Skip to content

Title 6 — Domestic Security

Chapter 6 — Cybersecurity

§ 1501. Definitions

Statutory text

In this subchapter:

(1)

Agency

The term “agency” has the meaning given the term in section 3502 of title 44.

(2)

Antitrust laws

The term “antitrust laws”—

(A)

has the meaning given the term in section 12 of title 15;

(B)

includes section 45 of title 15 to the extent that section 45 of title 15 applies to unfair methods of competition; and

(C)

includes any State antitrust law, but only to the extent that such law is consistent with the law referred to in subparagraph (A) or the law referred to in subparagraph (B).

(3)

Appropriate Federal entities

The term “appropriate Federal entities” means the following:

(A)

The Department of Commerce.

(B)

The Department of Defense.

(C)

The Department of Energy.

(D)

The Department of Homeland Security.

(E)

The Department of Justice.

(F)

The Department of the Treasury.

(G)

The Office of the Director of National Intelligence.

(4)

Cybersecurity purpose

The term “cybersecurity purpose” has the meaning given the term in section 650 of this title.

(5)

Cybersecurity threat

The term “cybersecurity threat” has the meaning given the term in section 650 of this title.

(6)

Cyber threat indicator

The term “cyber threat indicator” has the meaning given the term in section 650 of this title.

(7)

Defensive measure

The term “defensive measure” has the meaning given the term in section 650 of this title.

(8)

Federal entity

The term “Federal entity” means a department or agency of the United States or any component of such department or agency.

(9)

Information system

The term “information system” has the meaning given the term in section 650 of this title.

(10)

Local government

The term “local government” means any borough, city, county, parish, town, township, village, or other political subdivision of a State.

(11)

Malicious cyber command and control

The term “malicious cyber command and control” has the meaning given the term in section 650 of this title.

(12)

Malicious reconnaissance

The term “malicious reconnaissance” has the meaning given the term in section 650 of this title.

(13)

Monitor

The term “monitor” has the meaning given the term in section 650 of this title.

(14)

Non-Federal entity

(A)

In general

Except as otherwise provided in this paragraph, the term “non-Federal entity” means any private entity, non-Federal government agency or department, or State, tribal, or local government (including a political subdivision, department, or component thereof).

(B)

Inclusions

The term “non-Federal entity” includes a government agency or department of the District of Columbia, the Commonwealth of Puerto Rico, the United States Virgin Islands, Guam, American Samoa, the Northern Mariana Islands, and any other territory or possession of the United States.

(C)

Exclusion

The term “non-Federal entity” does not include a foreign power as defined in section 1801 of title 50.

(15)

Private entity

(A)

In general

Except as otherwise provided in this paragraph, the term “private entity” means any person or private group, organization, proprietorship, partnership, trust, cooperative, corporation, or other commercial or nonprofit entity, including an officer, employee, or agent thereof.

(B)

Inclusion

The term “private entity” includes a State, tribal, or local government performing utility services, such as electric, natural gas, or water services.

(C)

Exclusion

The term “private entity” does not include a foreign power as defined in section 1801 of title 50.

(16)

Security control

The term “security control” has the meaning given the term in section 650 of this title.

(17)

Security vulnerability

The term “security vulnerability” has the meaning given the term in section 650 of this title.

(18)

Tribal

The term “tribal” has the meaning given the term “Indian tribe” in section 5304 of title 25.

Legislative history

Reconstructed from this section’s Code source credit and amendment notes, resolved against the local Statutes at Large. Editorial notes are evidence, not the law that made the change.

  1. Department of Commerce Appropriations Act, 2016

    Pub. L. 114–113 div. N title I § 102 · 129 Stat. 2242

    Enacted · 6 U.S.C. § 1501

    Pub. L. 114–113, div. N, title I, § 102, Dec. 18, 2015, 129 Stat. 2936

    Source evidence

    Code source credit
    Pub. L. 114–113, div. N, title I, § 102, Dec. 18, 2015, 129 Stat. 2936

    Enacted provision · exact public law section
    Sec. 102. During the current fiscal year, appropriations made available to the Department of Commerce by this Act for salaries and expenses shall be available for hire of passenger motor vehicles as authorized by 31 U.S.C. 1343 and 1344; services as authorized by 5 U.S.C. 3109; and uniforms or allowances therefor, as authorized by law (5 U.S.C. 5901–5902).

  2. James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

    Pub. L. 117–263 § 7143(b)(4)(A) · 136 Stat. 2395

    1. Added · 6 U.S.C. § 1501(4)(7)

      Pub. L. 117–263, § 7143(b)(4)(A), added pars. (4) to (7)

    2. Struck · 6 U.S.C. § 1501(4)(7)

      Pub. L. 117–263, § 7143(b)(4)(A), struck out former pars. (4) to (7) which defined cybersecurity purpose, cybersecurity threat, cyber threat indicator, and defensive measure, respectively

    Source evidence

    Code amendment note
    Pars. (4) to (7). Pub. L. 117–263, § 7143(b)(4)(A), added pars. (4) to (7) and struck out former pars. (4) to (7) which defined cybersecurity purpose, cybersecurity threat, cyber threat indicator, and defensive measure, respectively.

    Enacted provision · exact public law section
    (A) by striking paragraphs (4) through (7) and inserting the following: “(4) Cybersecurity purpose.— The term ‘cybersecurity purpose’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(5) Cybersecurity threat.— The term ‘cybersecurity threat’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(6) Cyber threat indicator.— The term ‘cyber threat indicator’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(7) Defensive measure.— The term ‘defensive measure’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002.” ;

  3. James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

    Pub. L. 117–263 § 7143(b)(4)(B) · 136 Stat. 2395

    1. Added · 6 U.S.C. § 1501(9)

      Pub. L. 117–263, § 7143(b)(4)(B), added par. (9)

    2. Struck · 6 U.S.C. § 1501(9)

      Pub. L. 117–263, § 7143(b)(4)(B), struck out former par. (9) which defined information system

    Source evidence

    Code amendment note
    Par. (9). Pub. L. 117–263, § 7143(b)(4)(B), added par. (9) and struck out former par. (9) which defined information system.

