Better Cybercrime Metrics Act (S. 2629)

Summary

Creates new ways for the government to collect, categorize, and study data about computer-related crimes to better understand and fight them.

What problem does this solve?

The U.S. does not have good data about how often cybercrime happens, which makes it hard to protect people and the country's security. This law requires federal agencies to create better systems for tracking and reporting different types of cybercrime.

What does this law do?

Creates a new system for classifying cybercrime

Directs the Attorney General to work with the National Academy of Sciences to create a clear way to categorize different types of cybercrime. This will help standardize how these crimes are reported.

Updates the national crime reporting system

Requires the Attorney General to add a new category for cybercrime to the National Incident-Based Reporting System, which is used by law enforcement agencies across the country.

Adds cybercrime to a national survey

Requires the Bureau of Justice Statistics to include questions about being a victim of cybercrime in the National Crime Victimization Survey.

Studies how well cybercrime is reported

Orders the Government Accountability Office (GAO) to study how effective current cybercrime reporting is and identify any differences between how cybercrime and other crimes are reported.

Authorizes funding for new initiatives

Approves $1,000,000 for developing the cybercrime classification system and $2,000,000 for updating the National Crime Victimization Survey.

Who does this affect?

Federal law enforcement agencies
State and local law enforcement
Government statisticians and researchers

What is the real world impact?

•

Provides a clearer picture of cybercrime

Gathers better data to understand the true scale of cybercrime in the United States. Without accurate metrics, lawmakers and law enforcement cannot effectively create strategies or assign resources to combat the problem.

When does this start?

This law sets several deadlines for different government agencies to complete their tasks over the next two years.

GAO report on cybercrime metrics

Within 180 days, the Comptroller General must submit a report to Congress assessing cybercrime reporting mechanisms.

Update to National Crime Victimization Survey

Within 540 days, the Bureau of Justice Statistics must include questions about cybercrime in its national survey.

Update to national crime reporting system

Within 2 years, the Attorney General must create a new category for cybercrime in the National Incident-Based Reporting System.

Agreement on cybercrime taxonomy

Within 90 days, the Attorney General must seek an agreement with the National Academy of Sciences to develop a cybercrime classification system.

Report on cybercrime taxonomy

Within 1 year of making an agreement, the National Academy of Sciences must report its new cybercrime classification system to Congress.