This bill creates a new interagency body, called the Harmonization Committee, to reduce overlapping and conflicting federal cybersecurity rules that currently burden businesses regulated by multiple agencies. Chaired by the National Cyber Director and made up of the heads of federal regulatory agencies, the committee must develop, within one year of enactment, a common framework of baseline cybersecurity requirements alongside sector-specific rules, and it must run a voluntary pilot program with at least three agencies to test how well this framework works in practice. Regulatory agencies would be required to consult with the committee before issuing new or updated cybersecurity requirements, so that rules stay aligned with the harmonized framework, though exceptions exist for urgent situations. The bill primarily affects federal regulatory agencies and the businesses and industries they oversee, particularly those in critical infrastructure sectors that face cybersecurity mandates from multiple regulators. It also requires periodic reports to Congress on the committee's progress, the pilot program's results, and updates on related cyber incident reporting coordination, but it does not grant any agency new regulatory power beyond what is needed to run the pilot.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.