Cyber VICTIM Act

Bill: 115-hr-3403
Sponsor: full_name: Rep. Brown, Anthony G. [D-MD-4]
Introduced: 2017-07-26
Policy area: Government Operations and Politics
Subjects: Computer security and identity theft

Congressional oversight

Crime victims

Criminal investigation, prosecution, interrogation

Executive agency funding and structure

Federal officials

Government employee pay, benefits, personnel management

Right of privacy
Latest action: action_date: 2017-07-26
text: Referred to the House Committee on Oversight and Government Reform.

Summaries:
action_date: 2017-07-26
action_desc: Introduced in House
text: <p><b>Cyber Valuing Individual Cybersecurity Through Interagency Measures Act or the Cyber VICTIM Act</b></p> <p>This bill requires the President to designate a federal official as the interagency cyber victim response coordinator. The interagency cyber victim coordinator must respond to data breaches and other cyber attacks on federal employees.</p> <p>Additionally, the coordinator must: (1) coordinate activities of the federal government relating to incidents of data breaches; (2) chair an interagency working group, consisting of appropriate personnel of the federal government and responding to cyber attacks against federal employees; (3) ensure sufficient representation of each federal agency at the interagency working group; and (4) develop processes and procedures to inform victims of efforts to mitigate damage from data breaches and prosecute perpetrators.</p> <p>The President must develop a comprehensive plan for the U.S.&nbsp;response to data breaches of personal information of federal employees. <br /></p>

tv_txt: I 115th CONGRESS 1st Session H. R. 3403 IN THE HOUSE OF REPRESENTATIVES July 26, 2017 Mr. Brown of Maryland (for himself, Mr. Ruppersberger , and Mr. Wittman ) introduced the following bill; which was referred to the Committee on Oversight and Government Reform A BILL To provide for an interagency cyber victim coordinator to respond to data breaches and other cyber attacks on Federal employees.

1. Short title This Act may be cited as the Cyber Valuing Individual Cybersecurity Through Interagency Measures Act or the Cyber VICTIM Act . 2. Interagency cyber victim response (a) Interagency cyber victim coordinator (1) In general Not later than 60 days after the date of the enactment of this Act, the President shall designate a Federal official to coordinate efforts to respond to data breaches and other cyber attacks on Federal employees. Such official shall have the title of interagency cyber victim response coordinator. (2) Duties The coordinator designated under paragraph (1) shall have the following duties: (A) Coordinate activities of the Federal Government relating to incidents of data breaches in which the data of Federal employees, including Social Security numbers, personal financial information, addresses, and other private identifying information, has been compromised, to— (i) ensure victims receive appropriate response and assistance from the Federal Government; and (ii) ensure synchronization of intelligence and responses among Federal law enforcement agencies to incidents of cyber attacks against Federal employees. (B) Chair an interagency working group consisting of appropriate personnel of the Federal Government with purview over response to cyber attacks against Federal employees. (C) Ensure sufficient representation of each Federal agency and department at any interagency working group established under subparagraph (B). (D) Develop processes and procedures to keep victims informed of efforts to— (i) mitigate damage from data breaches; and (ii) prosecute perpetrators. (b) Annual report (1) In general On an annual basis, the Coordinator shall submit to the appropriate congressional committees a report that includes a summary of each data breach described in subsection (a)(1) that occurred during the year for which the report is submitted. (2) Form of report Each report under paragraph (1) may be submitted in classified or unclassified form. (c) Comprehensive plan To address cyber attacks Not later than 180 days after the date of the enactment of this Act, the President shall develop a comprehensive plan for the United States response to data breaches of personal information of Federal employees. (d) Definitions In this section, the following definitions apply: (1) Appropriate congressional committees The term appropriate congressional committees means— (A) the Committee on Armed Services, the Committee on the Judiciary, the Permanent Select Committee on Intelligence, and the Committee on Homeland Security of the House of Representatives; and (B) the Committee on Armed Services, the Committee on the Judiciary, the Select Committee on Intelligence, and the Committee on Homeland Security and Governmental Affairs of the Senate. (2) Data breach The term data breach means an unauthorized intrusion of a Federal database resulting in a breach of personal information of a Federal employee, including— (A) the 2015 breaches of the Office of Personnel Management databases relating to background security checks and Federal employee background information; and (B) the November 2014 breach of the United States Postal Service employee database system.