Section 1 Short title
This Act may be cited as the “Data Infrastructure Risk Reduction Act”.
Data Infrastructure Risk Reduction Act
A BILL
To require a strategy for the defense of data centers from external breaches from malefactors and the protection of the communities surrounding data centers, and for other purposes.
Sec. 2 Protection of data centers
In general— Not later than 180 days after the date of the enactment of this Act, the Secretary of Homeland Security, acting through the Director of the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security, in collaboration, as appropriate, with the Secretary of Defense, shall—
identify data centers that should be treated as critical infrastructure;
consider—
the security of the power and water supply infrastructure (with a particular focus on above-ground electric power transmission lines and electrical substations) connected to such data centers; and
any potential implications of data centers that are sited in proximity to communities or other residential areas; and
submit to Congress a strategy, including recommendations, to—
defend data centers described in this subsection from external breaches from malefactors; and
protect communities and other residential areas described in paragraph (2)(B).
Definitions— In this section:
Critical infrastructure— The term “critical infrastructure” has the meaning given such term in section 1016(e) of Public Law 107–56 (42 U.S.C. 5195c(e)).
Data center— The term “data center” has the meaning given such term in section 453(a) of the Energy Independence and Security Act of 2007 (42 U.S.C. 17112(a)).