    Enacted provision · exact public law section
    (B) by striking paragraph (9) and inserting the following: “(9) Information system.— The term ‘information system’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002.” .

  4. James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

    Pub. L. 117–263 § 7143(b)(4)(C) · 136 Stat. 2395

    1. Added · 6 U.S.C. § 1501(11)(13)

      Pub. L. 117–263, § 7143(b)(4)(C), added pars. (11) to (13)

    2. Struck · 6 U.S.C. § 1501(11)(13)

      Pub. L. 117–263, § 7143(b)(4)(C), struck out former pars. (11) to (13) which defined malicious cyber command and control, malicious reconnaissance, and monitor, respectively

    Source evidence

    Code amendment note
    Pars. (11) to (13). Pub. L. 117–263, § 7143(b)(4)(C), added pars. (11) to (13) and struck out former pars. (11) to (13) which defined malicious cyber command and control, malicious reconnaissance, and monitor, respectively.

    Enacted provision · exact public law section
    (C) by striking paragraphs (11), (12), and (13) and inserting the following: “(11) Malicious cyber command and control.— The term ‘malicious cyber command and control’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(12) Malicious reconnaissance.— The term ‘malicious reconnaissance’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(13) Monitor.— The term ‘monitor’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002.” ; and

  5. James M. Inhofe National Defense Authorization Act for Fiscal Year 2023

    Pub. L. 117–263 § 7143(b)(4)(D) · 136 Stat. 2395

    1. Added · 6 U.S.C. § 1501(16); 6 U.S.C. § 1501(17)

      Pub. L. 117–263, § 7143(b)(4)(D), added pars. (16) and (17)

    2. Struck · 6 U.S.C. § 1501(16); 6 U.S.C. § 1501(17)

      Pub. L. 117–263, § 7143(b)(4)(D), struck out former pars. (16) and (17) which defined security control and security vulnerability, respectively

    Source evidence

    Code amendment note
    Pars. (16), (17). Pub. L. 117–263, § 7143(b)(4)(D), added pars. (16) and (17) and struck out former pars. (16) and (17) which defined security control and security vulnerability, respectively.

    Enacted provision · exact public law section
    (D) by striking paragraphs (16) and (17) and inserting the following: “(16) Security control.— The term ‘security control’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002. “(17) Security vulnerability.— The term ‘security vulnerability’ has the meaning given the term in section 2200 of the Homeland Security Act of 2002.” .

9 of 9 references resolved to an enrolled provision

Editorial Notes

Amendments

2022—Pars. (4) to (7). Pub. L. 117–263, § 7143(b)(4)(A), added pars. (4) to (7) and struck out former pars. (4) to (7) which defined cybersecurity purpose, cybersecurity threat, cyber threat indicator, and defensive measure, respectively.

Par. (9). Pub. L. 117–263, § 7143(b)(4)(B), added par. (9) and struck out former par. (9) which defined information system.

Pars. (11) to (13). Pub. L. 117–263, § 7143(b)(4)(C), added pars. (11) to (13) and struck out former pars. (11) to (13) which defined malicious cyber command and control, malicious reconnaissance, and monitor, respectively.

Pars. (16), (17). Pub. L. 117–263, § 7143(b)(4)(D), added pars. (16) and (17) and struck out former pars. (16) and (17) which defined security control and security vulnerability, respectively.

Statutory Notes and Related Subsidiaries

Short Title

Pub. L. 114–113, div. N, § 1(a), , 129 Stat. 2935, provided that: “This division [enacting this chapter and sections 149 and 151 of this title, amending sections 131, 148, 149, and 150 of this title, section 1029 of Title 18, Crimes and Criminal Procedure, and sections 3553 and 3554 of Title 44, Public Printing and Documents, enacting provisions set out as notes under this section and sections 101, 131, and 151 of this title and section 301 of Title 5, Government Organization and Employees] may be cited as the ‘Cybersecurity Act of 2015’.”

Pub. L. 114–113, div. N, title I, § 101, , 129 Stat. 2936, provided that: “This title [enacting this subchapter] may be cited as the ‘Cybersecurity Information Sharing Act of 2015’.”

Pub. L. 114–113, div. N, title II, § 221, , 129 Stat. 2963, provided that: “This subtitle [subtitle B (§§ 221–229) of title II of div. N of Pub. L. 114–113, enacting subchapter II of this chapter and sections 149 and 151 of this title, amending sections 148, 149, and 150 of this title and sections 3553 and 3554 of Title 44, Public Printing and Documents, and enacting provisions set out as a note under section 151 of this title] may be cited as the ‘Federal Cybersecurity Enhancement Act of 2015’.”

Credits

2015–2022 · 2 acts
  1. 2015Pub. L. 114–113, div. N, title I, § 102, , 129 Stat. 2936
  2. 2022Pub. L. 117–263, div. G, title LXXI, § 7143(b)(4), , 136 Stat. 3661.
Show as published

(Pub. L. 114–113, div. N, title I, § 102, , 129 Stat. 2936; Pub. L. 117–263, div. G, title LXXI, § 7143(b)(4), , 136 Stat. 3661.)

Parsed from the official OLRC USLM XML in data/usc_all/usc06.xml · release point 119-108 · OLRC build 2026-09-09

USLM identifier /us/usc/t6/s1501