H.R. 5440: Cyber Incident Reporting for Critical Infrastructure Act of 2021

117th Congress · introduced 2021-09-30 · Science, Technology, Communications · Latest: Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Innovation.

federal

Follow this bill, step by step

Where it came from: introduced 2021-09-30 · official record
Who proposed it: Rep. Clarke, Yvette D. [D-NY-9] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Referred to the Subcommittee on Cybersecurity, Infrastructure Protection, and Innovation. Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Cyber Incident Reporting for Critical Infrastructure Act of 2021

Plain summary

C yber Incident Reporting for Critical Infrastructure Act of 2021 This bill requires reporting and other actions to address cybersecurity incidents, including ransomware attacks. Entities that own or operate critical infrastructure must report cybersecurity incidents (e.g., ransomware attacks) within specified time frames while other entities may voluntarily report incidents. The Cybersecurity and Infrastructure Security Agency (CISA) must (1) carry out rulemaking to implement the reporting requirements, and (2) establish an office to receive and analyze such reports. To the extent practicable, CISA must align its rules with existing requirements related to the reporting of cybersecurity incidents. The bill limits the use and disclosure of reported information. The information may be shared (subject to protections and restrictions) with federal agencies or to address cybersecurity threats. However, shared information may not be used as a basis for certain regulatory enforcement. Additionally, an entity may not be liable for submitting required reports. Further, reports are not subject to laws governing release of federal or other governmental records. The bill authorizes CISA to take specified action (e.g., issuing subpoenas) if an entity fails to submit a required report. CISA may share subpoenaed information with a regulator or the Department of Justice for regulatory enforcement or criminal prosecution.

Congressional Research Service summary (Introduced in House), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Cyber Incident Reporting for Critical Infrastructure Act of 2021

Source: Congressional Research Service summary (Introduced in House)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Rep. Clarke, Yvette D. [D-NY-9] · 3 cosponsors

Cost estimate: No cost estimate published yet.

Cosponsors on this site

Bennie G. Thompson (D-MS), Andrew R. Garbarino (R-NY)

Sponsor's campaign money: Rep. Clarke, Yvette D. [D-NY-9] reported raising $1.3 million (2025–2026). Details. Shown for context only; it does not mean any donor supported this bill.

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (3)

Bill: A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Rulemaking: The process agencies use to write regulations that carry out laws passed by Congress or a legislature. Usually an agency publishes a proposed rule, takes public comments, then publishes a final rule.
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Introduced in House)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-117hr5440.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/117/hr>

Record fed-us-cong117-hr5440 · catalog fed-us-congress-bills-cong117 · updated 2026-11-15 by psicol fed-bills-cong117