IIB 
115TH CONGRESS 
1ST SESSION H. R. 2454 
IN THE SENATE OF THE UNITED STATES 
SEPTEMBER 13, 2017 
Received; read twice and referred to the Committee on Homeland Security and 
Governmental Affairs 
AN ACT 
To direct the Secretary of Homeland Security to establish 
a data framework to provide access for appropriate per-
sonnel to law enforcement and other information of the 
Department, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
23:41 Sep 13, 2017
Jkt 069200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H2454.RFS
H2454
rfrederick on DSKBCBPHB2PROD with BILLS
HR 2454 RFS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Department of Home-
land Security Data Framework Act of 2017’’. 
SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA 
FRAMEWORK. 
(a) IN GENERAL.—The Secretary of Homeland Secu-
rity shall develop a data framework to integrate existing 
Department of Homeland Security datasets and systems, 
as appropriate, for access by authorized personnel in a 
manner consistent with relevant legal authorities and pri-
vacy, civil rights, and civil liberties policies and protec-
tions. In developing such framework, the Secretary shall 
ensure, in accordance with all applicable statutory and 
regulatory requirements, the following information is in-
cluded: 
(1) All information acquired, held, or obtained 
by an office or component of the Department that 
falls within the scope of the information sharing en-
vironment, including homeland security information, 
terrorism information, weapons of mass destruction 
information, and national intelligence. 
(2) Any information or intelligence relevant to 
priority mission needs and capability requirements of 
the homeland security enterprise, as determined ap-
propriate by the Secretary. 
(b) DATA FRAMEWORK ACCESS.— 
VerDate Sep 11 2014 
23:41 Sep 13, 2017
Jkt 069200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H2454.RFS
H2454
rfrederick on DSKBCBPHB2PROD with BILLS
HR 2454 RFS
(1) IN GENERAL.—The Secretary of Homeland 
Security shall ensure that the data framework re-
quired under this section is accessible to employees 
of the Department of Homeland Security who the 
Secretary determines— 
(A) have an appropriate security clearance; 
(B) are assigned to perform a function 
that requires access to information in such 
framework; and 
(C) are trained in applicable standards for 
safeguarding and using such information. 
(2) GUIDANCE.—The Secretary of Homeland 
Security shall— 
(A) issue guidance for Department of 
Homeland Security employees authorized to ac-
cess and contribute to the data framework pur-
suant to paragraph (1); and 
(B) ensure that such guidance enforces a 
duty to share between offices and components 
of the Department when accessing or contrib-
uting to such framework for mission needs. 
(3) EFFICIENCY.—The Secretary of Homeland 
Security shall promulgate data standards and in-
struct components of the Department of Homeland 
Security to make available information through the 
VerDate Sep 11 2014 
23:41 Sep 13, 2017
Jkt 069200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H2454.RFS
H2454
rfrederick on DSKBCBPHB2PROD with BILLS
HR 2454 RFS
data framework under this section in a machine- 
readable format, to the greatest extent practicable. 
(c) EXCLUSION OF INFORMATION.—The Secretary of 
Homeland Security may exclude from the data framework 
information that the Secretary determines access to or the 
confirmation of the existence of could— 
(1) jeopardize the protection of sources, meth-
ods, or activities; 
(2) compromise a criminal or national security 
investigation; 
(3) be inconsistent with the other Federal laws 
or regulations; or 
(4) be duplicative or not serve an operational 
purpose if included in such framework. 
(d) SAFEGUARDS.—The Secretary of Homeland Se-
curity shall incorporate into the data framework systems 
capabilities for auditing and ensuring the security of infor-
mation included in such framework. Such capabilities shall 
include the following: 
(1) Mechanisms for identifying insider threats. 
(2) Mechanisms for identifying security risks. 
(3) Safeguards for privacy, civil rights, and civil 
liberties. 
(e) DEADLINE
FOR IMPLEMENTATION.—Not later 
than 2 years after the date of the enactment of this Act, 
VerDate Sep 11 2014 
23:41 Sep 13, 2017
Jkt 069200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H2454.RFS
H2454
rfrederick on DSKBCBPHB2PROD with BILLS