Do State and Local Governments Need Federal Help to Improve Their Cybersecurity? (H.R. 3869)

What is H.R. 3869?

(Updated June 10, 2020)

This bill would increase coordination between between the National Cybersecurity and Communications Integration Center (NCCIC), the Dept. of Homeland Security (DHS), and state and local entities looking to improve their cybersecurity.

State and local governments would be able to request that the NCCIC identify vulnerabilities in their information systems. The state and local government could also receive information about security protections that are appropriate to the potential damage caused by unauthorized access or use of that entity’s information.

The NCCIC would also give state and local governments guidance in improving their cybersecurity through implementing new security systems and training government officials.

Privacy and civil liberties training would also be available to state and local governments to help minimize the retention and use of unnecessary information related to cybersecurity risks. Obsolete and erroneous information, including personal information, that is unrelated to a given cybersecurity risk or incident would be deleted.

Within two years of this bill’s enactment NCCIC would provide reports on the program’s effectiveness to relevant congressional committees after soliciting feedback from state and local governments.

Argument in favor

State and local governments need the assistance of DHS in improving their cybersecurity systems while protecting the privacy and civil liberties of citizens.

Argument opposed

It isn’t the federal government’s responsibility to make sure that state and local governments have strong enough cybersecurity systems.

Impact

Average citizens, state and local government cybersecurity programs, DHS, relevant congressional committees, and the NCCIC.

Cost of H.R. 3869

A CBO cost estimate is unavailable.

Additional Info

In-Depth: Sponsoring Rep. Will Hurd (R-TX) cited the need for state and local governments to receive federal assistance to improve their cybersecurity systems:

“State and local governments often do not have access to adequate personnel or technical cybersecurity resources. This is more than just about protecting the private information of individuals who work for local government agencies. Frankly, cyber breaches at any level can put our national security at risk.”

The House Homeland Security Committee passed this legislation by voice vote.

Media:

• Sponsoring Rep. Will Hurd (R-TX) Press Release
• ExecutiveGov
• Law360