USC Subchapter IX

in effect

50 U.S.C. § 3231 Applicability to United States intelligence activities of Federal laws implementing international treaties and agreements

(a) In generalNo Federal law enacted on or after December 27, 2000, that implements a treaty or other international agreement shall be construed as making unlawful an otherwise lawful and authorized intelligence activity of the United States Government or its employees, or any other person to the extent such other person is carrying out such activity on behalf of, and at the direction of, the United States, unless such Federal law specifically addresses such intelligence activity. (b) Authorized intelligence activitiesAn intelligence activity shall be treated as authorized for purposes of subsection (a) if the intelligence activity is authorized by an appropriate official of the United States Government, acting within the scope of the official duties of that official and in compliance with Federal law and any applicable Presidential directive.

50 U.S.C. § 3232 Counterintelligence initiatives

(a) Inspection processIn order to protect intelligence sources and methods from unauthorized disclosure, the Director of National Intelligence shall establish and implement an inspection process for all agencies and departments of the United States that handle classified information relating to the national security of the United States intended to assure that those agencies and departments maintain effective operational security practices and programs directed against counterintelligence activities. (b) Annual review of dissemination listsThe Director of National Intelligence shall establish and implement a process for all elements of the intelligence community to review, on an annual basis, individuals included on distribution lists for access to classified information. Such process shall ensure that only individuals who have a particularized “need to know” (as determined by the Director) are continued on such distribution lists. (c) Completion of financial disclosure statements required for access to certain classified informationThe Director of National Intelligence shall establish and implement a process by which each head of an element of the intelligence community directs that all employees of that element, in order to be granted access to classified information referred to in subsection (a) of section 1.3 of Executive Order No. 12968 (August 2, 1995; 60 Fed. Reg. 40245; [former] 50 U.S.C. 435 note [now 50 U.S.C. 3161 note]), submit financial disclosure forms as required under subsection (b) of such section. (d) Arrangements to handle sensitive informationThe Director of National Intelligence shall establish, for all elements of the intelligence community, programs and procedures by which sensitive classified information relating to human intelligence is safeguarded against unauthorized disclosure by employees of those elements.

50 U.S.C. § 3232a Measures to mitigate counterintelligence threats from proliferation and use of foreign commercial spyware

