Us Code § 10308 - Cyber protection support for personnel of the Department of State in positions highly vulnerable to cyber attack
Full text of Us Code United States Code § 10308 — Cyber protection support for personnel of the Department of State in positions highly vulnerable to cyber attack, with citation guidance and answers to common questions.
§ 10308. Cyber protection support for personnel of the Department of State in positions highly vulnerable to cyber attack
(a) Definitions
In this section:
(1) At-risk personnel
The term "at-risk personnel" means personnel of the Department—
(A) whom the Secretary determines to be highly vulnerable to cyber attacks and hostile information collection activities because of their positions in the Department; and
(B) whose personal technology devices or personal accounts are highly vulnerable to cyber attacks and hostile information collection activities.
(2) Personal accounts
The term "personal accounts" means accounts for online and telecommunications services, including telephone, residential internet access, email, text and multimedia messaging, cloud computing, social media, health care, and financial services, used by Department personnel outside of the scope of their employment with the Department.
(3) Personal technology devices
The term "personal technology devices" means technology devices used by personnel of the Department outside of the scope of their employment with the Department, including networks to which such devices connect.
(b) Requirement to provide cyber protection support
The Secretary, in consultation with the Secretary of Homeland Security and the Director of National Intelligence, as appropriate—
(1) shall offer cyber protection support for the personal technology devices and personal accounts of at-risk personnel; and
(2) may provide the support described in paragraph (1) to any Department personnel who request such support.
(c) Nature of cyber protection support
Subject to the availability of resources, the cyber protection support provided to personnel pursuant to subsection (b) may include training, advice, assistance, and other services relating to protection against cyber attacks and hostile information collection activities.
(d) Privacy protections for personal devices
The Department is prohibited pursuant to this section from accessing or retrieving any information from any personal technology device or personal account of Department employees unless—
(1) access or information retrieval is necessary for carrying out the cyber protection support specified in this section; and
(2) the Department has received explicit consent from the employee to access a personal technology device or personal account prior to each time such device or account is accessed.
(e) Rule of construction
Nothing in this section may be construed—
(1) to encourage Department personnel to use personal technology devices for official business; or
(2) to authorize cyber protection support for senior Department personnel using personal devices, networks, and personal accounts in an official capacity.
(f) Report
(1) In general
Not later than 180 days after December 22, 2023, the Secretary shall submit to the appropriate committees of Congress a report regarding the provision of cyber protection support pursuant to subsection (b), which shall include—
(A) a description of the methodology used to make the determination under subsection (a)(1); and
(B) guidance for the use of cyber protection support and tracking of support requests for personnel receiving cyber protection support pursuant to subsection (b).
(2) Appropriate committees of Congress defined
In this subsection, the term "appropriate committees of Congress" means—
(A) the appropriate congressional committees;
(B) the Select Committee on Intelligence and the Committee on Homeland Security and Governmental Affairs of the Senate; and
(C) the Permanent Select Committee on Intelligence and the Committee on Oversight and Accountability of the House of Representatives.
(Pub. L. 118–31, div. F, title LXIII, §6308, Dec. 22, 2023, 137 Stat. 993.)
Statutory Notes and Related Subsidiaries
Definitions
For definitions of "Department", "Secretary", and "appropriate congressional committees" as used in this section, see section 6002 of Pub. L. 118–31, set out as a note under section 2651 of this title.
CHAPTER 111—AUSTRALIA, UNITED KINGDOM, AND UNITED STATES (AUKUS) SECURITY PARTNERSHIP
SUBCHAPTER I—ADMINISTRATIVE PROVISIONS
SUBCHAPTER II—STREAMLINING AND PROTECTING TRANSFERS OF UNITED STATES MILITARY TECHNOLOGY FROM COMPROMISE
SUBCHAPTER III—AUKUS SUBMARINE TRANSFER AUTHORIZATION ACT
About This Section
22 U.S.C. § 10308 is part of Title 22 of the United States Code. The United States Code is the official codification of federal statutes maintained by the Office of the Law Revision Counsel of the U.S. House of Representatives. Congress amends the Code through new public laws, which are eventually incorporated into the relevant title.
This section may be cited in legal writing as 22 U.S.C. § 10308. For the most current official text, including any recent amendments, use the official source links below. Do not rely on this page as the sole authority for legal citation or litigation.
How to Read This Statute
Statutes are organized by title, chapter, section, and subsection. Pay attention to words like "shall," "may," "and," and "or," because they determine whether a requirement is mandatory or permissive and whether multiple conditions must all be met. Historical notes and amendments often appear at the end of a section.
Using This Page
This page is intended for research and educational use. Lawyers, students, journalists, and compliance professionals can use it as a starting point, but should always verify the current text through an official government source before relying on it for legal advice, filings, or compliance decisions.