§1506 Oversight of Government Activities

Summary

Requires certain federal agency leaders to give Congress a detailed report on how this part of the law was put into action not later than 1 year after December 18, 2015. That report can include recommendations. It must cover real-time information sharing under section 1504(c) and any problems with it, whether cyber threat indicators or defensive measures were properly classified and how many security clearances were authorized to share them with the private sector, how many indicators or measures were received through the section 1504(c) process, and which federal entities received them. Requires inspectors general of the relevant agencies, working with other inspectors general, to give Congress an interagency report not later than 2 years after December 18, 2015 and at least every 2 years after that. Each report must assess whether sharing policies and procedures are adequate (including rules for removing personal information not related to a cyber threat), say if items were properly classified and how many clearances were used, review how the government used information it received (including whether uses and sharing were appropriate and timely), and assess the information shared (including counts through section 1504(c), any improper sharing of personal information or significant violations, how often shared information was used to prosecute offenses listed in section 1504(d)(5)(A), and effects on privacy and civil liberties including the number of notices about failures to remove personal information under section 1504(b)(3)(E)). The reports must also look for barriers to sharing among agencies and may include recommendations. The Comptroller General must send a separate report not later than 3 years after December 18, 2015 about removing personal information and whether privacy and civil liberties protections are sufficient. All required reports must be submitted in unclassified form, may have a classified annex, and the unclassified parts must be made public.