H.R. 5680: Cybersecurity Vulnerability Identification and Notification Act of 2020

116th Congress

To amend the Homeland Security Act of 2002 to protect United States critical infrastructure by ensuring that the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security has necessary legal tools to notify entities at risk of cybersecurity vulnerabilities in the enterprise devices or systems that control critical assets of the United States, and for other purposes.

Sponsor: Rep. James Langevin — D — RI

Under current law, the Cybersecurity and Infrastructure Security Agency (CISA) shares information about cyber threats with owners and operators of critical infrastructure (such as power generation and transmission facilities). In rare instances, the agency cannot do so because it is unable to identify the owners of computers or devices that are vulnerable to malicious activity. H.R. 5680 authorizes CISA to issue administrative subpoenas in those instances to compel Internet service providers (ISPs) to disclose the identity of owners of such critical infrastructure. The bill also would require CISA to provide annual reports to the Congress on its use of that authority.

View the full vote history of this bill on GovTrack.us.