Browse Arkansas Code titles and sections
50 U.S.C. § 3004 — Annual reports on certain cyber vulnerabilities procured by intelligence community and foreign commercial providers of cyber vulnerabilities
Federal law — U.S. Code and appendices · legal_authorities
**(a) Annual reports** On an annual basis through 2026, the Director of the Central Intelligence Agency and the Director of the National Security Agency, in coordination with the Director of National Intelligence, shall jointly submit to the congressional intelligence committees a report containing information on foreign commercial providers and the cyber vulnerabilities procured by the intelligence community through foreign commercial providers.
**(b) Elements** Each report under subsection (a) shall include, with respect to the period covered by the report, the following:
(1) A description of each cyber vulnerability procured through a foreign commercial provider, including—
(A) a description of the vulnerability;
(B) the date of the procurement;
(C) whether the procurement consisted of only that vulnerability or included other vulnerabilities;
(D) the cost of the procurement;
(E) the identity of the commercial provider and, if the commercial provider was not the original supplier of the vulnerability, a description of the original supplier;
(F) the country of origin of the vulnerability; and
(G) an assessment of the ability of the intelligence community to use the vulnerability, including whether such use will be operational or for research and development, and the approximate timeline for such use.
(2) An assessment of foreign commercial providers that—
(A) pose a significant threat to the national security of the United States; or
(B) have provided cyber vulnerabilities to any foreign government that—
(i) has used the cyber vulnerabilities to target United States persons, the United States Government, journalists, or dissidents; or
(ii) has an established pattern or practice of violating human rights or suppressing dissent.
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3004
Stored review status: release_metadata_unconfirmed. A text match is a research starting point; applicability is not established.
Original supplied file — preserved unchanged
Download original Markdown file
File SHA-256: 313bef0b68a7f534be056d66c85a59ae53ef36ec6130cec1e00d72fd0f22cb6b. The original may include catalog metadata, neighboring provisions, or embedded records outside this collection's scope. Search shows only the selected federal record. Historical editions and unverified snapshots are not a statement of current law.
Authority boundary: historical or unconfirmed source not current law verified.
Open the recorded source website ↗
Record provenance
Stable record: federal_law:legal_authorities:record_usc_1cb95a0b150d32f260d029af
Source file: Laws/federal/codes/united-states-code/title-50/section-3004-annual-reports-on-certain-cyber-vulnerabilities-procured-by-intelligence--05aa4480b3.md
Pages: Not recorded – Not recorded
Passage SHA-256: dd394192e6b7e20a5475b4d661b78d474535a85a84bcd6fad84c0ac00da4efe7
Source location: Title 50, Chapter 44, § 3004; chapter-044-national-security.md
Stored source content
**(a) Annual reports** On an annual basis through 2026, the Director of the Central Intelligence Agency and the Director of the National Security Agency, in coordination with the Director of National Intelligence, shall jointly submit to the congressional intelligence committees a report containing information on foreign commercial providers and the cyber vulnerabilities procured by the intelligence community through foreign commercial providers.
**(b) Elements** Each report under subsection (a) shall include, with respect to the period covered by the report, the following:
(1) A description of each cyber vulnerability procured through a foreign commercial provider, including—
(A) a description of the vulnerability;
(B) the date of the procurement;
(C) whether the procurement consisted of only that vulnerability or included other vulnerabilities;
(D) the cost of the procurement;
(E) the identity of the commercial provider and, if the commercial provider was not the original supplier of the vulnerability, a description of the original supplier;
(F) the country of origin of the vulnerability; and
(G) an assessment of the ability of the intelligence community to use the vulnerability, including whether such use will be operational or for research and development, and the approximate timeline for such use.
(2) An assessment of foreign commercial providers that—
(A) pose a significant threat to the national security of the United States; or
(B) have provided cyber vulnerabilities to any foreign government that—
(i) has used the cyber vulnerabilities to target United States persons, the United States Government, journalists, or dissidents; or
(ii) has an established pattern or practice of violating human rights or suppressing dissent.
(3) An assessment of whether the intelligence community has conducted business with the foreign commercial providers identified under paragraph (2) during the 5-year period preceding the date of the report.
**(c) Form** Each report under subsection (a) may be submitted in classified form.
**(d) Definitions** In this section:
(1) **Commercial provider** — The term “commercial provider” means any person that sells, or acts as a broker, for a cyber vulnerability.
(2) **Cyber vulnerability** — The term “cyber vulnerability” means any tool, exploit, vulnerability, or code that is intended to compromise a device, network, or system, including such a tool, exploit, vulnerability, or code procured by the intelligence community for purposes of research and development.
Cross-references
Connections may be documented source relationships, shared citations or nearby passages. Each explains its basis; a connection alone does not establish applicability to your situation.
