Sec. 4. United States International Cyberspace Policy
455 words·~2 min read·
/bill/117/hr/1251/ih/section-4A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
It is the policy of the United States to work internationally to promote an open, interoperable, reliable, unfettered, and secure Internet governed by the multi-stakeholder model, which— promotes human rights, democracy, and rule of law, including freedom of expression, innovation, communication, and economic prosperity; and respects privacy and guards against deception, fraud, and theft. In implementing the policy described in subsection (a), the President, in consultation with outside actors, including private sector companies, nongovernmental organizations, security researchers, and other relevant stakeholders, in the conduct of bilateral and multilateral relations, shall pursue the following objectives:
Clarifying the applicability of international laws and norms to the use of ICT. Reducing and limiting the risk of escalation and retaliation in cyberspace, damage to critical infrastructure, and other malicious cyber activity that impairs the use and operation of critical infrastructure that provides services to the public. Cooperating with like-minded democratic countries that share common values and cyberspace policies with the United States, including respect for human rights, democracy, and the rule of law, to advance such values and policies internationally.
Encouraging the responsible development of new, innovative technologies and ICT products that strengthen a secure Internet architecture that is accessible to all. Securing and implementing commitments on responsible country behavior in cyberspace based upon accepted norms, including the following: Countries should not conduct, or knowingly support, cyber-enabled theft of intellectual property, including trade secrets or other confidential business information, with the intent of providing competitive advantages to companies or commercial sectors.
Countries should take all appropriate and reasonable efforts to keep their territories clear of intentionally wrongful acts using ICTs in violation of international commitments. Countries should not conduct or knowingly support ICT activity that, contrary to international law, intentionally damages or otherwise impairs the use and operation of critical infrastructure providing services to the public, and should take appropriate measures to protect their critical infrastructure from ICT threats.
Countries should not conduct or knowingly support malicious international activity that, contrary to international law, harms the information systems of authorized emergency response teams (also known as computer emergency response teams or cybersecurity incident response teams ) of another country or authorize emergency response teams to engage in malicious international activity. Countries should respond to appropriate requests for assistance to mitigate malicious ICT activity emanating from their territory and aimed at the critical infrastructure of another country.
Countries should not restrict cross-border data flows or require local storage or processing of data. Countries should protect the exercise of human rights and fundamental freedoms on the Internet and commit to the principle that the human rights that people have offline should also be protected online. Advancing, encouraging, and supporting the development and adoption of internationally recognized technical standards and best practices.