(a) DefinitionsIn this section:(1) Appropriate congressional committeesThe term “appropriate congressional committees” means—(A) the Select Committee on Intelligence, the Committee on Foreign Relations, the Committee on Armed Services, the Committee on Banking, Housing, and Urban Affairs, the Committee on the Judiciary, the Committee on Appropriations, and the Committee on Homeland Security and Governmental Affairs of the Senate; and (B) the Permanent Select Committee on Intelligence, the Committee on Foreign Affairs, the Committee on Armed Services, the Committee on Financial Services, the Committee on the Judiciary, the Committee on Appropriations, the Committee on Homeland Security, and the Committee on Oversight and Reform of the House of Representatives. (2) Covered entityThe term “covered entity” means any foreign company that either directly or indirectly develops, maintains, owns, operates, brokers, markets, sells, leases, licenses, or otherwise makes available spyware. (3) Foreign commercial spywareThe term “foreign commercial spyware” means spyware that is developed (solely or in partnership with a foreign company), maintained, sold, leased, licensed, marketed, sourced (in whole or in part), or otherwise provided, either directly or indirectly, by a foreign company. (4) Foreign companyThe term “foreign company” means a company that is incorporated or domiciled outside of the United States, including any subsidiaries or affiliates wherever such subsidiaries or affiliates are domiciled or incorporated. (5) SpywareThe term “spyware” means a tool or set of tools that operate as an end-to-end system of software to provide an unauthorized user remote access to information stored on or transiting through an electronic device connected to the Internet and not owned or operated by the unauthorized user, including end-to-end systems that—(A) allow an unauthorized user to remotely infect electronic devices with malicious software, including without any action required by the user of the device; (B) can record telecommunications or other audio captured on a device not owned by the unauthorized user; (C) undertake geolocation, collect cell site location information, or otherwise track the location of a device or person using the internal sensors of an electronic device not owned by the unauthorized user; (D) allow an unauthorized user access to and the ability to retrieve information on the electronic device, including text messages, files, e-mails, transcripts of chats, contacts, photos, and browsing history; or (E) any additional criteria described in publicly available documents published by the Director of National Intelligence, such as whether the end-to-end system is used outside the context of a codified lawful intercept system. (b) Annual assessments of counterintelligence threats(1) RequirementNot later than 90 days after December 23, 2022, and annually thereafter for seven years, the Director of National Intelligence, in coordination with the Director of the Central Intelligence Agency, the Director of the National Security Agency, and the Director of the Federal Bureau of Investigation, shall submit to the appropriate congressional committees a report with an accompanying classified annex containing an assessment of the counterintelligence threats and other risks to the national security of the United States posed by the proliferation of foreign commercial spyware. The assessment shall incorporate all credible data, including open-source information. (2) ElementsEach report under paragraph (1) shall include the following, if known:(A) A list of the most significant covered entities. (B) A description of the foreign commercial spyware marketed by the covered entities identified under subparagraph (A) and an assessment by the intelligence community of the foreign commercial spyware. (C) An assessment of the counterintelligence risk to the intelligence community or personnel of the intelligence community posed by foreign commercial spyware. (D) For each covered entity identified in subparagraph (A), details of any subsidiaries, resellers, or other agents acting on behalf of the covered entity. (E) Details of where each covered entity identified under subparagraphs (A) and (D) is domiciled. (F) A description of how each covered entity identified under subparagraphs (A) and (D) is financed, where the covered entity acquired its capital, and the organizations and individuals having substantial investments or other equities in the covered entity. (G) An assessment by the intelligence community of any relationship between each covered entity identified in subparagraphs (A) and (D) and any foreign government, including any export controls and processes to which the covered entity is subject. (H) A list of the foreign customers of each covered entity identified in subparagraphs (A) and (D), including the understanding by the intelligence community of the organizations and end-users within any foreign government. (I) With respect to each foreign customer identified under subparagraph (H), an assessment by the intelligence community regarding how the foreign customer is using the spyware, including whether the foreign customer has targeted personnel of the intelligence community. (J) With respect to the first report required under paragraph (1), a mitigation plan to reduce the exposure of personnel of the intelligence community to foreign commercial spyware. (K) With respect to each report following the first report required under paragraph (1), details of steps taken by the intelligence community since the previous report to implement measures to reduce the exposure of personnel of the intelligence community to foreign commercial spyware. (3) Classified annexIn submitting the report under paragraph (1), the Director shall also include an accompanying but separate classified annex, providing a watchlist of companies selling, leasing, or otherwise providing foreign commercial spyware that the Director determines are engaged in activities that pose a counterintelligence risk to personnel of the intelligence community. (4) FormEach report under paragraph (1) shall be submitted in classified form. (5) DisseminationThe Director of National Intelligence shall separately distribute each report under paragraph (1) and each annex under paragraph (3) to the President, the heads of all elements of the intelligence community, the Secretary of State, the Attorney General, the Secretary of Commerce, the Secretary of Homeland Security, the National Cyber Director, and the heads of any other departments or agencies the Director of National Intelligence determines appropriate. (c) Authority to prohibit purchase or use by intelligence community(1) Foreign commercial spyware(A) In generalThe Director of National Intelligence may prohibit any element of the intelligence community from procuring, leasing, or otherwise acquiring on the commercial market, or extending or renewing a contract to procure, lease, or otherwise acquire, foreign commercial spyware. (B) ConsiderationsIn determining whether and how to exercise the authority under subparagraph (A), the Director of National Intelligence shall consider—(i) the assessment of the intelligence community of the counterintelligence threats or other risks to the United States posed by foreign commercial spyware; (ii) the assessment of the intelligence community of whether the foreign commercial spyware has been used to target United States Government personnel; (iii) whether the original owner or developer retains any of the physical property or intellectual property associated with the foreign commercial spyware; (iv) whether the original owner or developer has verifiably destroyed all copies of the data collected by or associated with the foreign commercial spyware; (v) whether the personnel of the original owner or developer retain any access to data collected by or associated with the foreign commercial spyware; (vi) whether the use of the foreign commercial spyware requires the user to connect to an information system of the original owner or developer or information system of a foreign government; and (vii) whether the foreign commercial spyware poses a counterintelligence risk to the United States or any other threat to the national security of the United States. (2) Company that has acquired foreign commercial spyware(A) AuthorityThe Director of National Intelligence may prohibit any element of the intelligence community from entering into any contract or other agreement for any purpose with a company that has acquired, in whole or in part, any foreign commercial spyware. (B) ConsiderationsIn considering whether and how to exercise the authority under subparagraph (A), the Director of National Intelligence shall consider—(i) whether the original owner or developer of the foreign commercial spyware retains any of the physical property or intellectual property associated with the spyware; (ii) whether the original owner or developer of the foreign commercial spyware has verifiably destroyed all data, and any copies thereof, collected by or associated with the spyware; (iii) whether the personnel of the original owner or developer of the foreign commercial spyware retain any access to data collected by or associated with the foreign commercial spyware; (iv) whether the use of the foreign commercial spyware requires the user to connect to an information system of the original owner or developer or information system of a foreign government; and (v) whether the foreign commercial spyware poses a counterintelligence risk to the United States or any other threat to the national security of the United States. (3) Notifications of prohibitionNot later than 30 days after the date on which the Director of National Intelligence exercises the authority to issue a prohibition under subsection (c), the Director of National Intelligence shall notify the congressional intelligence committees of such exercise of authority. Such notice shall include—(A) a description of the circumstances under which the prohibition was issued; (B) an identification of the company or product covered by the prohibition; (C) any information that contributed to the decision of the Director of National Intelligence to exercise the authority, including any information relating to counterintelligence or other risks to the national security of the United States posed by the company or product, as assessed by the intelligence community; and (D) an identification of each element of the intelligence community to which the prohibition has been applied. (4) Waiver authority(A) In generalThe head of an element of the intelligence community may request from the Director of National Intelligence the waiver of a prohibition made under paragraph (1) or (2). (B) Director of National Intelligence determinationThe Director of National Intelligence, upon receiving the waiver request in subparagraph (A), may issue a waiver for a period not to exceed one year in response to the request from the head of an element of the intelligence community if such waiver is in the national security interest of the United States. (C) NoticeNot later than 30 days after approving a waiver request pursuant to subparagraph (B), the Director of National Intelligence shall submit to the congressional intelligence committees, the Subcommittee on Defense of the Committee on Appropriations of the Senate, and the Subcommittee on Defense of the Committee on Appropriations of the House of Representatives a written notification. The notification shall include—(i) an identification of the head of the element of the intelligence community that requested the waiver; (ii) the details of the waiver request, including the national security interests of the United States; (iii) the rationale and basis for the determination that the waiver is in the national security interests of the United States; (iv) the considerations that informed the ultimate determination of the Director of National Intelligence to issue the waiver; and (v) and any other considerations contributing to the determination, made by the Director of National Intelligence. (D) Waiver terminationThe Director of National Intelligence may revoke a previously granted waiver at any time. Upon revocation of a waiver, the Director of National Intelligence shall submit a written notification to the congressional intelligence committees, the Subcommittee on Defense of the Committee on Appropriations of the Senate, and the Subcommittee on Defense of the Committee on Appropriations of the House of Representatives not later than 30 days after making a revocation determination. (5) Termination of prohibitionThe Director of National Intelligence may terminate a prohibition made under paragraph (1) or (2) at any time. Upon termination of a prohibition, the Director of National Intelligence shall submit a notification of the termination to the congressional intelligence committees, the Subcommittee on Defense of the Committee on Appropriations of the Senate, and the Subcommittee on Defense of the Committee on Appropriations of the House of Representatives not later than 30 days after terminating a prohibition, detailing the basis for the termination, including any United States national security interests that may be affected by such termination.

