Division G — Other Authorizations
DIVISION G Other Authorizations
TITLE I Indian Water Rights Settlement Completion Fund
TITLE II Wildfire Mitigation
SEC. 70201. Short Title.
SEC. 70202. Definitions.
SEC. 70203. Establishment of Commission.
SEC. 70204. Duties of Commission.
SEC. 70205. Powers of Commission.
SEC. 70206. Commission Personnel Matters.
SEC. 70207. Termination of Commission.
TITLE III Reforestation
SEC. 70301. Short Title.
SEC. 70302. Reforestation Following Wildfires and Other Unplanned Events.
“(4) Reforestation requirements.—
“(A) Definitions.—In this paragraph:
“(i) Natural regeneration.—
“(I) In general.—The term ‘natural regeneration’ means the establishment of a tree or tree age class from natural seeding, sprouting, or suckering in accordance with the management objectives of an applicable land management plan.
“(II) Inclusion.—The term ‘natural regeneration’ may include any site preparation activity to enhance the success of regeneration to the desired species composition and structure.
“(ii) Priority land.—The term ‘priority land’ means National Forest System land that, due to an unplanned event—
“(I) does not meet the conditions for appropriate forest cover described in paragraph (1);
“(II) requires reforestation to meet the objectives of an applicable land management plan; and
“(III) is unlikely to experience natural regeneration without assistance.
“(iii) Reforestation.—The term ‘reforestation’ means the act of renewing tree cover, taking into consideration species composition and resilience, by establishing young trees through—
“(I) natural regeneration;
“(II) natural regeneration with site preparation; or
“(III) planting or direct seeding.
“(iv) Secretary.—The term ‘Secretary’ means the Secretary, acting through the Chief of the Forest Service.
“(v) Unplanned event.—
“(I) In general.—The term ‘unplanned event’ means any unplanned disturbance that—
“(aa) disrupts ecosystem or forest structure or composition; or
“(bb) changes resources, substrate availability, or the physical environment.
“(II) Inclusions.—The term ‘unplanned event’ may include—
“(aa) a wildfire;
“(bb) an infestation of insects or disease;
“(cc) a weather event; and
“(dd) animal damage.
“(B) Requirement.—Each reforestation activity under this section shall be carried out in accordance with applicable Forest Service management practices and definitions, including definitions relating to silvicultural practices and forest management.
“(C) Reforestation priority.—
“(i) In general.—In carrying out this subsection, the Secretary shall give priority to projects on the priority list described in clause (ii).
“(ii) Priority list.—
“(I) In general.—The Secretary shall, based on recommendations from regional foresters, create a priority list of reforestation projects that—
“(aa) primarily take place on priority land;
“(bb) promote effective reforestation following unplanned events; and
“(cc) may include activities to ensure adequate and appropriate seed availability.
“(II) Ranking.—The Secretary shall rank projects on the priority list under subclause (I) based on—
“(aa) documentation of an effective reforestation project plan;
“(bb) the ability to measure the progress and success of the project; and
“(cc) the ability of a project to provide benefits relating to forest function and health, soil health and productivity, wildlife habitat, improved air and water quality, carbon sequestration potential, resilience, job creation, and enhanced recreational opportunities.”
“(3) Adjustment of estimates.—Proper adjustment”
; and
“(2) Frequency.—The amounts”
; and
“(b) Transfers to Trust Fund.—
“(1) In general.—The Secretary”
; and
SEC. 70303. Report.
TITLE IV Recycling Practices
SEC. 70401. Best Practices for Battery Recycling and Labeling Guidelines.
SEC. 70402. Consumer Recycling Education and Outreach Grant Program; Federal Procurement.
“(j) Consultation and Provision of Information by Administrator.—The Administrator shall—
“(1) consult with each procuring agency, including contractors of the procuring agency, to clarify the responsibilities of the procuring agency under this section; and
“(2) provide to each procuring agency information on the requirements under this section and the responsibilities of the procuring agency under this section.
“(k) Reports.—The Administrator, in consultation with the Administrator of General Services, shall submit to Congress an annual report describing—
“(1) the quantity of federally procured recycled products listed in the guidelines under subsection (e); and
“(2) with respect to the products described in paragraph (1), the percentage of recycled material in each product.”
TITLE V Bioproduct Pilot Program
SEC. 70501. Pilot Program on Use of Agricultural Commodities in Construction and Consumer Products.
TITLE VI Cybersecurity
Subtitle A Cyber Response and Recovery Act
SEC. 70601. Short Title.
SEC. 70602. Declaration of a Significant Incident.
“Subtitle C— Declaration of a Significant Incident
“SEC. 2231. SENSE OF CONGRESS.
“It is the sense of Congress that—
“(1) the purpose of this subtitle is to authorize the Secretary to declare that a significant incident has occurred and to establish the authorities that are provided under the declaration to respond to and recover from the significant incident; and
“(2) the authorities established under this subtitle are intended to enable the Secretary to provide voluntary assistance to non-Federal entities impacted by a significant incident.
“SEC. 2232. DEFINITIONS.
“For the purposes of this subtitle:
“(1) Asset response activity.—The term ‘asset response activity’ means an activity to support an entity impacted by an incident with the response to, remediation of, or recovery from, the incident, including—
“(A) furnishing technical and advisory assistance to the entity to protect the assets of the entity, mitigate vulnerabilities, and reduce the related impacts;
“(B) assessing potential risks to the critical infrastructure sector or geographic region impacted by the incident, including potential cascading effects of the incident on other critical infrastructure sectors or geographic regions;
“(C) developing courses of action to mitigate the risks assessed under subparagraph (B);
“(D) facilitating information sharing and operational coordination with entities performing threat response activities; and
“(E) providing guidance on how best to use Federal resources and capabilities in a timely, effective manner to speed recovery from the incident.
“(2) Declaration.—The term ‘declaration’ means a declaration of the Secretary under section 2233(a)(1).
“(3) Director.—The term ‘Director’ means the Director of the Cybersecurity and Infrastructure Security Agency.
“(4) Federal agency.—The term ‘Federal agency’ has the meaning given the term ‘agency’ in section 3502 of title 44, United States Code.
“(5) Fund.—The term ‘Fund’ means the Cyber Response and Recovery Fund established under section 2234(a).
“(6) Incident.—The term ‘incident’ has the meaning given the term in section 3552 of title 44, United States Code.
“(7) Renewal.—The term ‘renewal’ means a renewal of a declaration under section 2233(d).
“(8) Significant incident.—The term ‘significant incident’—
“(A) means an incident or a group of related incidents that results, or is likely to result, in demonstrable harm to—
“(i) the national security interests, foreign relations, or economy of the United States; or
“(ii) the public confidence, civil liberties, or public health and safety of the people of the United States; and
“(B) does not include an incident or a portion of a group of related incidents that occurs on—
“(i) a national security system (as defined in section 3552 of title 44, United States Code); or
“(ii) an information system described in paragraph (2) or (3) of section 3553(e) of title 44, United States Code.
“SEC. 2233. DECLARATION.
“(a) In General.—
“(1) Declaration.—The Secretary, in consultation with the National Cyber Director, may make a declaration of a significant incident in accordance with this section for the purpose of enabling the activities described in this subtitle if the Secretary determines that—
“(A) a specific significant incident—
“(i) has occurred; or
“(ii) is likely to occur imminently; and
“(B) otherwise available resources, other than the Fund, are likely insufficient to respond effectively to, or to mitigate effectively, the specific significant incident described in subparagraph (A).
“(2) Prohibition on delegation.—The Secretary may not delegate the authority provided to the Secretary under paragraph (1).
“(b) Asset Response Activities.—Upon a declaration, the Director shall coordinate—
“(1) the asset response activities of each Federal agency in response to the specific significant incident associated with the declaration; and
“(2) with appropriate entities, which may include—
“(A) public and private entities and State and local governments with respect to the asset response activities of those entities and governments; and
“(B) Federal, State, local, and Tribal law enforcement agencies with respect to investigations and threat response activities of those law enforcement agencies; and
“(3) Federal, State, local, and Tribal emergency management and response agencies.
“(c) Duration.—Subject to subsection (d), a declaration shall terminate upon the earlier of—
“(1) a determination by the Secretary that the declaration is no longer necessary; or
“(2) the expiration of the 120-day period beginning on the date on which the Secretary makes the declaration.
“(d) Renewal.—The Secretary, without delegation, may renew a declaration as necessary.
“(e) Publication.—
“(1) In general.—Not later than 72 hours after a declaration or a renewal, the Secretary shall publish the declaration or renewal in the Federal Register.
“(2) Prohibition.—A declaration or renewal published under paragraph (1) may not include the name of any affected individual or private company.
“(f) Advance Actions.—
“(1) In general.—The Secretary—
“(A) shall assess the resources available to respond to a potential declaration; and
“(B) may take actions before and while a declaration is in effect to arrange or procure additional resources for asset response activities or technical assistance the Secretary determines necessary, which may include entering into standby contracts with private entities for cybersecurity services or incident responders in the event of a declaration.
“(2) Expenditure of funds.—Any expenditure from the Fund for the purpose of paragraph (1)(B) shall be made from amounts available in the Fund, and amounts available in the Fund shall be in addition to any other appropriations available to the Cybersecurity and Infrastructure Security Agency for such purpose.
