S.Amdt. 6128

SA 6128. Ms. CORTEZ MASTO (for herself and Mrs. Fischer) submitted an amendment intended to be proposed to amendment SA 5499 submitted by Mr. Reed (for himself and Mr. Inhofe) and intended to be proposed to the bill H.R. 7900, to authorize appropriations for fiscal year 2023 for military activities of the Department of Defense, for military construction, and for defense activities of the Department of Energy, to prescribe military personnel strengths for such fiscal year, and for other purposes; which was ordered to lie on the table; as follows:

At the appropriate place, insert the following:

SEC. __. PROMOTING PRIVACY ENHANCING TECHNOLOGIES.

(a) Definition of Privacy Enhancing Technology.--In this section the term “privacy enhancing technology” means any software solution, technical processes, or other technological means of protecting an individual's privacy and the confidentiality of data, which may include--

(1) anonymization and pseudonymization techniques, filtering tools, anti-tracking technology, differential privacy tools, synthetic data generation tools, cryptographic techniques (such as secure multi-party computation and homomorphic encryption), and systems for federated learning; and

(2) any other software solution, technical processes, or other technological means that the Director of the National Science Foundation, in consultation with the Director of the National Institute of Standards and Technology outside experts, determines to be a technology that enhances privacy.

(b) National Science Foundation Support of Research on Privacy Enhancing Technology.--The Director of the National Science Foundation, in consultation with other relevant Federal agencies (as determined by the Director), shall support merit-reviewed and competitively awarded research on privacy enhancing technologies, which may include--

(1) fundamental research on technologies for de-identification, pseudonymization, anonymization, or obfuscation to protect individuals' privacy in data sets;

(2) fundamental research on algorithms, machine learning, and other similar mathematical tools used to protect individual privacy when collecting, storing, sharing, aggregating, or analyzing data;

(3) fundamental research on technologies that promote data minimization principles in data collection, sharing, transfers, retention, and analytics;

(4) research awards on privacy enhancing technologies coordinated with other relevant Federal agencies and programs;

(5) research on barriers to, and opportunities for, the adoption of privacy enhancing technologies, including studies on effective business models for privacy enhancing technologies; and

(6) international cooperative research, awards, challenges, and pilot projects on privacy enhancing technologies with key United States allies and partners.

(c) Integration Into the Computer and Network Security Program.--Subparagraph (D) of section 4(a)(1) of the Cyber Security Research and Development Act (15 U.S.C. 7403(a)(1)(D)) is amended to read as follows:

“(D) privacy enhancing technologies and confidentiality;”.

(d) Coordination With the National Institute of Standards and Technology and Other Stakeholders.--

(1) In general.--The Director of the Office of Science and Technology Policy, acting through the Networking and Information Technology Research and Development Program, shall coordinate with the Director of the National Science Foundation, the Director of the National Institute of Standards and Technology, and the Federal Trade Commission to accelerate the development and use of privacy enhancing technologies.

(2) Outreach.--The Director of the National Institute of Standards and Technology shall conduct outreach to--

(A) receive input from private, public, and academic stakeholders on the development and potential uses of privacy enhancing technologies, including the National Institutes of Health and the Centers for Disease Control and Prevention regarding specific applications in public health research; and

(B) develop ongoing public and private sector engagement to create and disseminate voluntary, consensus-based resources to increase the integration of privacy enhancing technologies in data collection, sharing, transfers, retention, and analytics by the public and private sectors.

(e) Report on Privacy Enhancing Technology Research.--Not later than 3 years after the date of enactment of this Act, the Director of the Office of Science and Technology Policy, acting through the Networking and Information Technology Research and Development Program, shall, in coordination with the Director of the National Science Foundation, the Director of the National Institute of Standards and Technology, and the Chair of the Federal Trade Commission, submit to the Committee on Commerce, Science, and Transportation of the Senate, the Committee on Science, Space, and Technology of the House of Representatives, and the Committee on Energy and Commerce of the House of Representatives, a report containing--

(1) the progress of research on privacy enhancing technologies;

(2) the progress of the development of voluntary resources described under subsection (d)(2)(B); and

(3) any policy recommendations that could facilitate and improve communication and coordination between the private sector, the National Science Foundation, and relevant Federal agencies through the implementation of privacy enhancing technologies.