{
  "legislationId": "119_S_4230",
  "lastUpdate": "2026-04-13T14:58:26.763Z",
  "history": [
    {
      "timestamp": "2026-04-13T14:58:26.763Z",
      "source_url": "https://www.congress.gov/119/bills/s4230/BILLS-119s4230is.htm",
      "model": "gemini-flash-lite-latest",
      "prompt_sent": "\nROLE: Fact Checker.\nZADANIE: Porównaj SOURCE (oryginał) i SUMMARY (streszczenie przygotowane przez inne AI).\n\nTwoim celem jest wykrycie \"ZMYŚLONYCH KONKRETÓW\" (Fabricated Entities) w SUMMARY.\n\nSOURCE:\n[Congressional Bills 119th Congress] [From the U.S. Government Publishing Office] [S. 4230 Introduced in Senate (IS)] <DOC> 119th CONGRESS 2d Session S. 4230 To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. _______________________________________________________________________ IN THE SENATE OF THE UNITED STATES March 26, 2026 Ms. Hassan (for herself and Mrs. Blackburn) introduced the following bill; which was read twice and referred to the Select Committee on Intelligence _______________________________________________________________________ A BILL To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ``Protecting Stolen Encrypted Data Act of 2026''. SEC. 2. ADDRESSING STOLEN SENSITIVE DATA. (a) Definitions.--In this section: (1) Classified information.--The term ``classified information'' has the meaning given such term in section 805 of the National Security Act of 1947 (50 U.S.C. 3164). (2) Covered data.--The term ``covered data'' means includes the following: (A) Financial, medical, and biometric data of United States persons. (B) Intellectual property of United States persons. (C) Trade secrets of United States persons. (3) United states person.--The term ``United States person'' has the meaning given such term in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801). (b) Addressing Stolen Sensitive Data.-- (1) Strategies to identify.--The President shall, acting through the Secretary of Defense and the Director of National Intelligence, develop strategies to identify-- (A) covered data and classified information unlawfully held by foreign entities; (B) whether such data and information were encrypted; and (C) whether such data and information have been decrypted by such foreign entities. (2) Strategies to address.--The President shall, acting through the Secretary of Defense and the Director of National Intelligence, develop strategies regarding how to address stolen covered data and classified information. (3) Destruction, manipulation, or recovery.-- (A) Determination of economic and national security interest.--The Secretary and the Director shall jointly determine whether the destruction, manipulation, or recovery of covered data and classified information identified pursuant to the strategies developed under paragraph (1) would be in the economic and national security interest of the United States. (B) Destruction, manipulation, or recovery.--In a case in which the Secretary and the Director jointly determine under subparagraph (A) that destroying, manipulating, or recovering covered data or classified information is in the economic and national security interested of the United States, the Secretary and the Director may jointly-- (i) pursuant to strategies required by paragraph (1), identify encrypted covered data and classified information that is unlawfully held by a foreign entity that has not been decrypted by the foreign entity; (ii) pursuant to the strategies required by paragraph (2), attempt to destroy, manipulate, or recover the data and information identified pursuant to clause (i); and (iii) when practicable, inform the lawful owners of covered data or classified information-- (I) of the intent of the Secretary or the Director, as the case may be, to destroy, manipulate, or recover the covered data or classified information; and (II) upon successful destruction, manipulation, or recovery of the covered data or classified information. (c) Report.-- (1) In general.--Not later than 1 year after the date of the enactment of this Act, the Secretary and the Director shall jointly submit to Congress a report on the strategies developed under paragraphs (1) and (2) of subsection (c) and the actions taken under paragraph (3) of such subsection. (2) Recommendations.--The report submitted pursuant to paragraph (1) shall include such recommendations as the Secretary and the Director may have for legislative or administrative action to carry out subsection (c). (3) Form.