An act to direct the Secretary of Homeland Security to establish a data framework to provide access for appropriate personnel to law enforcement and other information of the Department, and for other purposes
PL 115-331 (H.R.2454), enacted 12/19/2018

132 STAT. 4484 
PUBLIC LAW 115–331—DEC. 19, 2018 
Public Law 115–331 
115th Congress 
An Act 
To direct the Secretary of Homeland Security to establish a data framework to 
provide access for appropriate personnel to law enforcement and other information 
of the Department, and for other purposes. 
Be it enacted by the Senate and House of Representatives of 
the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Department of Homeland Security 
Data Framework Act of 2018’’. 
SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK. 
(a) IN GENERAL.— 
(1) DEVELOPMENT.—The Secretary of Homeland Security 
shall develop a data framework to integrate existing Depart-
ment of Homeland Security datasets and systems, as appro-
priate, for access by authorized personnel in a manner con-
sistent with relevant legal authorities and privacy, civil rights, 
and civil liberties policies and protections. 
(2) REQUIREMENTS.—In developing the framework required 
under paragraph (1), the Secretary of Homeland Security shall 
ensure, in accordance with all applicable statutory and regu-
latory requirements, the following information is included: 
(A) All information acquired, held, or obtained by an 
office or component of the Department of Homeland Secu-
rity that falls within the scope of the information sharing 
environment, including homeland security information, ter-
rorism information, weapons of mass destruction informa-
tion, and national intelligence. 
(B) Any information or intelligence relevant to priority 
mission needs and capability requirements of the homeland 
security enterprise, as determined appropriate by the Sec-
retary. 
(b) DATA FRAMEWORK ACCESS.— 
(1) IN GENERAL.—The Secretary of Homeland Security shall 
ensure that the data framework required under this section 
is accessible to employees of the Department of Homeland 
Security who the Secretary determines— 
(A) have an appropriate security clearance; 
(B) are assigned to perform a function that requires 
access to information in such framework; and 
(C) are trained in applicable standards for safeguarding 
and using such information. 
(2) GUIDANCE.—The Secretary of Homeland Security 
shall— 
Determination. 
6 USC 126. 
Department of 
Homeland 
Security Data 
Framework Act 
of 2018. 
6 USC 101 note. 
Dec. 19, 2018 
[H.R. 2454] 
VerDate Sep 11 2014 
14:16 Jan 18, 2024
Jkt 079194
PO 00000
Frm 00056
Fmt 6580
Sfmt 6581
G:\STATUTES\2018\GOVINFO FILES FOR ERIC\PART 4\79194PT4.001
79194PT4
whamilton on LAP1Z6H6L3PROD with STATUTES
132 STAT. 4485 
PUBLIC LAW 115–331—DEC. 19, 2018 
(A) issue guidance for Department of Homeland Secu-
rity employees authorized to access and contribute to the 
data framework pursuant to paragraph (1); and 
(B) ensure that such guidance enforces a duty to share 
between offices and components of the Department when 
accessing or contributing to such framework for mission 
needs. 
(3) EFFICIENCY.—The Secretary of Homeland Security shall 
promulgate data standards and instruct components of the 
Department of Homeland Security to make available informa-
tion through the data framework required under this section 
in a machine-readable standard format, to the greatest extent 
practicable. 
(c) EXCLUSION OF INFORMATION.—The Secretary of Homeland 
Security may exclude information from the data framework required 
under this section if the Secretary determines inclusion of such 
information may— 
(1) jeopardize the protection of sources, methods, or activi-
ties; 
(2) compromise a criminal or national security investiga-
tion; 
(3) be inconsistent with other Federal laws or regulations; 
or 
(4) be duplicative or not serve an operational purpose if 
included in such framework. 
(d) SAFEGUARDS.—The Secretary of Homeland Security shall 
incorporate into the data framework required under this section 
systems capabilities for auditing and ensuring the security of 
information included in such framework. Such capabilities shall 
include the following: 
(1) Mechanisms for identifying insider threats. 
(2) Mechanisms for identifying security risks. 
(3) Safeguards for privacy, civil rights, and civil liberties. 
(e) DEADLINE FOR IMPLEMENTATION.—Not later than 2 years 
after the date of enactment of this Act, the Secretary of Homeland 
Security shall ensure the data framework required under this sec-
tion has the ability to include appropriate information in existence 
within the Department of Homeland Security to meet the critical 
mission operations of the Department of Homeland Security. 
(f) NOTICE TO CONGRESS.— 
(1) STATUS UPDATES.—The Secretary of Homeland Security 
shall submit to the appropriate congressional committees reg-
ular updates on the status of the data framework until the 
framework is fully operational. 
(2) OPERATIONAL NOTIFICATION.—Not later than 60 days 
after the date on which the data framework required under 
this section is fully operational, the Secretary of Homeland 
Security shall provide notice to the appropriate congressional 
committees that the data framework is fully operational. 
(3) VALUE ADDED.—The Secretary of Homeland Security 
shall annually brief Congress on component use of the data 
framework required under this section to support operations 
that disrupt terrorist activities and incidents in the homeland. 
(g) DEFINITIONS.—In this section: 
Briefing. 
Deadline. 
Determination. 
Standards. 
VerDate Sep 11 2014 
14:16 Jan 18, 2024
Jkt 079194
PO 00000
Frm 00057
Fmt 6580
Sfmt 6581
G:\STATUTES\2018\GOVINFO FILES FOR ERIC\PART 4\79194PT4.001
79194PT4
whamilton on LAP1Z6H6L3PROD with STATUTES
132 STAT. 4486 
PUBLIC LAW 115–331—DEC. 19, 2018 
LEGISLATIVE HISTORY—H.R. 2454 (S. 2397): 
SENATE REPORTS: No. 115–380 (Comm. on Homeland Security and Governmental 
Affairs) accompanying S. 2397. 
CONGRESSIONAL RECORD: 
Vol. 163 (2017): Sept. 12, considered and passed House. 
Vol. 164 (2018): Dec. 6, considered and passed Senate, amended. 
Dec. 12, House concurred in Senate amendment. 
(1) APPROPRIATE CONGRESSIONAL COMMITTEE; HOMELAND.— 
The terms ‘‘appropriate congressional committee’’ and ‘‘home-
land’’ have the meaning given those terms in section 2 of 
the Homeland Security Act of 2002 (6 U.S.C. 101). 
(2) HOMELAND SECURITY INFORMATION.—The term ‘‘home-
land security information’’ has the meaning given such term 
in section 892 of the Homeland Security Act of 2002 (6 U.S.C. 
482). 
(3) NATIONAL
INTELLIGENCE.—The term ‘‘national intel-
ligence’’ has the meaning given such term in section 3(5) of 
the National Security Act of 1947 (50 U.S.C. 3003(5)). 
(4) 
TERRORISM
INFORMATION.—The 
term 
‘‘terrorism 
information’’ has the meaning given such term in section 1016 
of the Intelligence Reform and Terrorism Prevention Act of 
2004 (6 U.S.C. 485). 
Approved December 19, 2018. 
VerDate Sep 11 2014 
14:16 Jan 18, 2024
Jkt 079194
PO 00000
Frm 00058
Fmt 6580
Sfmt 6580
G:\STATUTES\2018\GOVINFO FILES FOR ERIC\PART 4\79194PT4.001
79194PT4
whamilton on LAP1Z6H6L3PROD with STATUTES