---
kind: "section"
citation: "44 U.S.C. § 3615"
title: "44"
title_heading: "Public Printing and Documents"
number: "3615"
heading: "Reports to Congress; GAO report"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/44/3615"
units:
  - "Chapter 36 — Management and Promotion of Electronic Government Services"
---

# §3615. Reports to Congress; GAO report

- (a) **Reports to Congress.—** Not later than 1 year after the date of enactment of this section, and annually thereafter, the Director shall submit to the [appropriate congressional committees](/usc/44/3607.md?p=b-2) a report that includes the following:
  - (1) During the preceding year, the status, efficiency, and effectiveness of the General Services Administration under [section 3609](/usc/44/3609.md) and agencies under [section 3613](/usc/44/3613.md) and in supporting the speed, effectiveness, sharing, reuse, and security of authorizations to operate for secure [cloud computing](/usc/44/3607.md?p=b-4) products and services.
  - (2) Progress towards meeting the metrics required under [section 3609(d)](/usc/44/3609.md?p=d).
  - (3) Data on [FedRAMP authorizations](/usc/44/3607.md?p=b-7).
  - (4) The average length of time to issue [FedRAMP authorizations](/usc/44/3607.md?p=b-7).
  - (5) The number of [FedRAMP authorizations](/usc/44/3607.md?p=b-7) submitted, issued, and denied for the preceding year.
  - (6) A review of progress made during the preceding year in advancing automation techniques to securely automate [FedRAMP](/usc/44/3607.md?p=b-6) processes and to accelerate reporting under this section.
  - (7) The number and characteristics of authorized [cloud computing](/usc/44/3607.md?p=b-4) products and services in use at each agency consistent with guidance provided by the Director under section 3614.
  - (8) A review of [FedRAMP](/usc/44/3607.md?p=b-6) measures to ensure the security of data stored or processed by [cloud service providers](/usc/44/3607.md?p=b-5), which may include—
    - (A) geolocation restrictions for provided products or services;
    - (B) disclosures of foreign elements of supply chains of acquired products or services;
    - (C) continued disclosures of ownership of [cloud service providers](/usc/44/3607.md?p=b-5) by foreign entities; and
    - (D) encryption for data processed, stored, or transmitted by [cloud service providers](/usc/44/3607.md?p=b-5).
- (b) **GAO Report.—** Not later than 180 days after the date of enactment of this section, the Comptroller General of the United States shall report to the [appropriate congressional committees](/usc/44/3607.md?p=b-2) an assessment of the following:
  - (1) The costs incurred by agencies and [cloud service providers](/usc/44/3607.md?p=b-5) relating to the issuance of [FedRAMP authorizations](/usc/44/3607.md?p=b-7).
  - (2) The extent to which agencies have processes in place to continuously monitor the implementation of [cloud computing](/usc/44/3607.md?p=b-4) products and services operating as [Federal information](/usc/44/3607.md?p=b-3) systems.
  - (3) How often and for which categories of products and services agencies use [FedRAMP authorizations](/usc/44/3607.md?p=b-7).
  - (4) The unique costs and potential burdens incurred by [cloud computing](/usc/44/3607.md?p=b-4) companies that are small business concerns (as defined in section 3(a) of the Small Business Act ([15 U.S.C. 632(a)](/usc/15/632.md?p=a)) as a part of the [FedRAMP authorization](/usc/44/3607.md?p=b-7) process.

## Source credit

(Added Pub. L. 117–263, div. E, title LIX, § 5921(b), Dec. 23, 2022, 136 Stat. 3455.)

## Notes

### Repeal of Section

For repeal of section by section 5921(d)(1) of Pub. L. 117–263, see Effective Date of Repeal note below.

### Editorial Notes

### References in Text

The date of enactment of this section, referred to in text, is the date of enactment of Pub. L. 117–263, which was approved Dec. 23, 2022.

### Statutory Notes and Related Subsidiaries

### Effective Date of Repeal

Pub. L. 117–263, div. E, title LIX, § 5921(d)(1), Dec. 23, 2022, 136 Stat. 3458, provided that the repeal of this section is effective on the date that is 5 years after Dec. 23, 2022.

### Construction

For rule of construction regarding section 5921 of Pub. L. 117–263, see section 5921(e) of Pub. L. 117–263, set out as a note under section 3607 of this title.