--The report submitted pursuant to paragraph (1) shall be submitted in unclassified form, but may include a classified annex. <all>\n\nSUMMARY TO EVALUATE:\nTitle: Protecting Stolen Encrypted Data Act of 2026\nSummary: This law empowers the government to track and recover personal data like medical or financial records stolen by foreign entities. It aims to protect citizens' sensitive information from being used against them by foreign governments or hackers.\nKey Points: Identifying stolen personal, financial, and biometric data held by foreign entities., Strategies to destroy, manipulate, or recover stolen data to protect national and economic security., Notifying citizens when the government acts to secure or recover their stolen information.\n\nZASADY OCENY:\n1. Sprawdź wszystkie LICZBY, DATY i KWOTY w SUMMARY. Jeśli którejś brakuje w SOURCE -> is_valid: false.\n2. Sprawdź wszystkie NAZWISKA, ORGANIZACJE i MIEJSCA w SUMMARY. Jeśli którejś brakuje w SOURCE -> is_valid: false.\n3. Sprawdź wszystkie konkretne DZIAŁANIA PRAWNE . Jeśli tego mechanizmu nie ma w SOURCE -> is_valid: false.\n\nWAŻNE: Abstrakcyjne pojęcia (np. \"transparentność\", \"zaufanie\") są dozwolone jako wnioski.\n\nOUTPUT (JSON):\n{\n  \"is_valid\": true/false,\n  \"issue\": \"fabricated_entity\" / \"contradiction\" / \"none\"\n}\n\nWYMAGANIA FORMATOWANIA:\n1. Odpowiedz WYŁĄCZNIE surowym obiektem JSON.\n2. NIE używaj bloków kodu Markdown.\n3. NIE dodawaj żadnych wstępów ani wyjaśnień przed ani po JSONie.\n4. JSON musi być poprawny i gotowy do parsowania.\n\n",
      "ai_response_raw": "{\n  \"is_valid\": true,\n  \"issue\": \"none\"\n}"
    },
    {
      "timestamp": "2026-04-13T14:25:35.208Z",
      "source_url": "https://www.congress.gov/119/bills/s4230/BILLS-119s4230is.htm",
      "model": "gemini-flash-latest",
      "prompt_sent": "\nJesteś ekspertem od prawa Stanów Zjednoczonych, który ma za zadanie analizować dokumenty ustaw, uchwał oraz innych dokumentów legislacyjnych, a następnie przygotowywać z nich informacje w przystępny sposób dla obywateli. Twoim celem jest przedstawienie informacji tak, aby obywatele mogli sami ocenić wpływ legislacji na ich życie, nawet bez posiadania specjalistycznej wiedzy legislacyjnej. Skup się na faktach i obiektywnych skutkach wprowadzanych zmian, unikając wartościowania i osobistych opinii. Wszelki żargon prawny jest zabroniony. Prezentuj informacje w jasny, zwięzły i angażujący sposób, tak aby były zrozumiałe dla osoby bez wykształcenia prawniczego. Unikaj długich, złożonych zdań. Zamiast pisać \"projekt ma na celu nowelizację kodeksu podatkowego...\", napisz \"Zmiany w podatkach: nowe ulgi i obowiązki dla...\". Kontynuuj swoją pracę, dopóki nie rozwiążesz swojego zadania. Jeśli nie masz pewności co do generowanej treści, przeanalizuj dokument ponownie – nie zgaduj. Rozplanuj dobrze swoje zadanie przed przystąpieniem do niego. W podsumowaniu i kluczowych punktach, jeśli to możliwe i uzasadnione, podkreśl, jakie konkretne korzyści lub skutki (pozytywne lub negatywne) wprowadza ustawa dla życia codziennego obywateli, ich praw i obowiązków, finansów osobistych, bezpieczeństwa i innych ważnych kwestii (np. kategorycznych zakazów i nakazów czy najważniejszych konkretnych alokacji finansowych i terytorialnych).\n\nTwoja odpowiedź MUSI być w formacie JSON - i zawierać następujące klucze.\nZanim zwrócisz odpowiedź, dokładnie zweryfikuj, czy cała struktura JSON jest w 100% poprawna, włącznie ze wszystkimi przecinkami, nawiasami klamrowymi, kwadratowymi oraz cudzysłowami. Błędny JSON jest nieakceptowalny i uniemożliwi przetworzenie Twojej pracy.\n\nPrzeanalizuj dokładnie poniższy tekst dokumentu prawnego. To jest treść, na podstawie której masz wygenerować podsumowanie i kluczowe punkty:\n--- POCZĄTEK DOKUMENTU ---\n[Congressional Bills 119th Congress] [From the U.S. Government Publishing Office] [S. 4230 Introduced in Senate (IS)] <DOC> 119th CONGRESS 2d Session S. 4230 To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. _______________________________________________________________________ IN THE SENATE OF THE UNITED STATES March 26, 2026 Ms. Hassan (for herself and Mrs. Blackburn) introduced the following bill; which was read twice and referred to the Select Committee on Intelligence _______________________________________________________________________ A BILL To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ``Protecting Stolen Encrypted Data Act of 2026''. SEC. 2. ADDRESSING STOLEN SENSITIVE DATA. (a) Definitions.--In this section: (1) Classified information.