“SEC. 2234. CYBER RESPONSE AND RECOVERY FUND.
“(a) In General.—There is established a Cyber Response and Recovery Fund, which shall be available for—
“(1) the coordination of activities described in section 2233(b);
“(2) response and recovery support for the specific significant incident associated with a declaration to Federal, State, local, and Tribal, entities and public and private entities on a reimbursable or non-reimbursable basis, including through asset response activities and technical assistance, such as—
“(A) vulnerability assessments and mitigation;
“(B) technical incident mitigation;
“(C) malware analysis;
“(D) analytic support;
“(E) threat detection and hunting; and
“(F) network protections;
“(3) as the Director determines appropriate, grants for, or cooperative agreements with, Federal, State, local, and Tribal public and private entities to respond to, and recover from, the specific significant incident associated with a declaration, such as—
“(A) hardware or software to replace, update, improve, harden, or enhance the functionality of existing hardware, software, or systems; and
“(B) technical contract personnel support; and
“(4) advance actions taken by the Secretary under section 2233(f)(1)(B).
“(b) Deposits and Expenditures.—
“(1) In general.—Amounts shall be deposited into the Fund from—
“(A) appropriations to the Fund for activities of the Fund; and
“(B) reimbursement from Federal agencies for the activities described in paragraphs (1), (2), and (4) of subsection (a), which shall only be from amounts made available in advance in appropriations Acts for such reimbursement.
“(2) Expenditures.—Any expenditure from the Fund for the purposes of this subtitle shall be made from amounts available in the Fund from a deposit described in paragraph (1), and amounts available in the Fund shall be in addition to any other appropriations available to the Cybersecurity and Infrastructure Security Agency for such purposes.
“(c) Supplement Not Supplant.—Amounts in the Fund shall be used to supplement, not supplant, other Federal, State, local, or Tribal funding for activities in response to a declaration.
“(d) Reporting.—The Secretary shall require an entity that receives amounts from the Fund to submit a report to the Secretary that details the specific use of the amounts.
“SEC. 2235. NOTIFICATION AND REPORTING.
“(a) Notification.—Upon a declaration or renewal, the Secretary shall immediately notify the National Cyber Director and appropriate congressional committees and include in the notification—
“(1) an estimation of the planned duration of the declaration;
“(2) with respect to a notification of a declaration, the reason for the declaration, including information relating to the specific significant incident or imminent specific significant incident, including—
“(A) the operational or mission impact or anticipated impact of the specific significant incident on Federal and non-Federal entities;
“(B) if known, the perpetrator of the specific significant incident; and
“(C) the scope of the Federal and non-Federal entities impacted or anticipated to be impacted by the specific significant incident;
“(3) with respect to a notification of a renewal, the reason for the renewal;
“(4) justification as to why available resources, other than the Fund, are insufficient to respond to or mitigate the specific significant incident; and
“(5) a description of the coordination activities described in section 2233(b) that the Secretary anticipates the Director to perform.
“(b) Report to Congress.—Not later than 180 days after the date of a declaration or renewal, the Secretary shall submit to the appropriate congressional committees a report that includes—
“(1) the reason for the declaration or renewal, including information and intelligence relating to the specific significant incident that led to the declaration or renewal;
“(2) the use of any funds from the Fund for the purpose of responding to the incident or threat described in paragraph (1);
“(3) a description of the actions, initiatives, and projects undertaken by the Department and State and local governments and public and private entities in responding to and recovering from the specific significant incident described in paragraph (1);
“(4) an accounting of the specific obligations and outlays of the Fund; and
“(5) an analysis of—
“(A) the impact of the specific significant incident described in paragraph (1) on Federal and non-Federal entities;
“(B) the impact of the declaration or renewal on the response to, and recovery from, the specific significant incident described in paragraph (1); and
“(C) the impact of the funds made available from the Fund as a result of the declaration or renewal on the recovery from, and response to, the specific significant incident described in paragraph (1).
“(c) Classification.—Each notification made under subsection (a) and each report submitted under subsection (b)—
“(1) shall be in an unclassified form with appropriate markings to indicate information that is exempt from disclosure under section 552 of title 5, United States Code (commonly known as the ‘Freedom of Information Act’); and
“(2) may include a classified annex.
“(d) Consolidated Report.—The Secretary shall not be required to submit multiple reports under subsection (b) for multiple declarations or renewals if the Secretary determines that the declarations or renewals substantively relate to the same specific significant incident.
“(e) Exemption.—The requirements of subchapter I of chapter 35 of title 44 (commonly known as the ‘Paperwork Reduction Act’) shall not apply to the voluntary collection of information by the Department during an investigation of, a response to, or an immediate post-response review of, the specific significant incident leading to a declaration or renewal.
“SEC. 2236. RULE OF CONSTRUCTION.
“Nothing in this subtitle shall be construed to impair or limit the ability of the Director to carry out the authorized activities of the Cybersecurity and Infrastructure Security Agency.
“SEC. 2237. AUTHORIZATION OF APPROPRIATIONS.
“There are authorized to be appropriated to the Fund $20,000,000 for fiscal year 2022 and each fiscal year thereafter until September 30, 2028, which shall remain available until September 30, 2028.
“SEC. 2238. SUNSET.
“The authorities granted to the Secretary or the Director under this subtitle shall expire on the date that is 7 years after the date of enactment of this subtitle.”
“Subtitle C— Declaration of a Significant Incident
“Sec. 2231. Sense of congress.
“Sec. 2232. Definitions.
“Sec. 2233. Declaration.
“Sec. 2234. Cyber response and recovery fund.
“Sec. 2235. Notification and reporting.
“Sec. 2236. Rule of construction.
“Sec. 2237. Authorization of appropriations.
“Sec. 2238. Sunset.”.
Subtitle B State and Local Cybersecurity Improvement Act
SEC. 70611. Short Title.
SEC. 70612. State and Local Cybersecurity Grant Program.
“SEC. 2218. STATE AND LOCAL CYBERSECURITY GRANT PROGRAM.
“(a) Definitions.—In this section:
“(1) Appropriate committees of congress.—The term ‘appropriate committees of Congress’ means—
“(A) the Committee on Homeland Security and Governmental Affairs of the Senate; and
“(B) the Committee on Homeland Security of the House of Representatives.
“(2) Cyber threat indicator.—The term ‘cyber threat indicator’ has the meaning given the term in section 102 of the Cybersecurity Act of 2015 (6 U.S.C. 1501).
“(3) Cybersecurity plan.—The term ‘Cybersecurity Plan’ means a plan submitted by an eligible entity under subsection (e)(1).
“(4) Eligible entity.—The term ‘eligible entity’ means a—
“(A) State; or
“(B) Tribal government.
“(5) Incident.—The term ‘incident’ has the meaning given the term in section 2209.
“(6) Information sharing and analysis organization.—The term ‘information sharing and analysis organization’ has the meaning given the term in section 2222.
“(7) Information system.—The term ‘information system’ has the meaning given the term in section 102 of the Cybersecurity Act of 2015 (6 U.S.C. 1501).
“(8) Multi-entity group.—The term ‘multi-entity group’ means a group of 2 or more eligible entities desiring a grant under this section.
“(9) Online service.—The term ‘online service’ means any internet-facing service, including a website, email, virtual private network, or custom application.
“(10) Rural area.—The term ‘rural area’ has the meaning given the term in section 5302 of title 49, United States Code.
“(11) State and local cybersecurity grant program.—The term ‘State and Local Cybersecurity Grant Program’ means the program established under subsection (b).
“(12) Tribal government.—The term ‘Tribal government’ means the recognized governing body of any Indian or Alaska Native Tribe, band, nation, pueblo, village, community, component band, or component reservation, that is individually identified (including parenthetically) in the most recent list published pursuant to Section 104 of the Federally Recognized Indian Tribe List Act of 1994 (25 U.S.C. 5131).
“(b) Establishment.—
“(1) In general.—There is established within the Department a program to award grants to eligible entities to address cybersecurity risks and cybersecurity threats to information systems owned or operated by, or on behalf of, State, local, or Tribal governments.
“(2) Application.—An eligible entity desiring a grant under the State and Local Cybersecurity Grant Program shall submit to the Secretary an application at such time, in such manner, and containing such information as the Secretary may require.
“(c) Administration.—The State and Local Cybersecurity Grant Program shall be administered in the same office of the Department that administers grants made under sections 2003 and 2004.
“(d) Use of Funds.—An eligible entity that receives a grant under this section and a local government that receives funds from a grant under this section, as appropriate, shall use the grant to—
“(1) implement the Cybersecurity Plan of the eligible entity;
“(2) develop or revise the Cybersecurity Plan of the eligible entity;
“(3) pay expenses directly relating to the administration of the grant, which shall not exceed 5 percent of the amount of the grant;
“(4) assist with activities that address imminent cybersecurity threats, as confirmed by the Secretary, acting through the Director, to the information systems owned or operated by, or on behalf of, the eligible entity or a local government within the jurisdiction of the eligible entity; or
“(5) fund any other appropriate activity determined by the Secretary, acting through the Director.
“(e) Cybersecurity Plans.—
“(1) In general.—An eligible entity applying for a grant under this section shall submit to the Secretary a Cybersecurity Plan for review in accordance with subsection (i).