50 U.S.C. § 3233 Misuse of the Office of the Director of National Intelligence name, initials, or seal

(a) Prohibited actsNo person may, except with the written permission of the Director of National Intelligence, or a designee of the Director, knowingly use the words “Office of the Director of National Intelligence”, the initials “ODNI”, the seal of the Office of the Director of National Intelligence, or any colorable imitation of such words, initials, or seal in connection with any merchandise, impersonation, solicitation, or commercial activity in a manner reasonably calculated to convey the impression that such use is approved, endorsed, or authorized by the Director of National Intelligence. (b) InjunctionWhenever it appears to the Attorney General that any person is engaged or is about to engage in an act or practice which constitutes or will constitute conduct prohibited by subsection (a), the Attorney General may initiate a civil proceeding in a district court of the United States to enjoin such act or practice. Such court shall proceed as soon as practicable to the hearing and determination of such action and may, at any time before final determination, enter such restraining orders or prohibitions, or take such other action as is warranted, to prevent injury to the United States or to any person or class of persons for whose protection the action is brought.

50 U.S.C. § 3234 Prohibited personnel practices in the intelligence community

(a) DefinitionsIn this section:(1) AgencyThe term “agency” means an executive department or independent establishment, as defined under sections 101 and 104 of title 5, that contains an intelligence community element, except the Federal Bureau of Investigation. (2) Covered intelligence community elementThe term “covered intelligence community element”—(A) means—(i) the Central Intelligence Agency, the Defense Intelligence Agency, the National Geospatial-Intelligence Agency, the National Security Agency, the Office of the Director of National Intelligence, and the National Reconnaissance Office; and (ii) any executive agency or unit thereof determined by the President under section 2302(a)(2)(C)(ii) of title 5 to have as its principal function the conduct of foreign intelligence or counterintelligence activities; and (B) does not include the Federal Bureau of Investigation. (3) Personnel actionThe term “personnel action” means, with respect to an employee in a position in a covered intelligence community element (other than a position excepted from the competitive service due to its confidential, policy-determining, policymaking, or policy-advocating character) or a contractor employee—(A) an appointment; (B) a promotion; (C) a disciplinary or corrective action; (D) a detail, transfer, or reassignment; (E) a demotion, suspension, or termination; (F) a reinstatement or restoration; (G) a performance evaluation; (H) a decision concerning pay, benefits, or awards; (I) a decision concerning education or training if such education or training may reasonably be expected to lead to an appointment, promotion, or performance evaluation; or (J) any other significant change in duties, responsibilities, or working conditions. (4) Contractor employeeThe term “contractor employee” means an employee of a contractor, subcontractor, grantee, subgrantee, or personal services contractor, of a covered intelligence community element. (b) Agency employeesAny employee of a covered intelligence community element or an agency who has authority to take, direct others to take, recommend, or approve any personnel action, shall not, with respect to such authority, take or fail to take, or threaten to take or fail to take, a personnel action with respect to any employee of a covered intelligence community element as a reprisal for—(1) any lawful disclosure of information by the employee to the Director of National Intelligence (or an employee designated by the Director of National Intelligence for such purpose), the Inspector General of the Intelligence Community, a supervisor in the employee’s direct chain of command, or a supervisor of the employing agency with responsibility for the subject matter of the disclosure, up to and including the head of the employing agency (or an employee designated by the head of that agency for such purpose), the appropriate inspector general of the employing agency or covered intelligence community element, a congressional intelligence committee, or a member of a congressional intelligence committee, which the employee reasonably believes evidences—(A) a violation of any Federal law, rule, or regulation; or (B) mismanagement, a gross waste of funds, an abuse of authority, or a substantial and specific danger to public health or safety; (2) any lawful disclosure that complies with—(A) subsections (b)(1), (e), and (h) of section 416 of title 5; (B) subparagraphs (A), (D), and (H) of section 3517(d)(5) of this title; or (C) subparagraphs (A), (D), and (I) of section 3033(k)(5) of this title; or (3) if the actions do not result in the employee unlawfully disclosing information specifically required by Executive order to be kept classified in the interest of national defense or the conduct of foreign affairs, any lawful disclosure in conjunction with—(A) the exercise of any appeal, complaint, or grievance right granted by any law, rule, or regulation; (B) testimony for or otherwise lawfully assisting any individual in the exercise of any right referred to in subparagraph (A); or (C) cooperation with or disclosing information to the Inspector General of an agency, in accordance with applicable provisions of law in connection with an audit, inspection, or investigation conducted by the Inspector General. (c) Contractor employees(1) Any employee of an agency or of a contractor, subcontractor, grantee, subgrantee, or personal services contractor, of a covered intelligence community element who has authority to take, direct others to take, recommend, or approve any personnel action, shall not, with respect to such authority, take or fail to take, or threaten to take or fail to take, a personnel action with respect to any contractor employee as a reprisal for—(A) any lawful disclosure of information by the contractor employee to the Director of National Intelligence (or an employee designated by the Director of National Intelligence for such purpose), the Inspector General of the Intelligence Community, a supervisor in the contractor employee’s direct chain of command, or a supervisor of the employing or contracting agency or employing contractor with responsibility for the subject matter of the disclosure, up to and including the head of the employing or contracting agency (or an employee designated by the head of that agency for that purpose) or employing contractor, the appropriate inspector general of the employing or contracting