S.Amdt. 1020

SA 1020. Mr. WYDEN (for himself, Mr. Cassidy, Ms. Lummis, and Mr.
Rounds) submitted an amendment intended to be proposed by him to the
bill S. 2226, to authorize appropriations for fiscal year 2024 for
military activities of the Department of Defense, for military
construction, and for defense activities of the Department of Energy,
to prescribe military personnel strengths for such fiscal year, and for
other purposes; which was ordered to lie on the table; as follows:

At the appropriate place in title XVI, insert the
following:

SEC. 16__. IMPROVEMENTS RELATING TO CYBER PROTECTION SUPPORT
FOR DEPARTMENT OF DEFENSE PERSONNEL IN
POSITIONS HIGHLY VULNERABLE TO CYBER ATTACK.

Section 1645 of the National Defense Authorization Act for
Fiscal Year 2017 (Public Law 114-328; 10 U.S.C. 2224 note) is
amended--
(1) in subsection (a)--
(A) in the subsection heading, by striking ``Authority''
and inserting ``Requirement'';
(B) in paragraph (1)--
(i) by inserting ``and personal accounts'' after ``personal
technology devices''; and
(ii) by inserting ``and shall provide such support to any
such personnel who request the support'' after ``in paragraph
(2)''; and
(C) in paragraph (2)(B), by inserting ``or personal
accounts'' after ``personal technology devices'';
(2) in subsection (c)--
(A) in paragraph (1), by inserting ``or personal accounts''
after ``personal technology devices''; and
(B) in paragraph (2), by striking ``and networks'' and
inserting ``, personal networks, and personal accounts''; and
(3) by striking subsections (d) and (e) and inserting the
following new subsection (d):
``(d) Definitions.--In this section:
``(1) The term `personal accounts' means accounts for
online and telecommunications services, including telephone,
residential internet access, email, text and multimedia
messaging, cloud computing, social media, health care, and
financial services, used by Department of Defense personnel
outside of the scope of their employment with the Department.
``(2) The term `personal technology devices' means
technology devices used by Department of Defense personnel
outside of the scope of their employment with the Department
and includes networks to which such devices connect.''.

SEC. 16__. COMPTROLLER GENERAL REPORT ON EFFORTS TO PROTECT
PERSONAL INFORMATION OF DEPARTMENT OF DEFENSE
PERSONNEL FROM EXPLOITATION BY FOREIGN
ADVERSARIES.

(a) In General.--Not later than 180 days after the date of
the enactment of this Act, the Comptroller General of the
United States shall brief the appropriate congressional
committees on Department of Defense efforts to protect
personal information of its personnel from exploitation by
foreign adversaries.
(b) Elements.--The briefing required under subsection (a)
shall include any observations on the following elements:
(1) An assessment of efforts by the Department of Defense
to protect the personal information, including location data
generated by smart phones, of members of the Armed Forces,
civilian employees of the Department of Defense, veterans,
and their families from exploitation by foreign adversaries.
(2) Recommendations to improve Department of Defense
policies and programs to meaningfully address this threat.
(c) Report.--The Comptroller General shall publish on its
website an unclassified report, which may contain a
classified annex submitted to the congressional defense and
intelligence committees, on the elements described in
subsection (b) at a time mutually agreed upon.
(d) Appropriate Congressional Committees.--In this section,
the term ``appropriate congressional committees'' means--
(1) the congressional defense committees;
(2) the Select Committee on Intelligence of the Senate; and
(3) the Permanent Select Committee on Intelligence of the
House of Representatives.
______