--The term ``classified information'' has the meaning given such term in section 805 of the National Security Act of 1947 (50 U.S.C. 3164). (2) Covered data.--The term ``covered data'' means includes the following: (A) Financial, medical, and biometric data of United States persons. (B) Intellectual property of United States persons. (C) Trade secrets of United States persons. (3) United states person.--The term ``United States person'' has the meaning given such term in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801). (b) Addressing Stolen Sensitive Data.-- (1) Strategies to identify.--The President shall, acting through the Secretary of Defense and the Director of National Intelligence, develop strategies to identify-- (A) covered data and classified information unlawfully held by foreign entities; (B) whether such data and information were encrypted; and (C) whether such data and information have been decrypted by such foreign entities. (2) Strategies to address.--The President shall, acting through the Secretary of Defense and the Director of National Intelligence, develop strategies regarding how to address stolen covered data and classified information. (3) Destruction, manipulation, or recovery.-- (A) Determination of economic and national security interest.--The Secretary and the Director shall jointly determine whether the destruction, manipulation, or recovery of covered data and classified information identified pursuant to the strategies developed under paragraph (1) would be in the economic and national security interest of the United States. (B) Destruction, manipulation, or recovery.--In a case in which the Secretary and the Director jointly determine under subparagraph (A) that destroying, manipulating, or recovering covered data or classified information is in the economic and national security interested of the United States, the Secretary and the Director may jointly-- (i) pursuant to strategies required by paragraph (1), identify encrypted covered data and classified information that is unlawfully held by a foreign entity that has not been decrypted by the foreign entity; (ii) pursuant to the strategies required by paragraph (2), attempt to destroy, manipulate, or recover the data and information identified pursuant to clause (i); and (iii) when practicable, inform the lawful owners of covered data or classified information-- (I) of the intent of the Secretary or the Director, as the case may be, to destroy, manipulate, or recover the covered data or classified information; and (II) upon successful destruction, manipulation, or recovery of the covered data or classified information. (c) Report.-- (1) In general.--Not later than 1 year after the date of the enactment of this Act, the Secretary and the Director shall jointly submit to Congress a report on the strategies developed under paragraphs (1) and (2) of subsection (c) and the actions taken under paragraph (3) of such subsection. (2) Recommendations.--The report submitted pursuant to paragraph (1) shall include such recommendations as the Secretary and the Director may have for legislative or administrative action to carry out subsection (c). (3) Form.--The report submitted pursuant to paragraph (1) shall be submitted in unclassified form, but may include a classified annex. <all>\n--- KONIEC DOKUMENTU ---\n\nPAMIĘTAJ: Twoja odpowiedź MUSI być wyłącznie poprawnym obiektem JSON. Nie dodawaj żadnych dodatkowych znaków, komentarzy ani tekstu przed znacznikiem '{' ani po znaczniku '}'. Cała odpowiedź musi być parsowalna jako JSON.\nNa podstawie POWYŻSZEGO dokumentu, wypełnij poniższą strukturę JSON:\nOto struktura JSON, której oczekuję (wypełnij ją treścią):\n{\n  \"pl_ai_title\": \"Nowy, krótki tytuł dla aktu prawnego po polsku, oddający sedno wprowadzanych zmian (np. maksymalnie 10-12 słów).\",\n  \"pl_summary\": \"2-3 zdania zwięzłego podsumowania treści aktu prawnego po polsku, napisane z perspektywy wpływu na życie codzienne obywateli.\",\n  \"pl_key_points\": [\n    \"Pierwszy krótki punkt po polsku dotyczący najważniejszych wprowadzanych rozwiązań lub zmian.\",\n    \"Drugi krótki punkt po polsku...\"\n  ],\n  \"eng_ai_title\": \"A new, short title for the legal act in English, capturing the essence of the changes (e.g., max 10-12 words).\",\n  \"eng_summary\": \"2-3 sentences summarizing the legal act in English, from the perspective of its impact on citizens' daily lives.\",\n  \"eng_key_points\": [\n    \"First short bullet point in English regarding the most important solutions or changes being introduced.