Skip to content

Title 22 — Foreign Relations and Intercourse

Chapter 99 — North Korea Sanctions and Policy Enhancement

§ 9229. Report on and imposition of sanctions to address persons responsible for knowingly engaging in significant activities undermining cybersecurity

Statutory text

(a)

Report required

(1)

In general

The President shall submit to the appropriate congressional committees a report that describes significant activities undermining cybersecurity aimed against the United States Government or any United States person and conducted by the Government of North Korea, or a person owned or controlled, directly or indirectly, by the Government of North Korea or any person acting for or on behalf of that Government.

(2)

Information

The report required under paragraph (1) shall include—

(A)

the identity and nationality of persons that have knowingly engaged in, directed, or provided material support to conduct significant activities undermining cybersecurity described in paragraph (1);

(B)

a description of the conduct engaged in by each person identified;

(C)

an assessment of the extent to which a foreign government has provided material support to the Government of North Korea or any person acting for or on behalf of that Government to conduct significant activities undermining cybersecurity; and

(D)

a United States strategy to counter North Korea’s efforts to conduct significant activities undermining cybersecurity against the United States, that includes efforts to engage foreign governments to halt the capability of the Government of North Korea and persons acting for or on behalf of that Government to conduct significant activities undermining cybersecurity.

(3)

Submission and form

(A)

Submission

The report required under paragraph (1) shall be submitted not later than 90 days after , and every 180 days thereafter for 5 years.

(B)

Form

The report required under paragraph (1) shall be submitted in an unclassified form, but may include a classified annex.

(b)

Designation of persons

The President shall designate under section 9214(a) of this title any person identified in the report required under subsection (a)(1) that knowingly engages in significant activities undermining cybersecurity through the use of computer networks or systems against foreign persons, governments, or other entities on behalf of the Government of North Korea.

Legislative history

Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.

  1. North Korea Sanctions and Policy Enhancement Act of 2016

    Pub. L. 114–122 title II § 209 · 130 Stat. 93

    Enacted · 22 U.S.C. § 9229

    Pub. L. 114–122, title II, § 209, Feb. 18, 2016, 130 Stat. 110

    Source evidence

    Code source credit
    Pub. L. 114–122, title II, § 209, Feb. 18, 2016, 130 Stat. 110

    Enacted provision · exact public law section
    SEC. 209. REPORT ON AND IMPOSITION OF SANCTIONS TO ADDRESS PERSONS RESPONSIBLE FOR KNOWINGLY ENGAGING IN SIGNIFICANT ACTIVITIES UNDERMINING CYBERSECURITY. (a) Report Required.— (1) In general.— The President shall submit to the appropriate congressional committees a report that describes significant activities undermining cybersecurity aimed against the United States Government or any United States person and conducted by the Government of North Korea, or a person owned or controlled, directly or indirectly, by the Government of North Korea or any person acting for or on behalf of that Government. (2) Information.— The report required under paragraph (1) shall include— (A) the identity and nationality of persons that have knowingly engaged in, directed, or provided material support to conduct significant activities undermining cybersecurity described in paragraph (1); (B) a description of the conduct engaged in by each person identified; (C) an assessment of the extent to which a foreign government has provided material support to the Government of North Korea or any person acting for or on behalf of that Government to conduct significant activities undermining cybersecurity; and (D) a United States strategy to counter North Korea’s efforts to conduct significant activities undermining cybersecurity against the United States, that includes efforts to engage foreign governments to halt the capability of the Government of North Korea and persons acting for or on behalf of that Government to conduct significant activities undermining cybersecurity. (3) Submission and form.— (A) Submission.— The report required under paragraph (1) shall be submitted not later than 90 days after the date of the enactment of this Act, and every 180 days thereafter. (B) Form.— The report required under paragraph (1) shall be submitted in an unclassified form, but may include a classified annex. (b) Designation of Persons.— The President shall designate under section 104(a) any person identified in the report required under subsection (a)(1) that knowingly engages in significant activities undermining cybersecurity through the use of computer networks or systems against foreign persons, governments, or other entities on behalf of the Government of North Korea.

  2. Hizballah International Financing Prevention Amendments Act of 2018

    Pub. L. 115–272 title III § 303(c)(1) · 132 Stat. 4144

    Substituted · 22 U.S.C. § 9229(a)(3)(A)

    Pub. L. 115–272 substituted “not later than 90 days after October 25, 2018, and every 180 days thereafter for 5 years” for “not later than 90 days after February 18, 2016, and every 180 days thereafter”

    Source evidence

    Code amendment note
    Subsec. (a)(3)(A). Pub. L. 115–272 substituted “not later than 90 days after October 25, 2018, and every 180 days thereafter for 5 years” for “not later than 90 days after February 18, 2016, and every 180 days thereafter”.

    Enacted provision · exact public law section
    (1) In section 209(a)(3)(A) (22 U.S.C. 9229(a)(3)(A)), by striking “not later than 90 days after the date of the enactment of this Act, and every 180 days thereafter” and inserting “not later than 90 days after the date of the enactment of the Hizballah International Financing Prevention Amendments Act of 2018, and every 180 days thereafter for 5 years”.

2 of 2 references resolved to an enrolled provision

Editorial Notes

Amendments

2018—Subsec. (a)(3)(A). Pub. L. 115–272 substituted “not later than 90 days after , and every 180 days thereafter for 5 years” for “not later than 90 days after , and every 180 days thereafter”.

Executive Documents

Delegation of Functions

For delegation of certain functions of President under this section, see Memorandum of President of the United States, , 81 F.R. 37479, set out as a note under section 9212 of this title.

Credits

2016–2018 · 2 acts
  1. 2016Pub. L. 114–122, title II, § 209, , 130 Stat. 110
  2. 2018Pub. L. 115–272, title III, § 303(c)(1), , 132 Stat. 4157.
Show as published

(Pub. L. 114–122, title II, § 209, , 130 Stat. 110; Pub. L. 115–272, title III, § 303(c)(1), , 132 Stat. 4157.)

Parsed from the official OLRC USLM XML in data/usc_all/usc22.xml · release point 119-108 · OLRC build 2026-09-09

USLM identifier /us/usc/t22/s9229