The position was institutionalized with the Homeland Security Act of 2002 (section 222) which established the department.
the bush government tried to attenuate the harsh criticism from privacy advocates against the surveillance and data-mining programs concentrated in the dhs.