agency or covered intelligence community element, a congressional intelligence committee, or a member of a congressional intelligence committee, which the contractor employee reasonably believes evidences—(i) a violation of any Federal law, rule, or regulation (including with respect to evidence of another employee or contractor employee accessing or sharing classified information without authorization); or (ii) mismanagement, a gross waste of funds, an abuse of authority, or a substantial and specific danger to public health or safety; (B) any lawful disclosure that complies with—(i) subsections (b)(1), (e), and (h) of section 416 of title 5; (ii) subparagraphs (A), (D), and (H) of section 3517(d)(5) of this title; or (iii) subparagraphs (A), (D), and (I) of section 3033(k)(5) of this title; or (C) if the actions do not result in the contractor employee unlawfully disclosing information specifically required by Executive order to be kept classified in the interest of national defense or the conduct of foreign affairs, any lawful disclosure in conjunction with—(i) the exercise of any appeal, complaint, or grievance right granted by any law, rule, or regulation; (ii) testimony for or otherwise lawfully assisting any individual in the exercise of any right referred to in clause (i); or (iii) cooperation with or disclosing information to the Inspector General of an agency, in accordance with applicable provisions of law in connection with an audit, inspection, or investigation conducted by the Inspector General. (2) A personnel action under paragraph (1) is prohibited even if the action is undertaken at the request of an agency official, unless the request takes the form of a nondiscretionary directive and is within the authority of the agency official making the request. (d) Rule of constructionConsistent with the protection of intelligence sources and methods, nothing in subsection (b) or (c) shall be construed to authorize—(1) the withholding of information from Congress; or (2) the taking of any personnel action against an employee who lawfully discloses information to Congress. (e) DisclosuresA disclosure shall not be excluded from this section because—(1) the disclosure was made to an individual, including a supervisor, who participated in an activity that the employee reasonably believed to be covered under subsection (b)(1)(B) or the contractor employee reasonably believed to be covered under subsection (c)(1)(A)(ii); (2) the disclosure revealed information that had been previously disclosed; (3) the disclosure was not made in writing; (4) the disclosure was made while the employee was off duty; (5) of the amount of time which has passed since the occurrence of the events described in the disclosure; or (6) the disclosure was made during the normal course of duties of an employee or contractor employee. (f) EnforcementThe President shall provide for the enforcement of this section consistent, to the fullest extent possible, with the policies and procedures used to adjudicate alleged violations of section 2302(b)(8) of title 5. (g) Existing rights preservedNothing in this section shall be construed to—(1) preempt or preclude any employee, contractor employee, or applicant for employment, at the Federal Bureau of Investigation from exercising rights provided under any other law, rule, or regulation, including section 2303 of title 5; or (2) repeal section 2303 of title 5.

50 U.S.C. § 3235 Semiannual reports on investigations of unauthorized disclosures of classified information

(a) DefinitionsIn this section:(1) Covered officialThe term “covered official” means—(A) the heads of each element of the intelligence community; and (B) the inspectors general with oversight responsibility for an element of the intelligence community. (2) InvestigationThe term “investigation” means any inquiry, whether formal or informal, into the existence of an unauthorized public disclosure of classified information. (3) Unauthorized disclosure of classified informationThe term “unauthorized disclosure of classified information” means any unauthorized disclosure of classified information to any recipient. (4) Unauthorized public disclosure of classified informationThe term “unauthorized public disclosure of classified information” means the unauthorized disclosure of classified information to a journalist or media organization. (b) Intelligence community reporting(1) In generalNot less frequently than once every 6 months, each covered official shall submit to the congressional intelligence committees a report on investigations of unauthorized public disclosures of classified information. (2) ElementsEach report submitted under paragraph (1) shall include, with respect to the preceding 6-month period, the following:(A) The number of investigations opened by the covered official regarding an unauthorized public disclosure of classified information. (B) The number of investigations completed by the covered official regarding an unauthorized public disclosure of classified information. (C) Of the number of such completed investigations identified under subparagraph (B), the number referred to the Attorney General for criminal investigation. (c) Department of Justice reporting(1) In generalNot less frequently than once every 6 months, the Assistant Attorney General for National Security of the Department of Justice, in consultation with the Director of the Federal Bureau of Investigation, shall submit to the congressional intelligence committees, the Committee on the Judiciary of the Senate, and the Committee on the Judiciary of the House of Representatives a report on the status of each referral made to the Department of Justice from any element of the intelligence community regarding an unauthorized disclosure of classified information made during the most recent 365-day period or any referral that has not yet been closed, regardless of the date the referral was made. (2) ContentsEach report submitted under paragraph (1) shall include, for each referral covered by the report, at a minimum, the following:(A) The date the referral was received. (B) A statement indicating whether the alleged unauthorized disclosure described in the referral was substantiated by the Department of Justice. (C) A statement indicating the highest level of classification of the information that was revealed in the unauthorized disclosure. (D) A statement indicating whether an open criminal investigation related to the referral is active. (E) A statement indicating whether any criminal charges have been filed related to the referral. (F) A statement indicating whether the Department of Justice has been able to attribute the unauthorized disclosure to a particular entity or individual. (d) Form of reportsEach report submitted under this section shall be submitted in unclassified form, but may have a classified annex.