“(2) Required elements.—A Cybersecurity Plan of an eligible entity shall—
“(A) incorporate, to the extent practicable—
“(i) any existing plans of the eligible entity to protect against cybersecurity risks and cybersecurity threats to information systems owned or operated by, or on behalf of, State, local, or Tribal governments; and
“(ii) if the eligible entity is a State, consultation and feedback from local governments and associations of local governments within the jurisdiction of the eligible entity;
“(B) describe, to the extent practicable, how the eligible entity will—
“(i) manage, monitor, and track information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, and the information technology deployed on those information systems, including legacy information systems and information technology that are no longer supported by the manufacturer of the systems or technology;
“(ii) monitor, audit, and, track network traffic and activity transiting or traveling to or from information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity;
“(iii) enhance the preparation, response, and resiliency of information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, against cybersecurity risks and cybersecurity threats;
“(iv) implement a process of continuous cybersecurity vulnerability assessments and threat mitigation practices prioritized by degree of risk to address cybersecurity risks and cybersecurity threats on information systems, applications, and user accounts owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity;
“(v) ensure that the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, adopt and use best practices and methodologies to enhance cybersecurity, such as—
“(I) the practices set forth in the cybersecurity framework developed by the National Institute of Standards and Technology;
“(II) cyber chain supply chain risk management best practices identified by the National Institute of Standards and Technology; and
“(III) knowledge bases of adversary tools and tactics;
“(vi) promote the delivery of safe, recognizable, and trustworthy online services by the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, including through the use of the .gov internet domain;
“(vii) ensure continuity of operations of the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, in the event of a cybersecurity incident, including by conducting exercises to practice responding to a cybersecurity incident;
“(viii) use the National Initiative for Cybersecurity Education Workforce Framework for Cybersecurity developed by the National Institute of Standards and Technology to identify and mitigate any gaps in the cybersecurity workforces of the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, enhance recruitment and retention efforts for those workforces, and bolster the knowledge, skills, and abilities of personnel of the eligible entity and, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, to address cybersecurity risks and cybersecurity threats, such as through cybersecurity hygiene training;
“(ix) if the eligible entity is a State, ensure continuity of communications and data networks within the jurisdiction of the eligible entity between the eligible entity and local governments within the jurisdiction of the eligible entity in the event of an incident involving those communications or data networks;
“(x) assess and mitigate, to the greatest degree possible, cybersecurity risks and cybersecurity threats relating to critical infrastructure and key resources, the degradation of which may impact the performance of information systems within the jurisdiction of the eligible entity;
“(xi) enhance capabilities to share cyber threat indicators and related information between the eligible entity and—
“(I) if the eligible entity is a State, local governments within the jurisdiction of the eligible entity, including by expanding information sharing agreements with the Department; and
“(II) the Department;
“(xii) leverage cybersecurity services offered by the Department;
“(xiii) implement an information technology and operational technology modernization cybersecurity review process that ensures alignment between information technology and operational technology cybersecurity objectives;
“(xiv) develop and coordinate strategies to address cybersecurity risks and cybersecurity threats in consultation with—
“(I) if the eligible entity is a State, local governments and associations of local governments within the jurisdiction of the eligible entity; and
“(II) as applicable—
“(aa) eligible entities that neighbor the jurisdiction of the eligible entity or, as appropriate, members of an information sharing and analysis organization; and
“(bb) countries that neighbor the jurisdiction of the eligible entity;
“(xv) ensure adequate access to, and participation in, the services and programs described in this subparagraph by rural areas within the jurisdiction of the eligible entity; and
“(xvi) distribute funds, items, services, capabilities, or activities to local governments under subsection (n)(2)(A), including the fraction of that distribution the eligible entity plans to distribute to rural areas under subsection (n)(2)(B);
“(C) assess the capabilities of the eligible entity relating to the actions described in subparagraph (B);
“(D) describe, as appropriate and to the extent practicable, the individual responsibilities of the eligible entity and local governments within the jurisdiction of the eligible entity in implementing the plan;
“(E) outline, to the extent practicable, the necessary resources and a timeline for implementing the plan; and
“(F) describe the metrics the eligible entity will use to measure progress towards—
“(i) implementing the plan; and
“(ii) reducing cybersecurity risks to, and identifying, responding to, and recovering from cybersecurity threats to, information systems owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity.
“(3) Discretionary elements.—In drafting a Cybersecurity Plan, an eligible entity may—
“(A) consult with the Multi-State Information Sharing and Analysis Center;
“(B) include a description of cooperative programs developed by groups of local governments within the jurisdiction of the eligible entity to address cybersecurity risks and cybersecurity threats; and
“(C) include a description of programs provided by the eligible entity to support local governments and owners and operators of critical infrastructure to address cybersecurity risks and cybersecurity threats.
“(f) Multi-entity Grants.—
“(1) In general.—The Secretary may award grants under this section to a multi-entity group to support multi-entity efforts to address cybersecurity risks and cybersecurity threats to information systems within the jurisdictions of the eligible entities that comprise the multi-entity group.
“(2) Satisfaction of other requirements.—In order to be eligible for a multi-entity grant under this subsection, each eligible entity that comprises a multi-entity group shall have—
“(A) a Cybersecurity Plan that has been reviewed by the Secretary in accordance with subsection (i); and
“(B) a cybersecurity planning committee established in accordance with subsection (g).
“(3) Application.—
“(A) In general.—A multi-entity group applying for a multi-entity grant under paragraph (1) shall submit to the Secretary an application at such time, in such manner, and containing such information as the Secretary may require.
“(B) Multi-entity project plan.—An application for a grant under this section of a multi-entity group under subparagraph (A) shall include a plan describing—
“(i) the division of responsibilities among the eligible entities that comprise the multi-entity group;
“(ii) the distribution of funding from the grant among the eligible entities that comprise the multi-entity group; and
“(iii) how the eligible entities that comprise the multi-entity group will work together to implement the Cybersecurity Plan of each of those eligible entities.
“(g) Planning Committees.—
“(1) In general.—An eligible entity that receives a grant under this section shall establish a cybersecurity planning committee to—
“(A) assist with the development, implementation, and revision of the Cybersecurity Plan of the eligible entity;
“(B) approve the Cybersecurity Plan of the eligible entity; and
“(C) assist with the determination of effective funding priorities for a grant under this section in accordance with subsections (d) and (j).
“(2) Composition.—A committee of an eligible entity established under paragraph (1) shall—
“(A) be comprised of representatives from—
“(i) the eligible entity;
“(ii) if the eligible entity is a State, counties, cities, and towns within the jurisdiction of the eligible entity; and
“(iii) institutions of public education and health within the jurisdiction of the eligible entity; and
“(B) include, as appropriate, representatives of rural, suburban, and high-population jurisdictions.
“(3) Cybersecurity expertise.—Not less than one-half of the representatives of a committee established under paragraph (1) shall have professional experience relating to cybersecurity or information technology.
“(4) Rule of construction regarding existing planning committees.—Nothing in this subsection shall be construed to require an eligible entity to establish a cybersecurity planning committee if the eligible entity has established and uses a multijurisdictional planning committee or commission that—
“(A) meets the requirements of this subsection; or
“(B) may be expanded or leveraged to meet the requirements of this subsection, including through the formation of a cybersecurity planning subcommittee.
“(5) Rule of construction regarding control of information systems of eligible entities.—Nothing in this subsection shall be construed to permit a cybersecurity planning committee of an eligible entity that meets the requirements of this subsection to make decisions relating to information systems owned or operated by, or on behalf of, the eligible entity.
“(h) Special Rule for Tribal Governments.—With respect to any requirement under subsection (e) or (g), the Secretary, in consultation with the Secretary of the Interior and Tribal governments, may prescribe an alternative substantively similar requirement for Tribal governments if the Secretary finds that the alternative requirement is necessary for the effective delivery and administration of grants to Tribal governments under this section.
“(i) Review of Plans.—
“(1) Review as condition of grant.—
“(A) In general.—Subject to paragraph (3), before an eligible entity may receive a grant under this section, the Secretary, acting through the Director, shall—
“(i) review the Cybersecurity Plan of the eligible entity, including any revised Cybersecurity Plans of the eligible entity; and
“(ii) determine that the Cybersecurity Plan reviewed under clause (i) satisfies the requirements under paragraph (2).
“(B) Duration of determination.—In the case of a determination under subparagraph (A)(ii) that a Cybersecurity Plan satisfies the requirements under paragraph (2), the determination shall be effective for the 2-year period beginning on the date of the determination.
“(C) Annual renewal.—Not later than 2 years after the date on which the Secretary determines under subparagraph (A)(ii) that a Cybersecurity Plan satisfies the requirements under paragraph (2), and annually thereafter, the Secretary, acting through the Director, shall—
“(i) determine whether the Cybersecurity Plan and any revisions continue to meet the criteria described in paragraph (2); and
“(ii) renew the determination if the Secretary, acting through the Director, makes a positive determination under clause (i).
“(2) Plan requirements.—In reviewing a Cybersecurity Plan of an eligible entity under this subsection, the Secretary, acting through the Director, shall ensure that the Cybersecurity Plan—
“(A) satisfies the requirements of subsection (e)(2); and
“(B) has been approved by—
“(i) the cybersecurity planning committee of the eligible entity established under subsection (g); and
“(ii) the Chief Information Officer, the Chief Information Security Officer, or an equivalent official of the eligible entity.
