(1) IN GENERAL.—The Secretary of Homeland 
Security shall ensure that the data framework re-
quired under this section is accessible to employees 
of the Department of Homeland Security who the 
Secretary determines— 
(A) have an appropriate security clearance; 
(B) are assigned to perform a function 
that requires access to information in such 
framework; and 
(C) are trained in applicable standards for 
safeguarding and using such information. 
(2) GUIDANCE.—The Secretary of Homeland 
Security shall— 
(A) issue guidance for Department of 
Homeland Security employees authorized to ac-
cess and contribute to the data framework pur-
suant to paragraph (1); and 
(B) ensure that such guidance enforces a 
duty to share between offices and components 
of the Department when accessing or contrib-
uting to such framework for mission needs. 
(3) EFFICIENCY.—The Secretary of Homeland 
Security shall promulgate data standards and in-
struct components of the Department of Homeland 
Security to make available information through the
data framework under this section in a machine- 
readable format, to the greatest extent practicable. 
(c) EXCLUSION OF INFORMATION.—The Secretary of 
Homeland Security may exclude from the data framework 
information that the Secretary determines access to or the 
confirmation of the existence of could— 
(1) jeopardize the protection of sources, meth-
ods, or activities; 
(2) compromise a criminal or national security 
investigation; 
(3) be inconsistent with the other Federal laws 
or regulations; or 
(4) be duplicative or not serve an operational 
purpose if included in such framework. 
(d) SAFEGUARDS.—The Secretary of Homeland Se-
curity shall incorporate into the data framework systems 
capabilities for auditing and ensuring the security of infor-
mation included in such framework. Such capabilities shall 
include the following: 
(1) Mechanisms for identifying insider threats. 
(2) Mechanisms for identifying security risks. 
(3) Safeguards for privacy, civil rights, and civil 
liberties. 
(e) DEADLINE
FOR IMPLEMENTATION.—Not later 
than 2 years after the date of the enactment of this Act,
the Secretary of Homeland Security shall ensure the data 
framework required under this section has the ability to 
include appropriate information in existence within the 
Department of Homeland Security to meet its critical mis-
sion operations. 
(f) NOTICE TO CONGRESS.— 
(1) OPERATIONAL
NOTIFICATION.—Not later 
than 60 days after the date on which the data 
framework required under this section is fully oper-
ational, the Secretary of Homeland Security shall 
provide notice to the appropriate congressional com-
mittees of such. 
(2) REGULAR
STATUS.—The Secretary shall 
submit to the appropriate congressional committees 
regular updates on the status of the data framework 
required under this section, including, when applica-
ble, the use of such data framework to support clas-
sified operations. 
(g) DEFINITIONS.—In this section: 
(1) APPROPRIATE
CONGRESSIONAL
COMMIT-
TEES.—The term ‘‘appropriate congressional com-
mittees’’ has the meaning given the term ‘‘appro-
priate congressional committee’’ in section 2(2) of 
the Homeland Security Act of 2002 (6 U.S.C. 
101(2)).
(2) NATIONAL INTELLIGENCE.—The term ‘‘na-
tional intelligence’’ has the meaning given such term 
in section 3(5) of the National Security Act of 1947 
(50 U.S.C. 3003(5)). 
Passed the House of Representatives September 12, 
2017. 
Attest: 
Clerk.
115TH CONGRESS 
1ST SESSION 
H. R. 2454 
AN ACT 
To direct the Secretary of Homeland Security to es-
tablish a data framework to provide access for 
appropriate personnel to law enforcement and 
other information of the Department, and for 
other purposes.