Sec. 3. Identity management research and development
341 words·~2 min read·
/bill/116/hr/8214/ih/section-3A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Section 504 of the Cybersecurity Enhancement Act of 2014 ( 15 U.S.C. 7464 ) is amended to read as follows: The Director shall continue a program to support the development of voluntary and cost-effective technical standards, metrology, testbeds, and conformance criteria, taking into account appropriate user concerns— to improve interoperability among identity management technologies; to strengthen identity proofing and authentication methods used in identity management systems; to improve privacy protection in identity management systems, including health information technology systems, through authentication and security protocols; and to improve the usability and inclusivity of identity management systems.
The Director, in consultation with other relevant Federal agencies and stakeholders from the private sector, shall develop and implement a comprehensive forward-looking investment strategy for identity management research and development and standards focused on enabling the use and adoption of modern digital identity solutions that align with the four criteria in section (a). This strategy shall: Identify where additional funding may be needed to execute all elements of the strategy, both in NIST and potentially in other parts of government.
Be updated not less than every 2 years with reports to the House Science Committee, Senate Commerce Committee, and House and Senate appropriations committees. In carrying out the strategy described under subsection (a), the Director shall give consideration to activities that— accelerate the development, in collaboration with the private sector, of standards that address interoperability and portability of digital identity solutions; addresses gaps in current private-sector-led identity management research and development and standards work, both for consumer-focused and enterprise-focused identity management; advances the development of conformance testing performed by the private sector in support of digital identity standardization; addresses challenges with inclusivity of existing digital identity and identity management tools; and support, in consultation with other relevant Federal agencies and stakeholders from the private sector, the development of appropriate security frameworks and reference materials, and the identification of best practices, for use by Federal agencies and the private sector to address security and privacy requirements to enable the use and adoption of digital identity services. .
Connectionstraces to 1
Traces to 1 document
Citation graph
cites case law
Sec. 3
Identity management research and development
Cites 1Cited by 0 across 0 sources