50 U.S.C. § 3235a Notice and damage assessment with respect to significant unauthorized disclosure or compromise of classified national intelligence

(a) Notification and damage assessment requirements(1) RequirementsIf the Director of National Intelligence becomes aware of an actual or potential significant unauthorized disclosure or compromise of classified national intelligence—(A) as soon as practicable, but not later than 7 days after the date on which the Director becomes so aware, the Director shall notify the congressional intelligence committees of such actual or potential disclosure or compromise; and (B) in the case of an actual disclosure or compromise, not later than 7 days after the date on which the Director becomes so aware, the Director or the head of any element of the intelligence community from which the significant unauthorized disclosure or compromise originated shall initiate a damage assessment consistent with the procedures set forth in Intelligence Community Directive 732 (relating to the conduct of damage assessments), or successor directive, with respect to such disclosure or compromise. (2) Contents of notificationA notification submitted to the congressional intelligence committees under paragraph (1)(A) with respect to an actual or potential significant unauthorized disclosure or compromise of classified national intelligence shall include—(A) a summary of the facts and circumstances of such disclosure or compromise; (B) a summary of the contents of the national intelligence revealed or potentially revealed, as the case may be, by such disclosure or compromise; (C) an initial appraisal of the level of actual or potential damage, as the case may be, to the national security of the United States as a result of such disclosure or compromise; and (D) in the case of an actual disclosure or compromise, which elements of the intelligence community will be involved in the damage assessment conducted with respect to such disclosure or compromise pursuant to paragraph (1)(B). (b) Damage assessment reporting requirements(1) Recurring reporting requirementNot later than 30 days after the date of the initiation of a damage assessment pursuant to subsection (a)(1)(B), and every 90 days thereafter until the completion of the damage assessment or upon the request of the congressional intelligence committees, the Director of National Intelligence shall—(A) submit to the congressional intelligence committees copies of any documents or materials disclosed as a result of the significant unauthorized disclosure or compromise of the classified national intelligence that is the subject of the damage assessment; and (B) provide to the congressional intelligence committees a briefing on such documents and materials and a status of the damage assessment. (2) Final damage assessmentAs soon as practicable after completing a damage assessment pursuant to subsection (a)(1)(B), the Director of National Intelligence shall submit the final damage assessment to the congressional intelligence committees. (c) Notification of referral to Department of JusticeIf a referral is made to the Department of Justice from any element of the intelligence community regarding a significant unauthorized disclosure or compromise of classified national intelligence under this section, the Director of National Intelligence shall notify the congressional intelligence committees of the referral on the date such referral is made.