“(3) Exception.—Notwithstanding subsection (e) and paragraph (1) of this subsection, the Secretary may award a grant under this section to an eligible entity that does not submit a Cybersecurity Plan to the Secretary for review before September 30, 2023, if the eligible entity certifies to the Secretary that—
“(A) the activities that will be supported by the grant are—
“(i) integral to the development of the Cybersecurity Plan of the eligible entity; or
“(ii) necessary to assist with activities described in subsection (d)(4), as confirmed by the Director; and
“(B) the eligible entity will submit to the Secretary a Cybersecurity Plan for review under this subsection by September 30, 2023.
“(4) Rule of construction.—Nothing in this subsection shall be construed to provide authority to the Secretary to—
“(A) regulate the manner by which an eligible entity or local government improves the cybersecurity of the information systems owned or operated by, or on behalf of, the eligible entity or local government; or
“(B) condition the receipt of grants under this section on—
“(i) participation in a particular Federal program; or
“(ii) the use of a specific product or technology.
“(j) Limitations on Uses of Funds.—
“(1) In general.—Any entity that receives funds from a grant under this section may not use the grant—
“(A) to supplant State or local funds;
“(B) for any recipient cost-sharing contribution;
“(C) to pay a ransom;
“(D) for recreational or social purposes; or
“(E) for any purpose that does not address cybersecurity risks or cybersecurity threats on information systems owned or operated by, or on behalf of, the eligible entity that receives the grant or a local government within the jurisdiction of the eligible entity.
“(2) Compliance oversight.—In addition to any other remedy available, the Secretary may take such actions as are necessary to ensure that a recipient of a grant under this section uses the grant for the purposes for which the grant is awarded.
“(3) Rule of construction.—Nothing in paragraph (1)(A) shall be construed to prohibit the use of funds from a grant under this section awarded to a State, local, or Tribal government for otherwise permissible uses under this section on the basis that the State, local, or Tribal government has previously used State, local, or Tribal funds to support the same or similar uses.
“(k) Opportunity to Amend Applications.—In considering applications for grants under this section, the Secretary shall provide applicants with a reasonable opportunity to correct any defects in those applications before making final awards, including by allowing applicants to revise a submitted Cybersecurity Plan.
“(l) Apportionment.—For fiscal year 2022 and each fiscal year thereafter, the Secretary shall apportion amounts appropriated to carry out this section among eligible entities as follows:
“(1) Baseline amount.—The Secretary shall first apportion—
“(A) 0.25 percent of such amounts to each of American Samoa, the Commonwealth of the Northern Mariana Islands, Guam, and the United States Virgin Islands;
“(B) 1 percent of such amounts to each of the remaining States; and
“(C) 3 percent of such amounts to Tribal governments.
“(2) Remainder.—The Secretary shall apportion the remainder of such amounts to States as follows:
“(A) 50 percent of such remainder in the ratio that the population of each State, bears to the population of all States; and
“(B) 50 percent of such remainder in the ratio that the population of each State that resides in rural areas, bears to the population of all States that resides in rural areas.
“(3) Apportionment among tribal governments.—In determining how to apportion amounts to Tribal governments under paragraph (1)(C), the Secretary shall consult with the Secretary of the Interior and Tribal governments.
“(4) Multi-entity grants.—An amount received from a multi-entity grant awarded under subsection (f)(1) by a State or Tribal government that is a member of the multi-entity group shall qualify as an apportionment for the purpose of this subsection.
“(m) Federal Share.—
“(1) In general.—The Federal share of the cost of an activity carried out using funds made available with a grant under this section may not exceed—
“(A) in the case of a grant to an eligible entity—
“(i) for fiscal year 2022, 90 percent;
“(ii) for fiscal year 2023, 80 percent;
“(iii) for fiscal year 2024, 70 percent; and
“(iv) for fiscal year 2025, 60 percent; and
“(B) in the case of a grant to a multi-entity group—
“(i) for fiscal year 2022, 100 percent;
“(ii) for fiscal year 2023, 90 percent;
“(iii) for fiscal year 2024, 80 percent; and
“(iv) for fiscal year 2025, 70 percent.
“(2) Waiver.—
“(A) In general.—The Secretary may waive or modify the requirements of paragraph (1) if an eligible entity or multi-entity group demonstrates economic hardship.
“(B) Guidelines.—The Secretary shall establish and publish guidelines for determining what constitutes economic hardship for the purposes of this subsection.
“(C) Considerations.—In developing guidelines under subparagraph (B), the Secretary shall consider, with respect to the jurisdiction of an eligible entity—
“(i) changes in rates of unemployment in the jurisdiction from previous years;
“(ii) changes in the percentage of individuals who are eligible to receive benefits under the supplemental nutrition assistance program established under the Food and Nutrition Act of 2008 (7 U.S.C. 2011 et seq.) from previous years; and
“(iii) any other factors the Secretary considers appropriate.
“(3) Waiver for tribal governments.—Notwithstanding paragraph (2), the Secretary, in consultation with the Secretary of the Interior and Tribal governments, may waive or modify the requirements of paragraph (1) for 1 or more Tribal governments if the Secretary determines that the waiver is in the public interest.
“(n) Responsibilities of Grantees.—
“(1) Certification.—Each eligible entity or multi-entity group that receives a grant under this section shall certify to the Secretary that the grant will be used—
“(A) for the purpose for which the grant is awarded; and
“(B) in compliance with subsections (d) and (j).
“(2) Availability of funds to local governments and rural areas.—
“(A) In general.—Subject to subparagraph (C), not later than 45 days after the date on which an eligible entity or multi-entity group receives a grant under this section, the eligible entity or multi-entity group shall, without imposing unreasonable or unduly burdensome requirements as a condition of receipt, obligate or otherwise make available to local governments within the jurisdiction of the eligible entity or the eligible entities that comprise the multi-entity group, consistent with the Cybersecurity Plan of the eligible entity or the Cybersecurity Plans of the eligible entities that comprise the multi-entity group—
“(i) not less than 80 percent of funds available under the grant;
“(ii) with the consent of the local governments, items, services, capabilities, or activities having a value of not less than 80 percent of the amount of the grant; or
“(iii) with the consent of the local governments, grant funds combined with other items, services, capabilities, or activities having the total value of not less than 80 percent of the amount of the grant.
“(B) Availability to rural areas.—In obligating funds, items, services, capabilities, or activities to local governments under subparagraph (A), the eligible entity or eligible entities that comprise the multi-entity group shall ensure that rural areas within the jurisdiction of the eligible entity or the eligible entities that comprise the multi-entity group receive not less than—
“(i) 25 percent of the amount of the grant awarded to the eligible entity;
“(ii) items, services, capabilities, or activities having a value of not less than 25 percent of the amount of the grant awarded to the eligible entity; or
“(iii) grant funds combined with other items, services, capabilities, or activities having the total value of not less than 25 percent of the grant awarded to the eligible entity.
“(C) Exceptions.—This paragraph shall not apply to—
“(i) any grant awarded under this section that solely supports activities that are integral to the development or revision of the Cybersecurity Plan of the eligible entity; or
“(ii) the District of Columbia, the Commonwealth of Puerto Rico, American Samoa, the Commonwealth of the Northern Mariana Islands, Guam, the United States Virgin Islands, or a Tribal government.
“(3) Certifications regarding distribution of grant funds to local governments.—An eligible entity or multi-entity group shall certify to the Secretary that the eligible entity or multi-entity group has made the distribution to local governments required under paragraph (2).
“(4) Extension of period.—
“(A) In general.—An eligible entity or multi-entity group may request in writing that the Secretary extend the period of time specified in paragraph (2) for an additional period of time.
“(B) Approval.—The Secretary may approve a request for an extension under subparagraph (A) if the Secretary determines the extension is necessary to ensure that the obligation and expenditure of grant funds align with the purpose of the State and Local Cybersecurity Grant Program.
“(5) Direct funding.—If an eligible entity does not make a distribution to a local government required under paragraph (2) in a timely fashion, the local government may petition the Secretary to request the Secretary to provide funds directly to the local government.
“(6) Limitation on construction.—A grant awarded under this section may not be used to acquire land or to construct, remodel, or perform alterations of buildings or other physical facilities.
“(7) Consultation in allocating funds.—An eligible entity applying for a grant under this section shall agree to consult the Chief Information Officer, the Chief Information Security Officer, or an equivalent official of the eligible entity in allocating funds from a grant awarded under this section.
“(8) Penalties.—In addition to other remedies available to the Secretary, if an eligible entity violates a requirement of this subsection, the Secretary may—
“(A) terminate or reduce the amount of a grant awarded under this section to the eligible entity; or
“(B) distribute grant funds previously awarded to the eligible entity—
“(i) in the case of an eligible entity that is a State, directly to the appropriate local government as a replacement grant in an amount determined by the Secretary; or
“(ii) in the case of an eligible entity that is a Tribal government, to another Tribal government or Tribal governments as a replacement grant in an amount determined by the Secretary.
“(o) Consultation With State, Local, and Tribal Representatives.—In carrying out this section, the Secretary shall consult with State, local, and Tribal representatives with professional experience relating to cybersecurity, including representatives of associations representing State, local, and Tribal governments, to inform—
“(1) guidance for applicants for grants under this section, including guidance for Cybersecurity Plans;
“(2) the study of risk-based formulas required under subsection (q)(4);
“(3) the development of guidelines required under subsection (m)(2)(B); and
“(4) any modifications described in subsection (q)(2)(D).
