Title 6 — Domestic SecurityRelease 119-73not60
§681c Voluntary Reporting of Other Cyber Incidents
Title 6 › Chapter 1— HOMELAND SECURITY ORGANIZATION › Subchapter XVIII— CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY › Part D— Cyber Incident Reporting › § 681c
Summary
Organizations may choose to tell the Agency about cyber incidents or ransom payments even when they are not required to. They can also add extra optional details to reports they must file. The same rules and protections that apply to required reports also apply to these voluntary reports.
Full Legal Text
Title 6, §681c
Domestic Security — Source: USLM XML via OLRC
(a)Entities may voluntarily report cyber incidents or ransom payments to the Agency that are not required under paragraph (1), (2), or (3) of section 681b(a) of this title, but may enhance the situational awareness of cyber threats.
(b)Covered entities may voluntarily include in reports required under paragraph (1), (2), or (3) of section 681b(a) of this title information that is not required to be included, but may enhance the situational awareness of cyber threats.
(c)section 681e of this title shall apply in the same manner and to the same extent to reports and information submitted under subsections (a) and (b) as it applies to reports and information submitted under section 681b of this title.
Legislative History
Notes & Related Subsidiaries
Editorial Notes
Amendments
2022—Subsec. (c). Pub. L. 117–263 added subsec. (c) and struck out former subsec. (c). Prior to amendment, text read as follows: “The protections under section 681e of this title applicable to reports made under section 681b of this title shall apply in the same manner and to the same extent to reports and information submitted under subsections (a) and (b).”
Reference
Citations & Metadata
Citation
6 U.S.C. § 681c
Title 6 — Domestic Security
Last Updated
Apr 3, 2026
Release point: 119-73not60