50 U.S.C. § 3236 Inspector General external review panel

(a) Request for reviewAn individual with a claim described in subsection (b) may submit to the Inspector General of the Intelligence Community a request for a review of such claim by an external review panel convened under subsection (c). (b) Claims and individuals describedA claim described in this subsection is any—(1) claim by an individual—(A) that the individual has been subjected to a personnel action that is prohibited under section 3234 of this title; and (B) who has exhausted the applicable review process for the claim pursuant to enforcement of such section; or (2) claim by an individual—(A) that he or she has been subjected to a reprisal prohibited by paragraph (1) of section 3341(j) of this title; and (B) who received a decision on an appeal regarding that claim under paragraph (4) of such section. (c) External review panel convened(1) Discretion to conveneUpon receipt of a request under subsection (a) regarding a claim, the Inspector General of the Intelligence Community may, at the discretion of the Inspector General, convene an external review panel under this subsection to review the claim. (2) Membership(A) CompositionAn external review panel convened under this subsection shall be composed of three members as follows:(i) The Inspector General of the Intelligence Community. (ii) Except as provided in subparagraph (B), two members selected by the Inspector General as the Inspector General considers appropriate on a case-by-case basis from among inspectors general of the following:(I) The Department of Defense. (II) The Department of Energy. (III) The Department of Homeland Security. (IV) The Department of Justice. (V) The Department of State. (VI) The Department of the Treasury. (VII) The Central Intelligence Agency. (VIII) The Defense Intelligence Agency. (IX) The National Geospatial-Intelligence Agency. (X) The National Reconnaissance Office. (XI) The National Security Agency. (B) LimitationAn inspector general of an agency may not be selected to sit on the panel under subparagraph (A)(ii) to review any matter relating to a decision made by such agency. (C) Chairperson(i) In generalExcept as provided in clause (ii), the chairperson of any panel convened under this subsection shall be the Inspector General of the Intelligence Community. (ii) Conflicts of interestIf the Inspector General of the Intelligence Community finds cause to recuse himself or herself from a panel convened under this subsection, the Inspector General of the Intelligence Community shall—(I) select a chairperson from inspectors general of the elements listed under subparagraph (A)(ii) whom the Inspector General of the Intelligence Community considers appropriate; and (II) notify the congressional intelligence committees of such selection. (3) Period of reviewEach external review panel convened under this subsection to review a claim shall complete review of the claim no later than 270 days after the date on which the Inspector General convenes the external review panel. (d) Remedies(1) Panel recommendationsIf an external review panel convened under subsection (c) determines, pursuant to a review of a claim submitted by an individual under subsection (a), that the individual was the subject of a personnel action prohibited under section 3234 of this title or was subjected to a reprisal prohibited by section 3341(j)(1) of this title, the panel may recommend that the agency head take corrective action—(A) in the case of an employee or former employee—(i) to return the employee or former employee, as nearly as practicable and reasonable, to the position such employee or former employee would have held had the reprisal not occurred; or (ii) reconsider the employee’s or former employee’s eligibility for access to classified information consistent with national security; or (B) in any other case, such other action as the external review panel considers appropriate. (2) Agency action(A) In generalNot later than 90 days after the date on which the head of an agency receives a recommendation from an external review panel under paragraph (1), the head shall—(i) give full consideration to such recommendation; and (ii) inform the panel and the Director of National Intelligence of what action the head has taken with respect to the recommendation. (B) Failure to informThe Director shall notify the President of any failures to comply with subparagraph (A)(ii). (e) Annual reports(1) In generalNot less frequently than once each year, the Inspector General of the Intelligence Community shall submit to the congressional intelligence committees and the Director of National Intelligence a report on the activities under this section during the previous year. (2) ContentsSubject to such limitations as the Inspector General of the Intelligence Community considers necessary to protect the privacy of an individual who has made a claim described in subsection (b), each report submitted under paragraph (1) shall include, for the period covered by the report, the following:(A) The determinations and recommendations made by the external review panels convened under this section. (B) The responses of the heads of agencies that received recommendations from the external review panels.

50 U.S.C. § 3237 Annual reports on influence operations and campaigns in the United States by the Chinese Communist Party

(a) RequirementOn an annual basis, consistent with the protection of intelligence sources and methods, the Director of the National Counterintelligence and Security Center, in coordination with the Director of the Federal Bureau of Investigation, the Director of the Central Intelligence Agency, the Director of the National Security Agency, and any other relevant head of an element of the intelligence community, shall submit to the congressional intelligence committees, the Committee on the Judiciary of the Senate, the Committee on the Judiciary of the House of Representatives, the Committee on Foreign Affairs of the House of Representatives, and the Committee on Foreign Relations of the Senate a report on the influence operations and campaigns in the United States conducted by the Chinese Communist Party. (b) ContentsEach report under subsection (a) shall include the following:(1) A description of the organization of the United Front Work Department of the People’s Republic of China, or the successors of the United Front Work Department, and the links between the United Front Work Department and the Central Committee of the Chinese Communist Party. (2) An assessment of the degree to which organizations that are associated with or receive funding from the United Front Work Department, particularly such entities operating in the United States, are formally tasked by the Chinese Communist Party or the Government of China. (3) A description of the efforts by the United Front Work Department and subsidiary organizations of the United Front Work Department to target, coerce, and influence foreign populations, particularly those of ethnic Chinese descent. (4) An assessment of attempts by the Chinese Embassy, consulates, and organizations affiliated with the Chinese Communist Party (including, at a minimum, the United Front Work Department) to influence the United States-based Chinese Student Scholar Associations. (5) A description of the evolution of the role of the United Front Work Department under the leadership of the President of China. (6) An assessment of the activities of the United Front Work Department designed to influence the opinions of elected leaders of the United States, or candidates for elections in the United States, with respect to issues of importance to the Chinese Communist Party. (7) A listing of all known organizations affiliated with the United Front Work Department that are operating in the United States as of the date of the report. (8) An identification of influence activities and operations employed by the Chinese Communist Party against the United States science and technology sectors, specifically employees of the United States Government, researchers, scientists, and students in the science and technology sector in the United States. (9) A listing of all known Chinese talent recruitment programs operating in the United States as of the date of the report. (10) A listing of provincial, municipal, or other law enforcement institutions, including police departments, in the People’s Republic of China associated with establishing or maintaining a Chinese police presence in the United States. (11) A listing of colleges and universities in the People’s Republic of China that conduct military research or host dedicated military initiatives or laboratories. (12) With respect to reports submitted after the first report, an assessment of the change in goals, tactics, techniques, and procedures of the influence operations and campaigns conducted by the Chinese Communist Party. (c) FormEach report submitted under subsection (a) shall be submitted in unclassified form, but may include a classified annex.

50 U.S.C. § 3238 Annual reports on influence operations and campaigns in the United States by the Russian Federation

(a) RequirementOn an annual basis, the Director of the National Counterintelligence and Security Center shall submit to the congressional intelligence committees a report on the influence operations and campaigns in the United States conducted by the Russian Federation. (b) ContentsEach report under subsection (a) shall include the following:(1) A description and listing of the Russian organizations and persons involved in influence operations and campaigns operating in the United States as of the date of the report. (2) An assessment of organizations that are associated with or receive funding from organizations and persons identified in paragraph (1), particularly such entities operating in the United States. (3) A description of the efforts by the organizations and persons identified in paragraph (1) to target, coerce, and influence populations within the United States. (4) An assessment of the activities of the organizations and persons identified in paragraph (1) designed to influence the opinions of elected leaders of the United States or candidates for election in the United States. (5) With respect to reports submitted after the first report, an assessment of the change in goals, tactics, techniques, and procedures of the influence operations and campaigns conducted by the organizations and persons identified in paragraph (1). (c) CoordinationIn carrying out subsection (a), the Director shall coordinate with the Director of the Federal Bureau of Investigation, the Director of the Central Intelligence Agency, the Director of the National Security Agency, and any other relevant head of an element of the intelligence community. (d) FormEach report submitted under subsection (a) shall be submitted in unclassified form, but may include a classified annex.