“(p) Notification to Congress.—Not later than 3 business days before the date on which the Department announces the award of a grant to an eligible entity under this section, including an announcement to the eligible entity, the Secretary shall provide to the appropriate committees of Congress notice of the announcement.
“(q) Reports, Study, and Review.—
“(1) Annual reports by grant recipients.—
“(A) In general.—Not later than 1 year after the date on which an eligible entity receives a grant under this section for the purpose of implementing the Cybersecurity Plan of the eligible entity, including an eligible entity that comprises a multi-entity group that receives a grant for that purpose, and annually thereafter until 1 year after the date on which funds from the grant are expended or returned, the eligible entity shall submit to the Secretary a report that, using the metrics described in the Cybersecurity Plan of the eligible entity, describes the progress of the eligible entity in—
“(i) implementing the Cybersecurity Plan of the eligible entity; and
“(ii) reducing cybersecurity risks to, and identifying, responding to, and recovering from cybersecurity threats to, information systems owned or operated by, or on behalf of, the eligible entity or, if the eligible entity is a State, local governments within the jurisdiction of the eligible entity.
“(B) Absence of plan.—Not later than 1 year after the date on which an eligible entity that does not have a Cybersecurity Plan receives funds under this section, and annually thereafter until 1 year after the date on which funds from the grant are expended or returned, the eligible entity shall submit to the Secretary a report describing how the eligible entity obligated and expended grant funds to—
“(i) develop or revise a Cybersecurity Plan; or
“(ii) assist with the activities described in subsection (d)(4).
“(2) Annual reports to congress.—Not less frequently than annually, the Secretary, acting through the Director, shall submit to Congress a report on—
“(A) the use of grants awarded under this section;
“(B) the proportion of grants used to support cybersecurity in rural areas;
“(C) the effectiveness of the State and Local Cybersecurity Grant Program;
“(D) any necessary modifications to the State and Local Cybersecurity Grant Program; and
“(E) any progress made toward—
“(i) developing, implementing, or revising Cybersecurity Plans; and
“(ii) reducing cybersecurity risks to, and identifying, responding to, and recovering from cybersecurity threats to, information systems owned or operated by, or on behalf of, State, local, or Tribal governments as a result of the award of grants under this section.
“(3) Public availability.—
“(A) In general.—The Secretary, acting through the Director, shall make each report submitted under paragraph (2) publicly available, including by making each report available on the website of the Agency.
“(B) Redactions.—In making each report publicly available under subparagraph (A), the Director may make redactions that the Director, in consultation with each eligible entity, determines necessary to protect classified or other information exempt from disclosure under section 552 of title 5, United States Code (commonly referred to as the ‘Freedom of Information Act’).
“(4) Study of risk-based formulas.—
“(A) In general.—Not later than September 30, 2024, the Secretary, acting through the Director, shall submit to the appropriate committees of Congress a study and legislative recommendations on the potential use of a risk-based formula for apportioning funds under this section, including—
“(i) potential components that could be included in a risk-based formula, including the potential impact of those components on support for rural areas under this section;
“(ii) potential sources of data and information necessary for the implementation of a risk-based formula;
“(iii) any obstacles to implementing a risk-based formula, including obstacles that require a legislative solution;
“(iv) if a risk-based formula were to be implemented for fiscal year 2026, a recommended risk-based formula for the State and Local Cybersecurity Grant Program; and
“(v) any other information that the Secretary, acting through the Director, determines necessary to help Congress understand the progress towards, and obstacles to, implementing a risk-based formula.
“(B) Inapplicability of paperwork reduction act.—The requirements of chapter 35 of title 44, United States Code (commonly referred to as the ‘Paperwork Reduction Act’), shall not apply to any action taken to carry out this paragraph.
“(5) Tribal cybersecurity needs report.—Not later than 2 years after the date of enactment of this section, the Secretary, acting through the Director, shall submit to Congress a report that—
“(A) describes the cybersecurity needs of Tribal governments, which shall be determined in consultation with the Secretary of the Interior and Tribal governments; and
“(B) includes any recommendations for addressing the cybersecurity needs of Tribal governments, including any necessary modifications to the State and Local Cybersecurity Grant Program to better serve Tribal governments.
“(6) GAO review.—Not later than 3 years after the date of enactment of this section, the Comptroller General of the United States shall conduct a review of the State and Local Cybersecurity Grant Program, including—
“(A) the grant selection process of the Secretary; and
“(B) a sample of grants awarded under this section.
“(r) Authorization of Appropriations.—
“(1) In general.—There are authorized to be appropriated for activities under this section—
“(A) for fiscal year 2022, $200,000,000;
“(B) for fiscal year 2023, $400,000,000;
“(C) for fiscal year 2024, $300,000,000; and
“(D) for fiscal year 2025, $100,000,000.
“(2) Transfers authorized.—
“(A) In general.—During a fiscal year, the Secretary or the head of any component of the Department that administers the State and Local Cybersecurity Grant Program may transfer not more than 5 percent of the amounts appropriated pursuant to paragraph (1) or other amounts appropriated to carry out the State and Local Cybersecurity Grant Program for that fiscal year to an account of the Department for salaries, expenses, and other administrative costs incurred for the management, administration, or evaluation of this section.
“(B) Additional appropriations.—Any funds transferred under subparagraph (A) shall be in addition to any funds appropriated to the Department or the components described in subparagraph (A) for salaries, expenses, and other administrative costs.
“(s) Termination.—
“(1) In general.—Subject to paragraph (2), the requirements of this section shall terminate on September 30, 2025.
“(2) Exception.—The reporting requirements under subsection (q) shall terminate on the date that is 1 year after the date on which the final funds from a grant under this section are expended or returned.”
“Sec. 2218. State and Local Cybersecurity Grant Program.”.
TITLE VII Public-Private Partnerships
SEC. 70701. Value for Money Analysis.
TITLE VIII Federal Permitting Improvement
SEC. 70801. Federal Permitting Improvement.
“(iii) is—
“(I) subject to NEPA;
“(II) sponsored by an Indian Tribe (as defined in section 4 of the Indian Self-Determination and Education Assistance Act (25 U.S.C. 5304)), an Alaska Native Corporation, a Native Hawaiian organization (as defined in section 6207 of the Elementary and Secondary Education Act of 1965 (20 U.S.C. 7517)), the Department of Hawaiian Home Lands, or the Office of Hawaiian Affairs; and
“(III) located on land owned or under the jurisdiction of the entity that sponsors the activity under subclause (II); or”
; and
“(I) In general.—Each”
; and
“(II) Redesignation.—If an individual listed in subparagraph (B) designates a different member to serve on the Council than the member designated under subclause (I), the individual shall notify the Executive Director of the designation by not later than 30 days after the date on which the designation is made.”
; and
“(I) In general.—The performance schedules shall reflect employment of the most sound and efficient applicable processes, including the alignment of Federal reviews of projects, reduction of permitting and project delivery time, and consideration of the best practices for public participation.”
“(II) Goal.—
“(aa) In general.—To the maximum extent practicable, and consistent with applicable Federal law, the Executive Director, in consultation with the Council, shall aim to develop recommended performance schedules under clause (i) of not more than 2 years.
“(bb) Exception.—If a recommended performance schedule developed under clause (i) exceeds 2 years, the relevant agencies, in consultation with the Executive Director and the Council, shall explain in that recommended performance schedule the factors that cause the environmental reviews and authorizations in that category of covered projects to take longer than 2 years.”
; and
“(II) fully considering”
; and
“(I) engaging with Native American stakeholders to ensure that project sponsors and agencies identify potential natural, archeological, and cultural resources and locations of historic and religious significance in the area of a covered project; and”
“(viii) in coordination with the Executive Director, improving preliminary engagement with project sponsors in developing coordinated project plans;
“(ix) using programmatic assessments, templates, and other tools based on the best available science and data; and”
; and
“(D) Confidentiality.—Any information relating to Native American natural, cultural, and historical resources submitted in a notice by a project sponsor under subparagraph (A) shall be—
“(i) kept confidential; and
“(ii) exempt from the disclosure requirements under section 552 of title 5, United States Code (commonly known as the ‘Freedom of Information Act’), and the Federal Advisory Committee Act (5 U.S.C. App.).”
“(iii) Projects other than covered projects.—
“(I) In general.—The Executive Director may direct a lead agency to create a specific entry on the Dashboard for a project that is not a covered project and is under review by the lead agency if the Executive Director determines that a Dashboard entry for that project is in the interest of transparency.
“(II) Requirements.—Not later than 14 days after the date on which the Executive Director directs the lead agency to create a specific entry on the Dashboard for a project described in subclause (I), the lead agency shall create and maintain a specific entry on the Dashboard for the project that contains—
“(aa) a comprehensive permitting timetable, as described in subsection (c)(2)(A);
“(bb) the status of the compliance of each lead agency, cooperating agency, and participating agency with the permitting timetable required under item (aa);
“(cc) any modifications of the permitting timetable required under item (aa), including an explanation as to why the permitting timetable was modified; and
“(dd) information about project-related public meetings, public hearings, and public comment periods, which shall be presented in English and the predominant language of the community or communities most affected by the project, as that information becomes available.”