Federal law — U.S. Code and appendices · legal_authorities
**(a) Requirement** On an annual basis, consistent with the protection of intelligence sources and methods, the Director of the National Counterintelligence and Security Center, in coordination with the Director of the Federal Bureau of Investigation, the Director of the Central Intelligence Agency, the Director of the National Security Agency, and any other relevant head of an element of the intelligence community, shall submit to the congressional intelligence committees, the Committee on the Judiciary of the Senate, the Committee on the Judiciary of the House of Representatives, the Committee on Foreign Affairs of the House of Representatives, and the Committee on Foreign Relations of the Senate a report on the influence operations and campaigns in the United States conducted by the Chinese Communist Party.
**(b) Contents** Each report under subsection (a) shall include the following:
(1) A description of the organization of the United Front Work Department of the People’s Republic of China, or the successors of the United Front Work Department, and the links between the United Front Work Department and the Central Committee of the Chinese Communist Party.
(2) An assessment of the degree to which organizations that are associated with or receive funding from the United Front Work Department, particularly such entities operating in the United States, are formally tasked by the Chinese Communist Party or the Government of China.
(3) A description of the efforts by the United Front Work Department and subsidiary organizations of the United Front Work Department to target, coerce, and influence foreign populations, particularly those of ethnic Chinese descent.
(4) An assessment of attempts by the Chinese Embassy, consulates, and organizations affiliated with the Chi
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3242
Stored review status: release_metadata_unconfirmed. Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
**(a)** As used in sections 3002, 3021, 3023, 3025, and 3073 of this title, the term “function” includes functions, powers, and duties.
**(b)** As used in this Act, the term “Department of Defense” shall be deemed to include the military departments of the Army, the Navy, and the Air Force, and all agencies created under title II of this Act.
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 3091a
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
### Statutory Notes
#### Codification
Section 409, comprising sections 205(c), 206(a), and 207(c) of the National Security Act of 1947, act July 26, 1947, ch. 343, was editorially reclassified as [section 3004 of this title](https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title50-section3004&num=0&edition=prelim).
Source: Supplied U.S. Code snapshot — release unconfirmed · 50 U.S.C. § 409b
Stored review status: release_metadata_unconfirmed. Incoming connection: Explicit cross-reference supplied in source Markdown; currentness and applicability require review.
Federal law — U.S. Code and appendices · legal_authorities
Page 561
TITLE 50—WAR AND NATIONAL DEFENSE
§ 3004
‘‘(A) the Select Committee on Intelligence and
the Committee on Appropriations of the Senate;
and
‘‘(B) the Permanent Select Committee on Intel-
ligence and the Committee on Appropriations of the
House of Representatives.
‘‘(2) INTELLIGENCE
COMMUNITY.—The term ‘intel-
ligence community’ has the meaning given such term
in section 3 of the National Security Act of 1947 (50
U.S.C. 3003).’’
Pub. L. 116–92, div. E, § 5003, Dec. 20, 2019, 133 Stat.
2115, provided that: ‘‘In this division [see Tables for
classification]:
‘‘(1) CONGRESSIONAL
INTELLIGENCE
COMMITTEES.—
The term ‘congressional intelligence committees’ has
the meaning given such term in section 3 of the Na-
tional Security Act of 1947 (50 U.S.C. 3003).
‘‘(2) INTELLIGENCE
COMMUNITY.—The term ‘intel-
ligence community’ has the meaning given such term
in section 3 of the National Security Act of 1947 (50
U.S.C. 3003).’’
Pub. L. 115–31, div. N, § 2, May 5, 2017, 131 Stat. 807,
provided that: ‘‘In this division [see Tables for classi-
fication]:
‘‘(1) CONGRESSIONAL
INTELLIGENCE
COMMITTEES.—
The term ‘congressional intelligence committees’
means—
‘‘(A) the Select Committee on Intelligence of the
Senate; and
‘‘(B) the Permanent Select Committee on Intel-
ligence of the House of Representatives.
‘‘(2) INTELLIGENCE
COMMUNITY.—The term ‘intel-
ligence community’ has the meaning given that term
in section 3(4) of the National Security Act of 1947 (50
U.S.C. 3003(4)).’’
Pub. L. 114–113, div. M, § 2, Dec. 18, 2015, 129 Stat. 2910,
provided that: ‘‘In this division [see Tables for classi-
fication]:
‘‘(1) CONGRESSIONAL
INTELLIGENCE
COMMITTEES.—
The term ‘congressional intelligence committees’
means—
‘‘(A) the Select Committee on Intelligence of the
Senat
Source: Supplied 2024 U.S. Code historical extraction · 50 U.S.C. § 3004
Stored review status: historical_2024_not_currentness_verified. Same stored citation; legal effect and authority still require review.