S.Amdt. 3987

SA 3987. Mr. SASSE (for himself and Mr. King) submitted an amendment
intended to be proposed to amendment SA 3695 proposed by Mr. Shelby to
the bill H.R. 6157, making appropriations for the Department of Defense
for the fiscal year ending September 30, 2019, and for other purposes;
which was ordered to lie on the table; as follows:

At the appropriate place in division A, insert the
following:

SEC. ___. STUDY ON CYBEREXPLOITATION OF MEMBERS OF THE ARMED
FORCES AND THEIR FAMILIES.

(a) Study Required.--Not later than 150 days after the date
of the enactment of this Act, the Secretary of Defense shall
complete a study on the cyberexploitation of the personal
information and accounts of members of the Armed Forces and
their families.
(b) Elements.--The study required by subsection (a) shall
include the following:
(1) An assessment of the vulnerability of members of the
Armed Forces and their families to inappropriate access to
their personal information and accounts of such members and
their families, including identification of particularly
vulnerable subpopulations.
(2) Creation of a catalogue of past and current efforts by
foreign governments and non-state actors at the
cyberexploitation of the personal information and accounts of
members of the Armed Forces and their families, including an
assessment of the purposes of such efforts and their degrees
of success.
(3) An assessment of the actions taken by the Department of
Defense to educate members of the Armed Forces and their
families, including particularly vulnerable subpopulations,
about and actions that can be take to otherwise reduce these
threats.
(4) Assessment of the potential for the cyberexploitation
of misappropriated images and videos as well as deep fakes.
(5) Development of recommendations for policy changes to
reduce the vulnerability of members of the Armed Forces and
their families to cyberexploitation, including
recommendations for legislative or administrative action.
(c) Report.--
(1) In general.--The Secretary shall submit to the
congressional defense committees a report on the findings of
the Secretary with respect to the study required by
subsection (a).
(2) Form.--The report required by paragraph (1) shall be
submitted in unclassified form, but may include a classified
annex.
(d) Definitions.--In this section:
(1) The term ``congressional defense committees'' has the
meaning given such term in section 101 of title 10, United
States Code.
(2) The term ``cyberexploitation'' means the use of digital
means to obtain access to an individual's personal
information without authorization.
(3) The term ``deep fake'' means the digital insertion of a
person's likeness into or digital alteration of a person's
likeness in visual media, such as photographs and videos,
without the person's permission and with malicious intent.
______