; and
“(V) information on the status of mitigation measures that were agreed to as part of the environmental review and permitting process, including whether and when the mitigation measures have been fully implemented; and”
; and
“(iii) information about project-related public meetings, public hearings, and public comment periods, which shall be presented in English and the predominant language of the community or communities most affected by the project, as that information becomes available.”
; and
“(I) the facilitating or lead agency, as applicable, consults with the Executive Director regarding the potential modification not less than 15 days before engaging in the consultation under subclause (II);”
; and
“(3) where an environmental impact statement is required for a project, prepare a single, joint interagency environmental impact statement for the project unless the lead agency provides justification in the coordinated project plan that multiple environmental documents are more efficient for project review and authorization.”
“(B) the preferred and other alternatives are developed in sufficient detail to enable the public to comment on the alternatives.”
“(f) Record of Decision.—When an environmental impact statement is prepared, Federal agencies must, to the maximum extent practicable, issue a record of decision not later than 90 days after the date on which the final environmental impact statement is issued.”
“(a) Reports to Congress.—
“(1) Executive director annual report.—
“(A) In general.—Not later than April 15 of each year for 10 years beginning on the date of enactment of the Infrastructure Investment and Jobs Act, the Executive Director shall submit to Congress a report detailing the progress accomplished under this title during the previous fiscal year.
“(B) Opportunity to include comments.—Each councilmember, with input from the respective agency CERPO, shall have the opportunity to include comments concerning the performance of the agency in the report described in subparagraph (A).
“(2) Quarterly agency performance report.—The Executive Director shall submit to Congress a quarterly report evaluating agency compliance with the provisions of this title, which shall include a description of the implementation and adherence of each agency to the coordinated project plan and permitting timetable requirements under section 41003(c).
“(3) Agency best practices report.—Not later than April 15 of each year, each participating agency and lead agency shall submit to Congress and the Director of the Office of Management and Budget a report assessing the performance of the agency in implementing the best practices described in section 41002(c)(2)(B).”
“(a) In General.—For the purpose of carrying out this title, the Executive Director, in consultation with the heads of the agencies listed in section 41002(b)(2)(B) and with the guidance of the Director of the Office of Management and Budget, may, after public notice and opportunity for comment, issue regulations establishing a fee structure for sponsors of covered projects to reimburse the United States for reasonable costs incurred in conducting environmental reviews and authorizations for covered projects.”
“(2) Availability.—Amounts in the Fund shall be available to the Executive Director, without fiscal year limitation, solely for the purposes of administering, implementing, and enforcing this title, including the expenses of the Council, staffing of the Office of the Executive Director, and support of the role of the Council as a Federal center for permitting excellence, which may include supporting interagency detailee and rotation opportunities, advanced training, enhanced support for agency project managers, and fora for sharing information and lessons learned.
“(3) Transfer.—For the purpose of carrying out this title, the Executive Director, with the approval of the Director of the Office of Management and Budget, may transfer amounts in the Fund to other Federal agencies and State, Tribal, and local governments to facilitate timely and efficient environmental reviews and authorizations for covered projects and other projects under this title, including direct reimbursement agreements with agency CERPOs, reimbursable agreements, and approval and consultation processes and staff for covered projects.”
“Sec. 41002. Federal Permitting Improvement Steering Council.”.
TITLE IX Build America, Buy America
Subtitle A Build America, Buy America
SEC. 70901. Short Title.
PART I Buy America Sourcing Requirements
SEC. 70911. Findings.
SEC. 70912. Definitions.
SEC. 70913. Identification of Deficient Programs.
SEC. 70914. Application of Buy America Preference.
SEC. 70915. Omb Guidance and Standards.
SEC. 70916. Technical Assistance Partnership and Consultation Supporting Department of Transportation Buy America Requirements.
SEC. 70917. Application.
PART II Make It in America
SEC. 70921. Regulations Relating to Buy American Act.
SEC. 70922. Amendments Relating to Buy American Act.
“(c) Special Rules.—The following rules apply in carrying out the provisions of subsection (a):
“(1) Iron and steel manufactured in the united states.—For purposes of this section, manufactured articles, materials, and supplies of iron and steel are deemed manufactured in the United States only if all manufacturing processes involved in the production of such iron and steel, from the initial melting stage through the application of coatings, occurs in the United States.
“(2) Limitation on exception for commercially available off-the-shelf items.—Notwithstanding any law or regulation to the contrary, including section 1907 of this title and the Federal Acquisition Regulation, the requirements of this section apply to all iron and steel articles, materials, and supplies.”
“(c) Special Rules.—
“(1) Production of iron and steel.—For purposes of this section, manufactured articles, materials, and supplies of iron and steel are deemed manufactured in the United States only if all manufacturing processes involved in the production of such iron and steel, from the initial melting stage through the application of coatings, occurs in the United States.
“(2) Limitation on exception for commercially available off-the-shelf items.—Notwithstanding any law or regulation to the contrary, including section 1907 of this title and the Federal Acquisition Regulation, the requirements of this section apply to all iron and steel articles, materials, and supplies used in contracts described in subsection (a).”
“(b) Reports.—
“(1) In general.—Not later than 180 days after the end of the fiscal year during which the Build America, Buy America Act is enacted, and annually thereafter for 4 years, the Director of the Office of Management and Budget, in consultation with the Administrator of General Services, shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Oversight and Reform of the House of Representatives a report on the total amount of acquisitions made by Federal agencies in the relevant fiscal year of articles, materials, or supplies acquired from entities that mine, produce, or manufacture the articles, materials, or supplies outside the United States.
“(2) Exception for intelligence community.—This subsection does not apply to acquisitions made by an agency, or component of an agency, that is an element of the intelligence community as specified in, or designated under, section 3 of the National Security Act of 1947 (50 U.S.C. 3003).”
“(3) Federal agency.—The term ‘Federal agency’ has the meaning given the term ‘executive agency’ in section 133 of this title.”
“(B) to any articles, materials, or supplies procured pursuant to a reciprocal defense procurement memorandum of understanding (as described in section 8304 of this title), or a trade agreement or least developed country designation described in subpart 25.400 of the Federal Acquisition Regulation; and”
; and
“(B) to any articles, materials, or supplies procured pursuant to a reciprocal defense procurement memorandum of understanding (as described in section 8304), or a trade agreement or least developed country designation described in subpart 25.400 of the Federal Acquisition Regulation; and”
; and
SEC. 70923. Made in America Office.
SEC. 70924. Hollings Manufacturing Extension Partnership Activities.
SEC. 70925. United States Obligations under International Agreements.
SEC. 70926. Definitions.
SEC. 70927. Prospective Amendments to Internal Cross-References.
Subtitle B BuyAmerican.gov
SEC. 70931. Short Title.
SEC. 70932. Definitions.
SEC. 70933. Sense of Congress on Buying American.
SEC. 70934. Assessment of Impact of Free Trade Agreements.
SEC. 70935. Judicious Use of Waivers.
SEC. 70936. Establishment of Buyamerican.gov Website.
SEC. 70937. Waiver Transparency and Streamlining for Contracts.
SEC. 70938. Comptroller General Report.
SEC. 70939. Rules of Construction.
SEC. 70940. Consistency with International Agreements.
SEC. 70941. Prospective Amendments to Internal Cross-References.
Subtitle C Make PPE in America
SEC. 70951. Short Title.
SEC. 70952. Findings.
SEC. 70953. Requirement of Long-Term Contracts for Domestically Manufactured Personal Protective Equipment.
“SEC. 529. TRANSFER OF EQUIPMENT DURING A PUBLIC HEALTH EMERGENCY.
“(a) Authorization of Transfer of Equipment.—During a public health emergency declared by the Secretary of Health and Human Services under section 319(a) of the Public Health Service Act (42 U.S.C. 247d(a)), the Secretary, at the request of the Secretary of Health and Human Services, may transfer to the Department of Health and Human Services, on a reimbursable basis, excess personal protective equipment or medically necessary equipment in the possession of the Department.
“(b) Determination by Secretaries.—
“(1) In general.—In carrying out this section—
“(A) before requesting a transfer under subsection (a), the Secretary of Health and Human Services shall determine whether the personal protective equipment or medically necessary equipment is otherwise available; and
“(B) before initiating a transfer under subsection (a), the Secretary, in consultation with the heads of each component within the Department, shall—
“(i) determine whether the personal protective equipment or medically necessary equipment requested to be transferred under subsection (a) is excess equipment; and
“(ii) certify that the transfer of the personal protective equipment or medically necessary equipment will not adversely impact the health or safety of officers, employees, or contractors of the Department.
“(2) Notification.—The Secretary of Health and Human Services and the Secretary shall each submit to Congress a notification explaining the determination made under subparagraphs (A) and (B), respectively, of paragraph (1).
“(3) Required inventory.—
“(A) In general.—The Secretary shall—
“(i) acting through the Chief Medical Officer of the Department, maintain an inventory of all personal protective equipment and medically necessary equipment in the possession of the Department; and
“(ii) make the inventory required under clause (i) available, on a continual basis, to—
“(I) the Secretary of Health and Human Services; and
“(II) the Committee on Appropriations and the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Appropriations and the Committee on Homeland Security of the House of Representatives.
“(B) Form.—Each inventory required to be made available under subparagraph (A) shall be submitted in unclassified form, but may include a classified annex.”