\",\n    \"Second short bullet point in English...\"\n  ],\n  \"de_ai_title\": \"Ein neuer, kurzer Titel für das Rechtsdokument auf Deutsch, der den Kern der Änderungen erfasst (z.B. max. 10-12 Wörter).\",\n  \"de_summary\": \"2-3 Sätze Zusammenfassung des Rechtsdokuments auf Deutsch, aus der Perspektive seiner Auswirkungen auf das tägliche Leben der Bürger.\",\n  \"de_key_points\": [\n    \"Erster kurzer Stichpunkt auf Deutsch zu den wichtigsten eingeführten Lösungen oder Änderungen.\",\n    \"Zweiter kurzer Stichpunkt auf Deutsch...\"\n  ],\n  \"fr_ai_title\": \"Un nouveau titre court pour l'acte juridique en français, saisissant l'essence des changements (par exemple, 10-12 mots maximum).\",\n  \"fr_summary\": \"Résumé de 2-3 phrases de l'acte juridique en français, du point de vue de son impact sur la vie quotidienne des citoyens.\",\n  \"fr_key_points\": [\n    \"Premier court point en français concernant les solutions ou changements les plus importants introduits.\",\n    \"Deuxième court point en français...\"\n  ],\n  \"es_ai_title\": \"Un nuevo título breve para el acto jurídico en español, que recoja la esencia de los cambios (por ejemplo, máximo 10-12 palabras).\",\n  \"es_summary\": \"Resumen de 2-3 frases del acto jurídico en español, desde la perspectiva de su impacto en la vida cotidiana de los ciudadanos.\",\n  \"es_key_points\": [\n    \"Primer punto breve en español sobre las soluciones o cambios más importantes que se introducen.\",\n    \"Segundo punto breve en español...\"\n  ],\n  \"it_ai_title\": \"Un nuovo titolo breve per l'atto giuridico in italiano, che colga l'essenza delle modifiche (ad es. massimo 10-12 parole).\",\n  \"it_summary\": \"Riepilogo di 2-3 frasi dell'atto giuridico in italiano, dal punto di vista del suo impatto sulla vita quotidiana dei cittadini.\",\n  \"it_key_points\": [\n    \"Primo breve punto in italiano riguardante le soluzioni o le modifiche più importanti introdotte.\",\n    \"Secondo breve punto in italiano...\"\n  ],\n  \"nl_ai_title\": \"Een nieuwe, korte titel voor de rechtshandeling in het Nederlands, die de essentie van de wijzigingen weergeeft (bijv. max. 10-12 woorden).\",\n  \"nl_summary\": \"Samenvatting van 2-3 zinnen van de rechtshandeling in het Nederlands, vanuit het perspectief van de impact op het dagelijks leven van burgers.\",\n  \"nl_key_points\": [\n    \"Eerste korte punt in het Nederlands betreffende de belangrijkste geïntroduceerde oplossingen of wijzigingen.\",\n    \"Tweede korte punt in het Nederlands...\"\n  ],\n  \"pt_ai_title\": \"Um novo título curto para o ato jurídico em português, capturando a essência das mudanças (por exemplo, máx. 10-12 palavras).\",\n  \"pt_summary\": \"Resumo de 2-3 frases do ato jurídico em português, na perspetiva do seu impacto na vida quotidiana dos cidadãos.\",\n  \"pt_key_points\": [\n    \"Primeiro ponto curto em português sobre as soluções ou alterações mais importantes introduzidas.\",\n    \"Segundo ponto curto em português...\"\n  ],\n  \"category\": [\"Categorize the document into one category by default, based on the field it primarily concerns. Choose up to 3 if the document also touches upon SIGNIFICANT issues from other categories. You MUST select categories ONLY from the following list: Health, Education, Family, Taxes, Labor, Security, Environment, Courts and Law, Transport, Benefits, Real Estate, Media and Culture, Local Government, Migration, Agriculture, Public Investments, Informatization, Economy. If the document does not definitively fit any of these, you MUST use \"Other\". If you use \"Other\", it should be the ONLY category selected. Do NOT invent new categories. The response must be an array of strings, e.g., [\"Taxes\", \"Family\"].\"]\n}\n\n",
      "ai_response_raw": "{\n  \"pl_ai_title\": \"Ustawa o ochronie skradzionych zaszyfrowanych danych z 2026 roku\",\n  \"pl_summary\": \"Rząd USA zyska nowe narzędzia do odnajdywania i odzyskiwania lub niszczenia danych medycznych i finansowych obywateli skradzionych przez obce państwa. Zmiany mają na celu lepszą ochronę prywatności i bezpieczeństwa ekonomicznego Amerykanów przed zagranicznymi hakerami.\",\n  \"pl_key_points\": [\n    \"Identyfikacja skradzionych danych medycznych, finansowych i biometrycznych przetrzymywanych za granicą.\",\n    \"Możliwość zdalnego niszczenia, modyfikowania lub odzyskiwania danych przez służby w celu ochrony bezpieczeństwa narodowego.