Incidents report

(a) Report Not later than 1 year after the date of the enactment of this Act, and annually thereafter, the Commission shall submit to the Permanent Select Committee on Intelligence of the House of Representatives and the Select Committee on Intelligence of the Senate a report describing any incident that creates or is the consequence of a cybersecurity risk that was caused by a foreign country or a non-state actor during the preceding year and that targeted— (1) a submarine cable with respect to which the Commission has issued a submarine cable license; (2) a submarine cable of an ally (as determined by the Secretary of State) of the United States; or (3) a landing station of a cable described in paragraph (1) or (2). (b) Form The report required by subsection (a) shall be submitted in unclassified form, but may contain a classified annex.