“Sec. 529. Transfer of equipment during a public health emergency.”.
“(6) Transfers of items.—The Secretary, in coordination with the Secretary of Homeland Security, may sell drugs, vaccines and other biological products, medical devices, or other supplies maintained in the stockpile under paragraph (1) to a Federal agency or private, nonprofit, State, local, tribal, or territorial entity for immediate use and distribution, provided that any such items being sold are—
“(A) within 1 year of their expiration date; or
“(B) determined by the Secretary to no longer be needed in the stockpile due to advances in medical or technical capabilities.”
TITLE X Asset Concessions
SEC. 71001. Asset Concessions.
“§ 611. Asset concessions and innovative finance assistance
“(a) Definitions.—In this section:
“(1) Approved infrastructure asset.—The term ‘approved infrastructure asset’ means—
“(A) a project (as defined in section 601(a)); and
“(B) a group of projects (as defined in section 601(a)) considered together in a single asset concession or long-term lease to a concessionaire by 1 or more eligible entities.
“(2) Asset concession.—The term ‘asset concession’ means a contract between an eligible entity and a concessionaire—
“(A) under which—
“(i) the eligible entity agrees to enter into a concession agreement or long-term lease with the concessionaire relating to an approved infrastructure asset owned, controlled, or maintained by the eligible entity;
“(ii) as consideration for the agreement or lease described in clause (i), the concessionaire agrees—
“(I) to provide to the eligible entity 1 or more asset concession payments; and
“(II) to maintain or exceed the condition, performance, and service level of the approved infrastructure asset, as compared to that condition, performance, and service level on the date of execution of the agreement or lease; and
“(iii) the eligible entity and the concessionaire agree that the costs for a fiscal year of the agreement or lease, and any project carried out under the agreement or lease, shall not be shifted to any taxpayer the annual household income of whom is less than $400,000 per year, including through taxes, user fees, tolls, or any other measure, for use of an approved infrastructure asset; and
“(B) the terms of which do not include any noncompete or exclusivity restriction (or any other, similar restriction) on the approval of another project.
“(3) Asset concession payment.—The term ‘asset concession payment’ means a payment that—
“(A) is made by a concessionaire to an eligible entity for fair market value that is determined as part of the asset concession; and
“(B) may be—
“(i) a payment made at the financial close of an asset concession; or
“(ii) a series of payments scheduled to be made for—
“(I) a fixed period; or
“(II) the term of an asset concession.
“(4) Concessionaire.—The term ‘concessionaire’ means a private individual or a private or publicly chartered corporation or entity that enters into an asset concession with an eligible entity.
“(5) Eligible entity.—
“(A) In general.—The term ‘eligible entity’ means an entity described in subparagraph (B) that—
“(i) owns, controls, or maintains an approved infrastructure asset; and
“(ii) has the legal authority to enter into a contract to transfer ownership, maintenance, operations, revenues, or other benefits and responsibilities for an approved infrastructure asset.
“(B) Entities described.—An entity referred to in subparagraph (A) is any of the following:
“(i) A State.
“(ii) A Tribal government.
“(iii) A unit of local government.
“(iv) An agency or instrumentality of a State, Tribal government, or unit of local government.
“(v) A special purpose district or public authority.
“(b) Establishment.—The Secretary shall establish a program to facilitate access to expert services for, and to provide grants to, eligible entities to enhance the technical capacity of eligible entities to facilitate and evaluate public-private partnerships in which the private sector partner could assume a greater role in project planning, development, financing, construction, maintenance, and operation, including by assisting eligible entities in entering into asset concessions.
“(c) Applications.—To be eligible to receive a grant under this section, an eligible entity shall submit to the Secretary an application at such time, in such manner, and containing such information as the Secretary may require.
“(d) Eligible Activities.—
“(1) Technical assistance grants.—An eligible entity may use amounts made available from a grant under this section for technical assistance to build the organizational capacity of the eligible entity to develop, review, or enter into an asset concession, including for—
“(A) identifying appropriate assets or projects for asset concessions;
“(B) soliciting and negotiating asset concessions, including hiring staff in public agencies;
“(C) conducting a value-for-money analysis, or a comparable analysis, to evaluate the comparative benefits of asset concessions and public debt or other procurement methods;
“(D) evaluating options for the structure and use of asset concession payments;
“(E) evaluating and publicly presenting the risks and benefits of all contract provisions for the purpose of transparency and accountability;
“(F) identifying best practices to protect the public interest and priorities;
“(G) identifying best practices for managing transportation demand and mobility along a corridor, including through provisions of the asset concession, to facilitate transportation demand management strategies along the corridor that is subject to the asset concession; and
“(H) integrating and coordinating pricing, data, and fare collection with other regional operators that exist or may be developed.
“(2) Expert services.—An eligible entity seeking to leverage public and private funding in connection with the development of an early-stage approved infrastructure asset, including in the development of alternative approaches to project delivery or procurement, may use amounts made available from a grant under this section to retain the services of an expert firm to provide to the eligible entity direct project level assistance, which services may include—
“(A) project planning, feasibility studies, revenue forecasting, economic assessments and cost-benefit analyses, public benefit studies, value-for-money analyses, business case development, lifecycle cost analyses, risk assessment, financing and funding options analyses, procurement alternatives analyses, statutory and regulatory framework analyses and other pre-procurement and pre-construction activities;
“(B) financial and legal planning (including the identification of statutory authorization, funding, and financing options);
“(C) early assessment of permitting, environmental review, and regulatory processes and costs; and
“(D) assistance with entering into an asset concession.
“(e) Distribution.—
“(1) Maximum amount.—
“(A) Technical assistance grants.—The maximum amount of a technical assistance grant under subsection (d)(1) shall be $2,000,000.
“(B) Expert services.—The maximum amount of the value of expert services retained by an eligible entity under subsection (d)(2) shall be $2,000,000.
“(2) Cost sharing.—
“(A) In general.—Except as provided in subparagraph (B), the Federal share of the cost of an activity carried out under this section may be up to 100 percent.
“(B) Certain projects.—If the amount of the grant provided to an eligible entity under this section is more than $1,000,000, the Federal share of the cost of an activity carried out using grant amounts in excess of $1,000,000 shall be 50 percent.
“(3) Statewide maximum.—The aggregate amount made available under this section to eligible entities within a State shall not exceed, on a cumulative basis for all eligible entities within the State during any 3-year period, $4,000,000.
“(f) Requirements.—
“(1) In general.—The Secretary shall ensure that, as a condition of receiving a grant under this section, for any asset concession for which the grant provides direct assistance—
“(A) the asset concession shall not prohibit, discourage, or make it more difficult for an eligible entity to construct new infrastructure, to provide or expand transportation services, or to manage associated infrastructure in publicly beneficial ways, along a transportation corridor or in the proximity of a transportation facility that was a part of the asset concession;
“(B) the eligible entity shall have adopted binding rules to publish all major business terms of the proposed asset concession not later than the date that is 30 days before entering into the asset concession, to enable public review, including a certification of public interest based on the results of an assessment under subparagraph (D);
“(C) the asset concession shall not result in displacement, job loss, or wage reduction for the existing workforce of the eligible entity or other public entities;
“(D) the eligible entity or the concessionaire shall carry out a value-for-money analysis, or similar assessment, to compare the aggregate costs and benefits to the eligible entity of the asset concession against alternative options to determine whether the asset concession generates additional public benefits and serves the public interest;
“(E) the full amount of any asset concession payment received by the eligible entity under the asset concession, less any amount paid for transaction costs relating to the asset concession, shall be used to pay infrastructure costs of the eligible entity; and
“(F) the terms of the asset concession shall not result in any increase in costs under the asset concession being shifted to taxpayers the annual household income of whom is less than $400,000 per year, including through taxes, user fees, tolls, or any other measure, for use of an approved infrastructure asset.
“(2) Audit.—Not later than 3 years after the date on which an eligible entity enters into an asset concession as a result of a grant under this section—
“(A) the eligible entity shall hire an independent auditor to evaluate the performance of the concessionaire based on the requirements described in paragraph (1); and
“(B) the independent auditor shall submit to the eligible entity, and make publicly available, a report describing the results of the audit under subparagraph (A).
“(3) Treatment.—Unless otherwise provided under paragraph (1), the Secretary shall not, as a condition of receiving a grant under this section, prohibit or otherwise prevent an eligible entity from entering into, or receiving any asset concession payment under, an asset concession for an approved infrastructure asset owned, controlled, or maintained by the eligible entity.
“(4) Applicability of federal laws.—Nothing in this section exempts a concessionaire or an eligible entity from a compliance obligation with respect to any applicable Federal or State law that would otherwise apply to the concessionaire, the eligible entity, or an approved infrastructure asset.
“(g) Funding.—
“(1) In general.—On October 1, 2021, and on each October 1 thereafter through October 1, 2025, out of any funds in the Treasury not otherwise appropriated, the Secretary of the Treasury shall transfer to the Secretary to carry out this section $20,000,000, to remain available until expended.
“(2) Receipt and acceptance.—The Secretary shall be entitled to receive, shall accept, and shall use to carry out this section the funds transferred under paragraph (1), without further appropriation.”
“611. Asset concessions and innovative finance assistance.”.
TITLE XI Clean School Buses and Ferries
SEC. 71101. Clean School Bus Program.
