The Director of National Intelligence shall direct each agency to implement a program to provide enhanced security review of covered individuals—

(1) in accordance with this section; and

not later than the earlier of—

(A) the date that is 5 years after the date of the enactment of the Intelligence Authorization Act for Fiscal Year 2016; or

(B) the date on which the backlog of overdue periodic reinvestigations of covered individuals is eliminated, as determined by the Director of National Intelligence.

Information obtained and integrated from sources described in paragraph (1) may include—

(1) Sources of information.— The enhanced personnel security program of an agency shall integrate relevant and appropriate information from various sources, including government, publicly available, and commercial data sources, consumer reporting agencies, social media, and such other sources as determined by the Director of National Intelligence.

Information obtained and integrated from sources described in paragraph (1) may include—

(A) information relating to any criminal or civil legal proceeding;

(B) financial information relating to the covered individual, including the credit worthiness of the covered individual;

(C) publicly available information, whether electronic, printed, or other form, including relevant security or counterintelligence information about the covered individual or information that may suggest ill intent, vulnerability to blackmail, compulsive behavior, allegiance to another country, change in ideology, or that the covered individual lacks good judgment, reliability, or trustworthiness; and

(D) data maintained on any terrorist or criminal watch list maintained by any agency, State or local government, or international organization.

The enhanced personnel security program of an agency shall require that, not less than 2 times every 5 years, the head of the agency shall conduct or request the conduct of automated record checks and checks of information from sources under subsection (b) to ensure the continued eligibility of each covered individual to access classified information and hold a sensitive position unless more frequent reviews of automated record checks and checks of information from sources under subsection (b) are conducted on the covered individual.

The enhanced personnel security program of an agency shall require that, not less than 2 times every 5 years, the head of the agency shall conduct or request the conduct of automated record checks and checks of information from sources under subsection (b) to ensure the continued eligibility of each covered individual to access classified information and hold a sensitive position unless more frequent reviews of automated record checks and checks of information from sources under subsection (b) are conducted on the covered individual.

(A) In general.— The enhanced personnel security program of an agency shall require that, not less than 2 times every 5 years, the head of the agency shall conduct or request the conduct of automated record checks and checks of information from sources under subsection (b) to ensure the continued eligibility of each covered individual to access classified information and hold a sensitive position unless more frequent reviews of automated record checks and checks of information from sources under subsection (b) are conducted on the covered individual.

(B) Scope of reviews.— Except for a covered individual who is subject to more frequent reviews to ensure the continued eligibility of the covered individual to access classified information and hold a sensitive position, the reviews under subparagraph (A) shall consist of random or aperiodic checks of covered individuals, such that each covered individual is subject to at least 2 reviews during the 5-year period beginning on the date on which the agency implements the enhanced personnel security program of an agency, and during each 5-year period thereafter.

(C) Individual reviews.— A review of the information relating to the continued eligibility of a covered individual to access classified information and hold a sensitive position under subparagraph (A) may not be conducted until after the end of the 120-day period beginning on the date the covered individual receives the notification required under paragraph (3).

(2) Results.— The head of an agency shall take appropriate action if a review under paragraph (1) finds relevant information that may affect the continued eligibility of a covered individual to access classified information and hold a sensitive position.

(3) Information for covered individuals.— The head of an agency shall ensure that each covered individual is adequately advised of the types of relevant security or counterintelligence information the covered individual is required to report to the head of the agency.

(4) Limitation.— Nothing in this subsection shall be construed to affect the authority of an agency to determine the appropriate weight to be given to information relating to a covered individual in evaluating the continued eligibility of the covered individual.

(5) Authority of the president.— Nothing in this subsection shall be construed as limiting the authority of the President to direct or perpetuate periodic reinvestigations of a more comprehensive nature or to delegate the authority to direct or perpetuate such reinvestigations.

(6) Effect on other reviews.— Reviews conducted under paragraph (1) are in addition to investigations and reinvestigations conducted pursuant to section 3001 of the Intelligence Reform and Terrorism Prevention Act of 2004 (50 U.S.C. 3341).

Beginning 2 years after the date of the implementation of the enhanced personnel security program of an agency under subsection (a), the Inspector General of the agency shall conduct at least 1 audit to assess the effectiveness and fairness, which shall be determined in accordance with performance measures and standards established by the Director of National Intelligence, to covered individuals of the enhanced personnel security program of the agency.

(1) In general.— Beginning 2 years after the date of the implementation of the enhanced personnel security program of an agency under subsection (a), the Inspector General of the agency shall conduct at least 1 audit to assess the effectiveness and fairness, which shall be determined in accordance with performance measures and standards established by the Director of National Intelligence, to covered individuals of the enhanced personnel security program of the agency.

(2) Submissions to dni.— The results of each audit conducted under paragraph (1) shall be submitted to the Director of National Intelligence to assess the effectiveness and fairness of the enhanced personnel security programs across the Federal Government.

In this section—

(1) the term “agency” has the meaning given that term in section 3001 of the Intelligence Reform and Terrorism Prevention Act of 2004 (50 U.S.C. 3341);

(2) the term “consumer reporting agency” has the meaning given that term in section 603 of the Fair Credit Reporting Act (15 U.S.C. 1681a);

(3) the term “covered individual” means an individual employed by an agency or a contractor of an agency who has been determined eligible for access to classified information or eligible to hold a sensitive position; [1]

(4) the term “enhanced personnel security program” means a program implemented by an agency at the direction of the Director of National Intelligence under subsection (a); and [2]

(Added Pub. L. 114–113, div. M, title III, § 306(a)(1), Dec. 18, 2015, 129 Stat. 2914.)