(2) The United States lacks comprehensive 
cybercrime data and monitoring, leaving the country 
less prepared to combat cybercrime that threatens 
national and economic security. 
(3) In addition to existing cybercrime vulnera-
bilities, the people of the United States and the 
United States have faced a heightened risk of 
cybercrime during the COVID–19 pandemic. 
(4) Subsection (c) of the Uniform Federal 
Crime Reporting Act of 1988 (34 U.S.C. 41303(c)) 
requires the Attorney General to ‘‘acquire, collect, 
classify, and preserve national data on Federal 
criminal offenses as part of the Uniform Crime Re-
ports’’ and requires all Federal departments and 
agencies that investigate criminal activity to ‘‘report 
details about crime within their respective jurisdic-
tion to the Attorney General in a uniform matter 
and on a form prescribed by the Attorney General’’. 
SEC. 3. CYBERCRIME TAXONOMY. 
(a) IN GENERAL.—Not later than 90 days after the 
date of enactment of this Act, the Attorney General shall 
seek to enter into an agreement with the National Acad-
emy of Sciences to develop a taxonomy for the purpose 
of categorizing different types of cybercrime and cyber- 
enabled crime faced by individuals and businesses. 
VerDate Sep 11 2014 
21:50 Aug 12, 2021
Jkt 019200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H4977.IH
H4977
kjohnson on DSK79L0C42PROD with BILLS
(b) DEVELOPMENT.—In developing the taxonomy 
under subsection (a), the National Academy of Sciences 
shall— 
(1) ensure the taxonomy is useful for the Fed-
eral Bureau of Investigation to classify cybercrime in 
the National Incident-Based Reporting System, or 
any successor system; 
(2) consult relevant stakeholders, including— 
(A) the Cybersecurity and Infrastructure 
Security Agency of the Department of Home-
land Security; 
(B) Federal, State, and local law enforce-
ment agencies; 
(C) criminologists and academics; 
(D) cybercrime experts; and 
(E) business leaders; and 
(3) take into consideration relevant taxonomies 
developed by non-governmental organizations, inter-
national organizations, academies, or other entities. 
(c) REPORT.—Not later than 1 year after the date 
on which the Attorney General enters into an agreement 
under subsection (a), the National Academy of Sciences 
shall submit to the appropriate committees of Congress 
a report detailing and summarizing— 
VerDate Sep 11 2014 
21:50 Aug 12, 2021
Jkt 019200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H4977.IH
H4977
kjohnson on DSK79L0C42PROD with BILLS
(1) the taxonomy developed under subsection 
(a); and 
(2) any findings from the process of developing 
the taxonomy under subsection (a). 
(d) AUTHORIZATION
OF APPROPRIATIONS.—There 
are authorized to be appropriated to carry out this section 
$1,000,000. 
SEC. 4. CYBERCRIME REPORTING. 
(a) IN GENERAL.—Not later than 2 years after the 
date of enactment of this Act, the Attorney General shall 
establish a category in the National Incident-Based Re-
porting System, or any successor system, for the collection 
of cybercrime and cyber-enabled crime reports from Fed-
eral, State, and local officials. 
(b) RECOMMENDATIONS.—In establishing the cat-
egory required under subsection (a), the Attorney General 
shall, as appropriate, incorporate recommendations from 
the taxonomy developed under section 3(a). 
SEC. 5. NATIONAL CRIME VICTIMIZATION SURVEY. 
(a) IN GENERAL.—Not later than 540 days after the 
date of enactment of this Act, the Director of the Bureau 
of Justice Statistics, in coordination with the Director of 
the Bureau of the Census, shall include questions relating 
to cybercrime victimization in the National Crime Victim-
ization Survey. 
VerDate Sep 11 2014 
21:50 Aug 12, 2021
Jkt 019200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H4977.IH
H4977
kjohnson on DSK79L0C42PROD with BILLS
(b) AUTHORIZATION
OF APPROPRIATIONS.—There 
are authorized to be appropriated to carry out this section 
$2,000,000. 
SEC. 6. GAO STUDY ON CYBERCRIME METRICS. 
Not later than 180 days after the date of enactment 
of this Act, the Comptroller General of the United States 
shall submit to Congress a report that assesses— 
(1) the effectiveness of reporting mechanisms 
for cybercrime and cyber-enabled crime in the 
United States; and 
(2) disparities in reporting data between— 
(A) data relating to cybercrime and cyber- 
enabled crime; and 
(B) other types of crime data. 
Æ 
VerDate Sep 11 2014 
21:50 Aug 12, 2021
Jkt 019200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6301
E:\BILLS\H4977.IH
H4977
kjohnson on DSK79L0C42PROD with BILLS