“SEC. 741. CLEAN SCHOOL BUS PROGRAM.
“(a) Definitions.—In this section:
“(1) Administrator.—The term ‘Administrator’ means the Administrator of the Environmental Protection Agency.
“(2) Alternative fuel.—The term ‘alternative fuel’ means liquefied natural gas, compressed natural gas, hydrogen, propane, or biofuels.
“(3) Clean school bus.—The term ‘clean school bus’ means a school bus that—
“(A) the Administrator certifies reduces emissions and is operated entirely or in part using an alternative fuel; or
“(B) is a zero-emission school bus.
“(4) Eligible contractor.—The term ‘eligible contractor’ means a contractor that is a for-profit, not-for-profit, or nonprofit entity that has the capacity—
“(A) to sell clean school buses, zero-emission school buses, charging or fueling infrastructure, or other equipment needed to charge, fuel, or maintain clean school buses or zero-emission school buses, to individuals or entities that own a school bus or a fleet of school buses; or
“(B) to arrange financing for such a sale.
“(5) Eligible recipient.—
“(A) In general.—Subject to subparagraph (B), the term ‘eligible recipient’ means—
“(i) 1 or more local or State governmental entities responsible for—
“(I) providing school bus service to 1 or more public school systems; or
“(II) the purchase of school buses;
“(ii) an eligible contractor;
“(iii) a nonprofit school transportation association; or
“(iv) an Indian Tribe (as defined in section 4 of the Indian Self-Determination and Education Assistance Act (25 U.S.C. 5304)), Tribal organization (as defined in that section), or tribally controlled school (as defined in section 5212 of the Tribally Controlled Schools Act of 1988 (25 U.S.C. 2511)) that is responsible for—
“(I) providing school bus service to 1 or more Bureau-funded schools (as defined in section 1141 of the Education Amendments of 1978 (25 U.S.C. 2021)); or
“(II) the purchase of school buses.
“(B) Special requirements.—In the case of eligible recipients identified under clauses (ii) and (iii) of subparagraph (A), the Administrator shall establish timely and appropriate requirements for notice and shall establish timely and appropriate requirements for approval by the public school systems that would be served by buses purchased using award funds made available under this section.
“(6) High-need local educational agency.—The term ‘high-need local educational agency’ means a local educational agency (as defined in section 8101 of the Elementary and Secondary Education Act of 1965 (20 U.S.C. 7801)) that is among the local educational agencies in the applicable State with high percentages of children counted under section 1124(c) of the Elementary and Secondary Education Act of 1965 (20 U.S.C. 6333(c)), on the basis of the most recent satisfactory data available, as determined by the Secretary of Education (or, for a local educational agency for which no such data is available, such other data as the Secretary of Education determines to be satisfactory).
“(7) School bus.—The term ‘school bus’ has the meaning given the term ‘schoolbus’ in section 30125(a) of title 49, United States Code.
“(8) Zero-emission school bus.—The term ‘zero-emission school bus’ means a school bus that is certified by the Administrator to have a drivetrain that produces, under any possible operational mode or condition, zero exhaust emission of—
“(A) any air pollutant that is listed pursuant to section 108(a) of the Clean Air Act (42 U.S.C. 7408(a)) (or any precursor to such an air pollutant); and
“(B) any greenhouse gas.
“(b) Program for Replacement of Existing School Buses With Clean School Buses and Zero-emission School Buses.—
“(1) Establishment.—The Administrator shall establish a program—
“(A) to award grants and rebates on a competitive basis to eligible recipients for the replacement of existing school buses with clean school buses;
“(B) to award grants and rebates on a competitive basis to eligible recipients for the replacement of existing school buses with zero-emission school buses;
“(C) to award contracts to eligible contractors to provide rebates for the replacement of existing school buses with clean school buses; and
“(D) to award contracts to eligible contractors to provide rebates for the replacement of existing school buses with zero-emission school buses.
“(2) Allocation of funds.—Of the amounts made available for awards under paragraph (1) in a fiscal year, the Administrator shall award—
“(A) 50 percent to replace existing school buses with zero-emission school buses; and
“(B) 50 percent to replace existing school buses with clean school buses and zero-emission school buses.
“(3) Considerations.—In making awards under paragraph (2)(B), the Administrator shall take into account the following criteria and shall not give preference to any individual criterion:
“(A) Lowest overall cost of bus replacement.
“(B) Local conditions, including the length of bus routes and weather conditions.
“(C) Technologies that most reduce emissions.
“(D) Whether funds will bring new technologies to scale or promote cost parity between old technology and new technology.
“(4) Priority of applications.—In making awards under paragraph (1), the Administrator may prioritize applicants that—
“(A) propose to replace school buses that serve—
“(i) a high-need local educational agency;
“(ii) a Bureau-funded school (as defined in section 1141 of the Education Amendments of 1978 (25 U.S.C. 2021)); or
“(iii) a local educational agency that receives a basic support payment under section 7003(b)(1) of the Elementary and Secondary Education Act of 1965 (20 U.S.C. 7703(b)(1)) for children who reside on Indian land;
“(B) serve rural or low-income areas; or
“(C) propose to complement the assistance received through the award by securing additional sources of funding for the activities supported through the award, such as through—
“(i) public-private partnerships;
“(ii) grants from other entities; or
“(iii) issuance of school bonds.
“(5) Use of school bus fleet.—All clean school buses and zero-emission school buses acquired with funds provided under this section shall—
“(A) be operated as part of the school bus fleet for which the award was made for not less than 5 years;
“(B) be maintained, operated, and charged or fueled according to manufacturer recommendations or State requirements; and
“(C) not be manufactured or retrofitted with, or otherwise have installed, a power unit or other technology that creates air pollution within the school bus, such as an unvented diesel passenger heater.
“(6) Awards.—
“(A) In general.—In making awards under paragraph (1), the Administrator may make awards for up to 100 percent of the costs for replacement of existing school buses with clean school buses, zero-emission school buses, and charging or fueling infrastructure.
“(B) Structuring awards.—In making an award under paragraph (1)(A), the Administrator shall decide whether to award a grant or rebate, or a combination thereof, based primarily on how best to facilitate replacing existing school buses with clean school buses or zero-emission school buses, as applicable.
“(7) Deployment and distribution.—
“(A) In general.—The Administrator shall—
“(i) to the maximum extent practicable, achieve nationwide deployment of clean school buses and zero-emission school buses through the program under this section; and
“(ii) ensure a broad geographic distribution of awards.
“(B) Limitation.—The Administrator shall ensure that the amount received by all eligible entities in a State from grants and rebates under this section does not exceed 10 percent of the amounts made available to carry out this section during a fiscal year.
“(8) Annual report.—Not later than January 31 of each year, the Administrator shall submit to Congress a report that evaluates the implementation of this section and describes—
“(A) the total number of applications received;
“(B) the quantity and amount of grants and rebates awarded and the location of the recipients of the grants and rebates;
“(C) the criteria used to select the recipients; and
“(D) any other information the Administrator considers appropriate.
“(c) Education and Outreach.—
“(1) In general.—Not later than 120 days after the date of enactment of the Infrastructure Investment and Jobs Act, the Administrator shall develop an education and outreach program to promote and explain the award program under this section.
“(2) Coordination with stakeholders.—The education and outreach program under paragraph (1) shall be designed and conducted in conjunction with interested stakeholders.
“(3) Components.—The education and outreach program under paragraph (1) shall—
“(A) inform potential award recipients on the process of applying for awards and fulfilling the requirements of awards;
“(B) describe the available technologies and the benefits of using the technologies;
“(C) explain the benefits and costs incurred by participating in the award program;
“(D) make available information regarding best practices, lessons learned, and technical and other information regarding—
“(i) clean school bus and zero-emission school bus acquisition and deployment;
“(ii) the build-out of associated infrastructure and advance planning with the local electricity supplier;
“(iii) workforce development, training, and Registered Apprenticeships that meet the requirements under parts 29 and 30 of title 29, Code of Federal Regulations (as in effect on December 1, 2019); and
“(iv) any other information that is necessary, as determined by the Administrator; and
“(E) include, as appropriate, information from the annual report required under subsection (b)(7).
“(d) Administrative Costs.—The Administrator may use, for the administrative costs of carrying out this section, not more than 3 percent of the amounts made available to carry out this section for any fiscal year.
“(e) Regulations.—The Administrator shall have the authority to issue such regulations or other guidance, forms, instructions, and publications as may be necessary or appropriate to carry out the programs, projects, or activities authorized under this section, including to ensure that such programs, projects, or activities are completed in a timely and effective manner, result in emissions reductions, and maximize public health benefits.
“(f) Authorization of Appropriations.—There is authorized to be appropriated to the Administrator to carry out this section, to remain available until expended, $1,000,000,000 for each of fiscal years 2022 through 2026, of which—
“(1) $500,000,000 shall be made available for the adoption of clean school buses and zero-emission school buses; and
“(2) $500,000,000 shall be made available for the adoption of zero-emission school buses.”
SEC. 71102. Electric or Low-Emitting Ferry Pilot Program.
SEC. 71103. Ferry Service for Rural Communities.
“(k) Additional Uses.—Notwithstanding any other provision of law, in addition to other uses of funds under this section, an eligible entity may use amounts made available under this section to pay the operating costs of the eligible entity.”