50 U.S.C. § 3239 Requirement to buy certain satellite component from American sources

(a) DefinitionsIn this section:(1) Covered element of the intelligence communityThe term “covered element of the intelligence community” means an element of the intelligence community that is not an element of the Department of Defense. (2) National security satelliteThe term “national security satellite” means a satellite weighing over 400 pounds whose principle purpose is to support the national security or intelligence needs of the United States Government. (3) United StatesThe term “United States” means the several States, the District of Columbia, and the territories and possessions of the United States. (b) RequirementBeginning January 1, 2021, except as provided in subsection (c), a covered element of the intelligence community may not award a contract for a national security satellite if the satellite uses a star tracker that is not produced in the United States, including with respect to both the software and the hardware of the star tracker. (c) ExceptionThe head of a covered element of the intelligence community may waive the requirement under subsection (b) if, on a case-by-case basis, the head certifies in writing to the congressional intelligence committees that—(1) there is no available star tracker produced in the United States that meets the mission and design requirements of the national security satellite for which the star tracker will be used; (2) the cost of a star tracker produced in the United States is unreasonable, based on a market survey; or (3) such waiver is necessary for the national security interests of the United States based on an urgent and compelling need.

50 U.S.C. § 3240 Report on best practices to protect privacy, civil liberties, and civil rights of Chinese Americans

(a) Sense of CongressIt is the sense of Congress that—(1) the People’s Republic of China appears to be specifically targeting the Chinese-American community for intelligence purposes; (2) such targeting carries a substantial risk that the loyalty of such Americans may be generally questioned and lead to unacceptable stereotyping, targeting, and racial profiling; (3) the United States Government has a duty to warn and protect all Americans including those of Chinese descent from these intelligence efforts by the People’s Republic of China; (4) the broad stereotyping, targeting, and racial profiling of Americans of Chinese descent is contrary to the values of the United States and reinforces the flawed narrative perpetuated by the People’s Republic of China that ethnically Chinese individuals worldwide have a duty to support the People’s Republic of China; and (5) the United States efforts to combat the People’s Republic of China’s intelligence activities should actively safeguard and promote the constitutional rights of all Chinese Americans. (b) ReportOn an annual basis, the Director of National Intelligence, acting through the Office of Civil Liberties, Privacy, and Transparency, in coordination with the civil liberties and privacy officers of the elements of the intelligence community, shall submit a report to the congressional intelligence committees containing—(1) a review of how the policies, procedures, and practices of the intelligence community that govern the intelligence activities and operations targeting the People’s Republic of China affect policies, procedures, and practices relating to the privacy, civil liberties, and civil rights of Americans of Chinese descent who may be targets of espionage and influence operations by China; and (2) recommendations to ensure that the privacy, civil liberties, and civil rights of Americans of Chinese descent are sufficiently protected. (c) FormThe report under subsection (b) shall be submitted in unclassified form, but may include a classified annex.

50 U.S.C. § 3241 Biennial reports on foreign biological threats

(a) ReportsOn a biennial basis until the date that is 10 years after March 15, 2022, the Director of National Intelligence shall submit to the congressional intelligence committees a comprehensive report on the activities, prioritization, and responsibilities of the intelligence community with respect to foreign biological threats emanating from the territory of, or sponsored by, a covered country. (b) Matters includedEach report under subsection (a) shall include, with respect to foreign biological threats emanating from the territory of, or sponsored by, a covered country, the following:(1) A detailed description of all activities relating to such threats undertaken by each element of the intelligence community, and an assessment of any gaps in such activities. (2) A detailed description of all duties and responsibilities relating to such threats explicitly authorized or otherwise assigned, exclusively or jointly, to each element of the intelligence community, and an assessment of any identified gaps in such duties or responsibilities. (3) A description of the coordination among the relevant elements of the intelligence community with respect to the activities specified in paragraph (1) and the duties and responsibilities specified in paragraph (2). (4) An inventory of the strategies, plans, policies, and interagency agreements of the intelligence community relating to the collection, monitoring, analysis, mitigation, and attribution of such threats, and an assessment of any identified gaps therein. (5) A description of the coordination and interactions among the relevant elements of the intelligence community and non-intelligence community partners. (6) An assessment of foreign malign influence efforts relating to such threats, including any foreign academics engaged in such efforts, and a description of how the intelligence community contributes to efforts by non-intelligence community partners to counter such foreign malign influence. (c) FormEach report submitted under subsection (a) may be submitted in classified form, but if so submitted shall include an unclassified executive summary. (d) DefinitionsIn this section:(1) Covered countryThe term “covered country” means—(A) China; (B) Iran; (C) North Korea; (D) Russia; and (E) any other foreign country—(i) from which the Director of National Intelligence determines a biological threat emanates; or (ii) that the Director determines has a known history of, or has been assessed as having conditions present for, infectious disease outbreaks or epidemics. (2) Foreign biological threatThe term “foreign biological threat” means biological warfare, bioterrorism, naturally occurring infectious diseases, or accidental exposures to biological materials, without regard to whether the threat originates from a state actor, a non-state actor, natural conditions, or an undetermined source. (3) Foreign malign influenceThe term “foreign malign influence” has the meaning given such term in section 3059(e) 11 See References in Text note below. of this title. (4) Non-intelligence community partnerThe term “non-intelligence community partner” means a Federal department or agency that is not an element of the intelligence community.

