§126 Department of Homeland Security data framework

Summary

The Secretary of Homeland Security must build a data framework that links DHS datasets and systems so authorized staff can access needed information while following laws and protecting privacy, civil rights, and civil liberties. The framework must include DHS-held information that fits the information-sharing mission—like homeland security, terrorism, weapons of mass destruction, and national intelligence—and any other information the Secretary finds important for priority missions. Access is allowed only to employees who have the right security clearance, need the data for their job, and are trained. The Secretary must issue rules for use and sharing, set data standards, and require information to be shared in a machine-readable standard format as much as possible. The Secretary may leave out information that would risk sources or methods, harm investigations, violate other laws, or be needless or redundant. The framework must include auditing and security tools to spot insider threats, find security risks, and protect privacy and civil rights. By no later than 2 years after December 19, 2018, the framework must be able to hold the appropriate DHS information for critical missions. The Secretary must give regular updates to Congress until it is fully operational, notify Congress within 60 days after it is fully operational, and brief Congress each year on how the framework is used to stop terrorist activity or incidents. The words the law uses for certain terms are given elsewhere in the U.S. Code.