H.R. 10568: Protecting Biological Data as Critical Infrastructure Act

This bill would direct the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) to treat certain genetic and sensitive biometric data systems as part of the nation’s critical infrastructure.

What would change

• CISA would be specifically responsible for overseeing the security management of systems that handle genetic data, including genomic sequence data, and other sensitive biometric data.
• The agency would need to make sure it has enough staff to carry out this work.
• CISA would be required to train relevant federal personnel on how to protect these kinds of data systems, including the special security and ethical issues involved.
• CISA would be authorized to take actions needed to protect biological data and critical biotechnology infrastructure.

How the bill defines the role of CISA

• The bill would add “genetic data systems” involving genomic sequences and other sensitive biometric data to the kinds of systems CISA treats as critical infrastructure.
• CISA would also be told to consult with U.S. biotechnology companies and other relevant federal agencies to develop security protocols for these systems.
• CISA would be expected to work with these stakeholders to address new security issues, including situations where digital genetic information is connected to physical biological samples.
• The bill would require CISA to provide a secure way for biotechnology stakeholders to contact the agency to report concerns, incidents, or ask for technical help.

Other federal changes

• The Homeland Security Act would be updated to add “genetic and biometric data security” as one of the topics CISA is responsible for.

Relevant Companies

• ILMN — Illumina could be affected because it develops DNA sequencing technology and handles systems related to genomic data.
• TMO — Thermo Fisher Scientific could be affected through its genetic testing, laboratory, and biotechnology products and services.
• DHR — Danaher could be affected through its life sciences and biotech businesses that work with genetic data and related systems.
• RHHBY — Roche could be affected through its diagnostics and genomic testing operations.
• NTRA — Natera could be affected because it offers genetic testing services that rely on sensitive biometric and genomic data.