Working group on digital impersonation fraud

(a) Definitions In this section: (1) Appropriate committees of Congress The term appropriate committees of Congress means— (A) the Committee on Commerce, Science, and Transportation of the Senate; and (B) the Committee on Science, Space, and Technology of the House of Representatives. (2) Digital forensics The term digital forensics means scientific or technical practices used to recognize, collect, analyze, or interpret digital evidence for the purposes of investigating crimes or other incidents, including the use of digital impersonation to commit fraud. (3) Digital impersonation The term digital impersonation has the meaning given that term in section 223(i) of the Communications Act of 1934 (47 U.S.C. 223(i)), as added by section 2 of this Act. (4) Director The term Director means the Director of the National Institute of Standards and Technology. (b) Establishment of Working Group (1) In general Not later than 30 days after the date of the enactment of this Act, the Secretary of Commerce, acting through the Director, shall convene a working group (referred to in this section as the Working Group) to engage in technical discussions and research for the development of best practices and recommendations for the recognition, detection, prevention, and tracing of digital impersonations used in violation of section 223(i) of the Communications Act of 1934 (47 U.S.C. 223(i)), as amended by section 2 of this Act, and section 3(a) of this Act. (2) Composition The Working Group shall consist of— (A) representatives from— (i) the Department of Justice; (ii) the Federal Trade Commission; (iii) Federal, State, and local government law enforcement agencies; and (iv) private sector industries, including— (I) financial services; (II) health care; (III) retail and e-commerce; (IV) telecommunications; and (V) digital platforms, including social media platforms; and (B) scientists and engineers with expertise in— (i) digital forensics; and (ii) artificial intelligence, including the generation or detection of digital impersonations. (c) Public workshop The Director shall— (1) convene not less than 1 public workshop to solicit input from stakeholders on the best practices and recommendations developed under subsection (b)(1); and (2) incorporate such input into the best practices and recommendations as the Director considers appropriate. (d) Publication of best practices and recommendations Not later than 1 year after the date of the enactment of this Act, the Director shall publish on a publicly accessible website of the National Institute of Standards and Technology a report that contains the best practices and recommendations developed pursuant to subsection (b)(1) and modified under subsection (c)(2). (e) Annual review and updates Not later than 2 years after the date of the enactment of this Act, and not less frequently than once each year thereafter, the Director shall— (1) review the best practices and recommendations developed under this section; and (2) update the best practices and recommendations published under subsection (d) as the Director considers appropriate pursuant to the most recent review conducted pursuant to paragraph (1) of this subsection. (f) Report to Congress Not later than 1 year after the date of the enactment of this Act, and annually thereafter, the Director shall submit to the appropriate committees of Congress a report that summarizes— (1) the meetings and collaboration of the Working Group during the year preceding the submission of the report; and (2) the work planned by the Working Group for the year following the submission of the report. (g) Sunset The requirements of this section shall terminate on the date that is 10 years after the date of the enactment of this Act.