50 U.S.C. § 3242 Annual reports on certain cyber vulnerabilities procured by intelligence community and foreign commercial providers of cyber vulnerabilities

(a) Annual reportsOn an annual basis through 2026, the Director of the Central Intelligence Agency and the Director of the National Security Agency, in coordination with the Director of National Intelligence, shall jointly submit to the congressional intelligence committees a report containing information on foreign commercial providers and the cyber vulnerabilities procured by the intelligence community through foreign commercial providers. (b) ElementsEach report under subsection (a) shall include, with respect to the period covered by the report, the following:(1) A description of each cyber vulnerability procured through a foreign commercial provider, including—(A) a description of the vulnerability; (B) the date of the procurement; (C) whether the procurement consisted of only that vulnerability or included other vulnerabilities; (D) the cost of the procurement; (E) the identity of the commercial provider and, if the commercial provider was not the original supplier of the vulnerability, a description of the original supplier; (F) the country of origin of the vulnerability; and (G) an assessment of the ability of the intelligence community to use the vulnerability, including whether such use will be operational or for research and development, and the approximate timeline for such use. (2) An assessment of foreign commercial providers that—(A) pose a significant threat to the national security of the United States; or (B) have provided cyber vulnerabilities to any foreign government that—(i) has used the cyber vulnerabilities to target United States persons, the United States Government, journalists, or dissidents; or (ii) has an established pattern or practice of violating human rights or suppressing dissent. (3) An assessment of whether the intelligence community has conducted business with the foreign commercial providers identified under paragraph (2) during the 5-year period preceding the date of the report. (c) FormEach report under subsection (a) may be submitted in classified form. (d) DefinitionsIn this section:(1) Commercial providerThe term “commercial provider” means any person that sells, or acts as a broker, for a cyber vulnerability. (2) Cyber vulnerabilityThe term “cyber vulnerability” means any tool, exploit, vulnerability, or code that is intended to compromise a device, network, or system, including such a tool, exploit, vulnerability, or code procured by the intelligence community for purposes of research and development.

50 U.S.C. § 3243 Periodic reports on technology strategy of intelligence community

(a) ReportsOn a basis that is not less frequent than once every 4 years, the Director of National Intelligence, in coordination with the Director of the Office of Science and Technology Policy, the Secretary of Commerce, and the heads of such other agencies as the Director considers appropriate, shall submit to the congressional intelligence committees a comprehensive report on the technology strategy of the intelligence community, which shall be designed to support the maintenance of the leadership of the United States in critical and emerging technologies essential to the national security of the United States. (b) ElementsEach report submitted under subsection (a) shall include the following:(1) An assessment of technologies critical to the national security of the United States, particularly those technologies with respect to which foreign countries that are adversarial to the United States have or are poised to match or surpass the technology leadership of the United States. (2) A review of current technology policies of the intelligence community, including long-term goals. (3) An identification of sectors and supply chains the Director determines to be of the greatest strategic importance to national security. (4) An identification of opportunities to protect the leadership of the United States, and the allies and partners of the United States, in critical technologies, including through targeted export controls, investment screening, and counterintelligence activities. (5) An identification of research and development areas the Director determines critical to the national security of the United States, including areas in which the private sector does not focus. (6) Recommendations for growing talent in key critical and emerging technologies and enhancing the ability of the intelligence community to recruit and retain individuals with critical skills relating to such technologies. (7) An identification of opportunities to improve the leadership of the United States in critical technologies, including opportunities to develop international partnerships to reinforce domestic policy actions, develop new markets, engage in collaborative research, and maintain an international environment that reflects the values of the United States and protects the interests of the United States. (8) A technology annex to establish an approach for the identification, prioritization, development, and fielding of emerging technologies critical to the mission of the intelligence community. (9) Such other information as the Director determines may be necessary to inform Congress on matters relating to the technology strategy of the intelligence community and related implications for the national security of the United States. (c) Form of annexEach annex submitted under subsection (b)(8) may be submitted in classified form.

50 U.S.C. § 3244 Annual report on reporting requirements

(a) Annual report requiredNot later than March 1 of each fiscal year, the Director of National Intelligence shall submit to the congressional intelligence committees, the Committee on Appropriations of the Senate, and the Committee on Appropriations of the House of Representatives a report detailing all congressionally mandated reporting requirements applicable to the Office of the Director of National Intelligence for the upcoming fiscal year. (b) ContentsEach report submitted pursuant to subsection (a) shall include, for the fiscal year covered by the report and for each congressionally mandated reporting requirement detailed in the report:(1) A description of the reporting requirement. (2) A citation to the provision of law (or other source of congressional directive) imposing the reporting requirement. (3) Whether the reporting requirement is recurring, conditional, or subject to a termination provision. (4) Whether the Director recommends repealing or modifying the requirement. (c) FormEach report submitted pursuant to subsection (a) may be submitted in classified form.