text: SECTION 1. SHORT TITLE.
      This Act may be cited as the ``Department of Homeland Security Data 
  Framework Act of 2018''.
  SEC. 2. DEPARTMENT OF HOMELAND SECURITY DATA FRAMEWORK.
      (a) In General.--
          (1) Development.--The Secretary of Homeland Security shall 
      develop a data framework to integrate existing Department of 
      Homeland Security datasets and systems, as appropriate, for access 
      by authorized personnel in a manner consistent with relevant legal 
      authorities and privacy, civil rights, and civil liberties policies 
      and protections.
          (2) Requirements.--In developing the framework required under 
      paragraph (1), the Secretary of Homeland Security shall ensure, in 
      accordance with all applicable statutory and regulatory 
      requirements, the following information is included:
              (A) All information acquired, held, or obtained by an 
          office or component of the Department of Homeland Security that 
          falls within the scope of the information sharing environment, 
          including homeland security information, terrorism information, 
          weapons of mass destruction information, and national 
          intelligence.
              (B) Any information or intelligence relevant to priority 
          mission needs and capability requirements of the homeland 
          security enterprise, as determined appropriate by the 
          Secretary.
      (b) Data Framework Access.--
          (1) In general.--The Secretary of Homeland Security shall 
      ensure that the data framework required under this section is 
      accessible to employees of the Department of Homeland Security who 
      the Secretary determines--
              (A) have an appropriate security clearance;
              (B) are assigned to perform a function that requires access 
          to information in such framework; and
              (C) are trained in applicable standards for safeguarding 
          and using such information.
          (2) Guidance.--The Secretary of Homeland Security shall--
              (A) issue guidance for Department of Homeland Security 
          employees authorized to access and contribute to the data 
          framework pursuant to paragraph (1); and
              (B) ensure that such guidance enforces a duty to share 
          between offices and components of the Department when accessing 
          or contributing to such framework for mission needs.
          (3) Efficiency.--The Secretary of Homeland Security shall 
      promulgate data standards and instruct components of the Department 
      of Homeland Security to make available information through the data 
      framework required under this section in a machine-readable 
      standard format, to the greatest extent practicable.
      (c) Exclusion of Information.--The Secretary of Homeland Security 
  may exclude information from the data framework required under this 
  section if the Secretary determines inclusion of such information may--
          (1) jeopardize the protection of sources, methods, or 
      activities;
          (2) compromise a criminal or national security investigation;
          (3) be inconsistent with other Federal laws or regulations; or
          (4) be duplicative or not serve an operational purpose if 
      included in such framework.
      (d) Safeguards.--The Secretary of Homeland Security shall 
  incorporate into the data framework required under this section systems 
  capabilities for auditing and ensuring the security of information 
  included in such framework. Such capabilities shall include the 
  following:
          (1) Mechanisms for identifying insider threats.
          (2) Mechanisms for identifying security risks.
          (3) Safeguards for privacy, civil rights, and civil liberties.
      (e) Deadline for Implementation.--Not later than 2 years after the 
  date of enactment of this Act, the Secretary of Homeland Security shall 
  ensure the data framework required under this section has the ability 
  to include appropriate information in existence within the Department 
  of Homeland Security to meet the critical mission operations of the 
  Department of Homeland Security.
      (f) Notice to Congress.--
          (1) Status updates.--The Secretary of Homeland Security shall 
      submit to the appropriate congressional committees regular updates 
      on the status of the data framework until the framework is fully 
      operational.
          (2) Operational notification.--Not later than 60 days after the 
      date on which the data framework required under this section is 
      fully operational, the Secretary of Homeland Security shall provide 
      notice to the appropriate congressional committees that the data 
      framework is fully operational.
          (3) Value added.--The Secretary of Homeland Security shall 
      annually brief Congress on component use of the data framework 
      required under this section to support operations that disrupt 
      terrorist activities and incidents in the homeland.
      (g) Definitions.--In this section:
          (1) Appropriate congressional committee; homeland.--The terms 
      ``appropriate congressional committee'' and ``homeland'' have the 
      meaning given those terms in section 2 of the Homeland Security Act 
      of 2002 (6 U.S.C. 101).
          (2) Homeland security information.--The term ``homeland 
      security information'' has the meaning given such term in section 
      892 of the Homeland Security Act of 2002 (6 U.S.C. 482).
          (3) National intelligence.--The term ``national intelligence'' 
      has the meaning given such term in section 3(5) of the National 
      Security Act of 1947 (50 U.S.C. 3003(5)).
          (4) Terrorism information.--The term ``terrorism information'' 
      has the meaning given such term in section 1016 of the Intelligence 
      Reform and Terrorism Prevention Act of 2004 (6 U.S.C. 485).
  
                                 Speaker of the House of Representatives.
  
                              Vice President of the United States and    
                                                 President of the Senate.
target: Department of Homeland Security Data Framework Act of 2017 (Sec. 2) This bill directs the Department of Homeland Security (DHS) to: (1) develop a data framework to integrate existing DHS datasets and systems for access by authorized personnel in a manner consistent with relevant legal authorities and privacy, civil rights, and civil liberties policies and protections; (2) ensure that all information of a DHS office or component that falls within the scope of the information sharing environment, and any information or intelligence relevant to priority mission needs and capability requirements of the homeland security enterprise, is included; and (3) ensure that the framework is accessible to DHS employees who have an appropriate security clearance, who are assigned to perform a function that requires access, and who are trained in applicable standards for safeguarding and using such information. DHS shall: (1) issue guidance for DHS employees authorized to access and contribute to the framework that enforces a duty to share between DHS offices and components for mission needs; and (2) promulgate data standards and instruct DHS components to make available information through the framework in a machine-readable format. DHS may exclude information that could:   jeopardize the protection of sources, methods, or activities;   compromise a criminal or national security investigation;   be inconsistent with the other federal laws or regulations; or   be duplicative or not serve an operational purpose.  DHS shall incorporate into such framework systems capabilities for auditing and ensuring the security of information. Such capabilities shall include: (1) mechanisms for identifying insider threats and security risks; and (2) safeguards for privacy, civil rights, and civil liberties. DHS shall ensure that, by two years after this bill's enactment, the framework has the ability to include appropriate information in existence within the department to meet its critical mission operations.
feat_title: Department of Homeland Security Data Framework Act of 2017