Sec. 5. Privacy, security, and resilience
1,186 words·~5 min read·
/bill/116/s/1740/is/section-5A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
In carrying out this Act, the Secretary, the Administrator, and the Secretary of Homeland Security shall identify, incorporate, and follow best practices for protecting the privacy of individuals and businesses and the respective sensitive data of the individuals and businesses, including by managing privacy risk and implementing the Fair Information Practice Principles of the Federal Trade Commission for the collection, use, disclosure, and retention of individual electric consumer information in accordance with the Office of Management and Budget Circular A–130 (or successor circulars).
No Federal entity shall request the creation, recording, or collection of data identified to an individual person as a result of this Act. In this subsection: The term governmental entity has the meaning given that term in section 2711 of title 18, United States Code. The terms judge of competent jurisdiction and State have the meanings given such terms in section 2510 of title 18, United States Code. A governmental entity may obtain from an electric utility, third-party aggregator, or other nongovernmental entity under an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena the— name of an electric consumer; address of an electric consumer; length of service (including start date) of, and types of service used by, an electric consumer; and means and source of payment for such service (including any credit card or bank account number) of an electric consumer.
A governmental entity may only require the disclosure by an electric utility, third-party aggregator, or other nongovernmental entity of information regarding the use of electricity by an electric consumer (including monthly usage data, data at a greater level of detail or specificity, and information about electric use by specific appliances) pursuant to a warrant issued based on probable cause, using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures) by a court of competent jurisdiction.
Not later than 30 days after obtaining a warrant for electric usage information described in paragraph (3), a governmental entity shall notify each electric consumer whose information was obtained. Upon application by a governmental entity, a judge of competent jurisdiction may issue an order authorizing the governmental entity to delay notice under subparagraph
(A)for a period of not more than 180 days if the judge finds reason to believe notifying the electric consumer of the order will result in— endangering the life or physical safety of an individual; flight from prosecution; destroying of or tampering with evidence; intimidation of potential witnesses; or otherwise seriously jeopardizing an investigation or unduly delaying a trial. Upon application by a governmental entity, a judge of competent jurisdiction may renew an order delaying notice under clause
(i)for additional periods of not longer than 180 days if the judge makes a finding described in clause (i). Any electric usage information described in paragraph (3), or evidence directly or indirectly derived from such information, may not be received in evidence in any trial, hearing, or other proceeding in or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof if the obtaining of the information was not conducted in accordance with this subsection. In January of each year, each governmental entity shall submit to the Administrative Office of the United States Courts information regarding any warrant described in paragraph
(3)that was sought or obtained by the governmental entity during the previous year, including— the number of warrants described in paragraph
(3)sought by the governmental entity; the number of warrants described in paragraph
(3)obtained by the governmental entity; and for each warrant described in paragraph
(3)sought or obtained by the governmental entity— the offense specified in the application; and the identity of the officer applying for the warrant. As part of the report submitted under section 2519(3) of title 18, United States Code, the Administrative Office of the United States Courts shall provide to Congress, with respect to the previous year— the number of warrants described in paragraph
(3)sought by governmental entities; the number of warrants described in paragraph
(3)obtained by governmental entities; and a summary and analysis of the data required to be filed with the Administrative Office under subparagraph (A). Not later than 1 year after the date of enactment of this Act, the Secretary shall develop model standards to assist States, electric cooperatives, and publicly owned electric utilities in the voluntary updating of standards for resource planning, energy assurance planning, ensuring distribution-grid reliability from natural disasters, and improving security with respect to cyber and physical threats, taking into consideration— the increased use of smart grid technologies, variable energy generation, energy storage, and distributed energy resources; standards for critical infrastructure; and emerging and rapidly evolving hazards. As soon as practicable after the date of enactment of this Act, in developing the model standards under subparagraph (A), the Secretary shall consult with— States; utilities, such as investor-owned electric utilities, publicly owned utilities, and electric cooperatives; third-party energy service providers; other Federal agencies; the Electric Reliability Organization; private companies, including energy technology manufacturers; the National Laboratories; nonprofit organizations; and institutions of higher education. Not later than 3 years after the date of enactment of this Act, the Secretary, in collaboration with the Secretary of Commerce (acting through the Director of the National Institute of Standards and Technology), electric utilities, States, and standard-making organizations, shall— evaluate whether new performance standards and testing procedures are needed to ensure electrical equipment resilience in the face of emerging and rapidly evolving hazards (like cyber and physical threats and natural disasters) taking into consideration the increased use of smart grid technologies, variable energy generation, energy storage, distributed energy resources, and capabilities for autonomous energy systems integration and management (such as islandable microgrids); and develop and submit to Congress a set of recommendations for distribution equipment manufacturers to voluntarily— minimize disruptions of interconnected distributed energy resources and associated data feeds, especially during critical peak demand; and support the reliability and resilience of the distribution grid. Not later than 1 year after the date of enactment of this Act, the Secretary shall develop and submit to Congress a set of methods and guidelines for calculating the costs and benefits of investments in resilience and security solutions for the electric grid, including— the development of uniform and technology-neutral methods for valuing electric grid reliability and security, taking into consideration the results of the study conducted under section 3(b); guidelines for valuing the management of risks associated with high-impact events, such as threats related to cyber or physical attacks, natural disasters, or combined threats, including the value of State and local energy assurance planning and investment; and methods on how to quantify the security and resilience benefits that are unique to distributed energy resources and grid-scale energy storage. As soon as practicable after the date of enactment of this Act, in developing the methods and guidelines under paragraph (1), the Secretary shall consult with industry and government stakeholders, including the stakeholders described in subsection (d)(1)(B).