In the nature of a substitute.

1. Replaces the bill's text with a full substitute

   Replaces the full textEverything after the enacting clause

   In H.R. 2454 · Referred in Senate

   SECTION 1. SHORT TITLE.

   This Act may be cited as the "Department of Homeland Security Data Framework Act of [struck: 2017][inserted: 2018]".

   SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK.

   Inserted: (a) In General.--

   ([struck: a][inserted: 1]) [struck: In General][inserted: Development].--The Secretary of Homeland Security shall develop a data framework to integrate existing Department of Homeland Security datasets and systems, as appropriate, for access by authorized personnel in a manner consistent with relevant legal authorities and privacy, civil rights, and civil liberties policies and protections.[struck: In developing such framework, the Secretary shall ensure, in accordance with all applicable statutory and regulatory requirements, the following information is included:]

   Inserted: (2) Requirements.--In developing the framework required under paragraph (1), the Secretary of Homeland Security shall ensure, in accordance with all applicable statutory and regulatory requirements, the following information is included:

   ([struck: 1][inserted: A]) All information acquired, held, or obtained by an office or component of the Department [inserted: of Homeland Security ]that falls within the scope of the information sharing environment, including homeland security information, terrorism information, weapons of mass destruction information, and national intelligence.

   ([struck: 2][inserted: B]) Any information or intelligence relevant to priority mission needs and capability requirements of the homeland security enterprise, as determined appropriate by the Secretary.

   (b) Data Framework Access.--

   (1) In general.--The Secretary of Homeland Security shall ensure that the data framework required under this section is accessible to employees of the Department of Homeland Security who the Secretary determines--

   4 unchanged paragraphsHide unchanged text

   (A) have an appropriate security clearance;

   (B) are assigned to perform a function that requires access to information in such framework; and

   (C) are trained in applicable standards for safeguarding and using such information.

   (2) Guidance.--The Secretary of Homeland Security shall--

   (A) issue guidance for Department of Homeland Security employees authorized to access and contribute to the data framework pursuant to paragraph (1); and

   (B) ensure that such guidance enforces a duty to share between offices and components of the Department when accessing or contributing to such framework for mission needs.

   (3) Efficiency.--The Secretary of Homeland Security shall promulgate data standards and instruct components of the Department of Homeland Security to make available information through the data framework [inserted: required ]under this section in a [struck: machine- readable][inserted: machine-readable standard] format, to the greatest extent practicable.

   (c) Exclusion of Information.--The Secretary of Homeland Security may exclude [inserted: information ]from the data framework [struck: information that ][inserted: required under this section if ]the Secretary determines [struck: access to or the confirmation ][inserted: inclusion ]of [struck: the existence of could][inserted: such information may]--

   (1) jeopardize the protection of sources, methods, or activities;

   (2) compromise a criminal or national security investigation;

   (3) be inconsistent with [struck: the ]other Federal laws or regulations; or

   (4) be duplicative or not serve an operational purpose if included in such framework.

   (d) Safeguards.--The Secretary of Homeland Security shall incorporate into the data framework [inserted: required under this section ]systems capabilities for auditing and ensuring the security of information included in such framework. Such capabilities shall include the following:

   (1) Mechanisms for identifying insider threats.

   (2) Mechanisms for identifying security risks.

   (3) Safeguards for privacy, civil rights, and civil liberties.

   (e) Deadline for Implementation.--Not later than 2 years after the date of [struck: the ]enactment of this Act, the Secretary of Homeland Security shall ensure the data framework required under this section has the ability to include appropriate information in existence within the Department of Homeland Security to meet [struck: its][inserted: the] critical mission operations[inserted: of the Department of Homeland Security].

   (f) Notice to Congress.--

   (1) [struck: Operational notification][inserted: Status updates].--[struck: Not later than 60 days after the date on which ][inserted: The Secretary of Homeland Security shall submit to ]the [struck: data framework required under this section is fully operational, ][inserted: appropriate congressional committees regular updates on ]the [struck: Secretary][inserted: status] of [struck: Homeland Security shall provide notice to ][inserted: the data framework until ]the [struck: appropriate congressional committees of such][inserted: framework is fully operational].

   (2) [struck: Regular status][inserted: Operational notification].--[struck: The Secretary shall submit to ][inserted: Not later than 60 days after ]the [struck: appropriate congressional committees regular updates ][inserted: date ]on [struck: the status of ][inserted: which ]the data framework required under this section[struck: , including, when applicable][inserted: is fully operational], the [struck: use][inserted: Secretary] of [struck: such data framework ][inserted: Homeland Security shall provide notice ]to [struck: support classified operations][inserted: the appropriate congressional committees that the data framework is fully operational].

   Inserted: (3) Value added.--The Secretary of Homeland Security shall annually brief Congress on component use of the data framework required under this section to support operations that disrupt terrorist activities and incidents in the homeland.

   (g) Definitions.--In this section:

   (1) Appropriate congressional [struck: committees][inserted: committee; homeland].--The [struck: term][inserted: terms] "appropriate congressional [struck: committees][inserted: committee]" [struck: has ][inserted: and "homeland" have ]the meaning given [struck: the term "appropriate congressional committee" ][inserted: those terms ]in section 2[struck: (2)] of the Homeland Security Act of 2002 (6 U.S.C. 101[struck: (2])[struck: )].

   (2) [struck: National intelligence][inserted: Homeland security information].--The term "[struck: national intelligence][inserted: homeland security information]" has the meaning given such term in section [struck: 3(5)][inserted: 892] of the [struck: National][inserted: Homeland] Security Act of [struck: 1947][inserted: 2002] ([struck: 50][inserted: 6] U.S.C. [struck: 3003(5][inserted: 482])[struck: )].

   Struck: Passed the House of Representatives September 12, 2017.

   Inserted: (3) National intelligence.--The term "national intelligence" has the meaning given such term in section 3(5) of the National Security Act of 1947 (50 U.S.C. 3003(5)).

   Inserted: (4) Terrorism information.--The term "terrorism information" has the meaning given such term in section 1016 of the Intelligence Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485).

   Original wording

   Strike all after the enacting clause and insert the following:

Read automatically from the Congressional Record. Check the original before relying on it.

As printed