S. 1157 · 115th Congress
PATCH Act of 2017
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 115th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
SchatzSponsor3 cosponsors · 1 D, 2 R
2 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Protecting Our Ability to Counter Hacking Act of 2017 or the PATCH Act of 2017
What it does: CRS summary · Introduced in Senate · May 17, 2017
Protecting Our Ability to Counter Hacking Act of 2017 or the PATCH Act of 2017
This bill establishes the Vulnerability Equities Review Board to establish and make available to the public policies on matters relating to whether, when, how, to whom, and to what degree information about a vulnerability in a technology, product, system, service, or application that is not publicly known should be shared or released by the government to a non-federal entity. The board must submit to Congress and the President a draft of such policies, along with a description of challenges or impediments requiring legislative or administrative action.
Each federal agency shall, upon obtaining information about such a vulnerability, subject such information to a process established by the board for sharing or releasing the information. Process considerations shall include:
- which technologies, products, systems, services, or applications are subject to the vulnerability;
- the potential risks of leaving the vulnerability unpatched or unmitigated;
- the likelihood that a non-federal entity will discover the vulnerability; and
- whether the vulnerability can be patched or otherwise mitigated.
An agency may share or release such information to a non-federal entity without subjecting it to such process if the agency determines that the information is presumptively shareable or releasable.
If the board determines that such information should be shared with or released to the vendor that developed or maintains the technology, it shall provide the information to the Department of Homeland Security, which shall share or release the information as directed by the board.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: PATCH Act of 2017
Also known as: Protecting Our Ability to Counter Hacking Act of 2017
Latest action (May 17, 2017): Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Policy area: Government Operations and Politics · Origin: Senate · Introduced: May 17, 2017
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.