Sec. 9502. Report on threats posed by use by foreign governments and entities of commercially available cyber intrusion and surveillance technology

326 words·~1 min read·/bill/116/s/4049/es/section-9502

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Not later than 180 days after the date of the enactment of this Act, the Director of National Intelligence shall submit to the congressional intelligence committees a report on the threats posed by the use by foreign governments and entities of commercially available cyber intrusion and other surveillance technology. The report required by subsection

(a)shall include the following: Matters relating to threats described in subsection

(a)as they pertain to the following: The threat posed to United States persons and persons inside the United States. The threat posed to United States personnel overseas. The threat posed to employees of the Federal Government, including through both official and personal accounts and devices. A description of which foreign governments and entities pose the greatest threats from the use of technology described in subsection

(a)and the nature of those threats. An assessment of the source of the commercially available cyber intrusion and other surveillance technology that poses the threats described in subsection (a), including whether such technology is made by United States companies or companies in the United States or by foreign companies. An assessment of actions taken, as of the date of the enactment of this Act, by the Federal Government and foreign governments to limit the export of technology described in subsection

(a)from the United States or foreign countries to foreign governments and entities in ways that pose the threats described in such subsection. Matters relating to how the Federal Government, Congress, and foreign governments can most effectively mitigate the threats described in subsection (a), including matters relating to the following: Working with the technology and telecommunications industry to identify and improve the security of consumer software and hardware used by United States persons and persons inside the United States that is targeted by commercial cyber intrusion and surveillance software. Export controls. Diplomatic pressure. Trade agreements. The report submitted under subsection

(a)shall be submitted in unclassified form, but may include a classified annex.