘‘(A) an assessment of the privacy and civil 
liberties impact of the activities carried out 
under the Protecting Cyber Networks Act and 
the amendments made by such Act; and 
VerDate Sep 11 2014 
04:01 Mar 31, 2015
Jkt 049200
PO 00000
Frm 00032
Fmt 6652
Sfmt 6201
E:\BILLS\H1560.IH
H1560
smartinez on DSK4TPTVN1PROD with BILLS