\",\n    \"Obowiązek informowania właścicieli danych o działaniach rządu podjętych w celu zabezpieczenia ich informacji.\"\n  ],\n  \"eng_ai_title\": \"Protecting Stolen Encrypted Data Act of 2026\",\n  \"eng_summary\": \"This law empowers the government to track and recover personal data like medical or financial records stolen by foreign entities. It aims to protect citizens' sensitive information from being used against them by foreign governments or hackers.\",\n  \"eng_key_points\": [\n    \"Identifying stolen personal, financial, and biometric data held by foreign entities.\",\n    \"Strategies to destroy, manipulate, or recover stolen data to protect national and economic security.\",\n    \"Notifying citizens when the government acts to secure or recover their stolen information.\"\n  ],\n  \"de_ai_title\": \"Gesetz zum Schutz gestohlener verschlüsselter Daten von 2026\",\n  \"de_summary\": \"Die US-Regierung wird ermächtigt, gestohlene medizinische und finanzielle Daten von Bürgern im Ausland aufzuspüren und unschädlich zu machen. Dies dient dem Schutz der Privatsphäre und der wirtschaftlichen Sicherheit vor ausländischen Bedrohungen.\",\n  \"de_key_points\": [\n    \"Identifizierung gestohlener biometrischer und finanzieller Daten in ausländischem Besitz.\",\n    \"Befugnis zur Zerstörung oder Rückgewinnung von Daten zum Schutz der nationalen Sicherheit.\",\n    \"Benachrichtigung der betroffenen Bürger über Schutzmaßnahmen der Regierung bezüglich ihrer Daten.\"\n  ],\n  \"fr_ai_title\": \"Loi de 2026 sur la protection des données cryptées volées\",\n  \"fr_summary\": \"Le gouvernement américain pourra désormais identifier et neutraliser les données personnelles volées par des entités étrangères. L'objectif est de mieux protéger les informations médicales et financières des citoyens contre l'espionnage international.\",\n  \"fr_key_points\": [\n    \"Identification des données biométriques et financières détenues illégalement à l'étranger.\",\n    \"Possibilité de détruire ou de récupérer les données pour protéger la sécurité nationale et économique.\",\n    \"Information des propriétaires légaux sur les mesures de protection prises par l'État pour leurs données.\"\n  ],\n  \"es_ai_title\": \"Ley de Protección de Datos Encriptados Robados de 2026\",\n  \"es_summary\": \"El gobierno de EE. UU. tendrá nuevas facultades para localizar y recuperar datos médicos o financieros robados por entidades extranjeras. Estas medidas buscan salvaguardar la privacidad y el bienestar económico de los ciudadanos frente a ciberataques externos.\",\n  \"es_key_points\": [\n    \"Identificación de datos biométricos y financieros robados en manos de entidades extranjeras.\",\n    \"Estrategias para destruir o recuperar información sensible para proteger el interés nacional.\",\n    \"Notificación a los ciudadanos cuando el gobierno actúe para proteger o recuperar sus datos robados.\"\n  ],\n  \"it_ai_title\": \"Legge del 2026 sulla protezione dei dati criptati rubati\",\n  \"it_summary\": \"Il governo degli Stati Uniti potrà individuare e intervenire sui dati personali e finanziari dei cittadini sottratti da entità straniere. L'iniziativa mira a rafforzare la sicurezza digitale e la protezione della privacy individuale a livello internazionale.\",\n  \"it_key_points\": [\n    \"Individuazione di dati biometrici e finanziari rubati detenuti illegalmente all'estero.\",\n    \"Azioni per distruggere o recuperare informazioni sensibili per tutelare la sicurezza nazionale.\",\n    \"Comunicazione ai cittadini riguardo agli interventi governativi effettuati per proteggere i loro dati.\"\n  ],\n  \"nl_ai_title\": \"Wet op de bescherming van gestolen versleutelde gegevens van 2026\",\n  \"nl_summary\": \"De Amerikaanse overheid krijgt bevoegdheden om gestolen medische en financiële gegevens van burgers in het buitenland op te sporen en te herstellen. Dit moet de persoonlijke privacy en economische veiligheid van burgers beter beschermen tegen buitenlandse hackers.\",\n  \"nl_key_points\": [\n    \"Identificatie van gestolen biometrische en financiële gegevens in buitenlandse handen.\",\n    \"Mogelijkheid om gestolen data te vernietigen of terug te halen ter bescherming van de nationale veiligheid.\",\n    \"Informeren van burgers wanneer de overheid actie onderneemt om hun gestolen data te beveiligen.\"\n  ],\n  \"pt_ai_title\": \"Lei de Proteção de Dados Criptografados Roubados de 2026\",\n  \"pt_summary\": \"O governo dos EUA terá novas ferramentas para localizar e recuperar dados médicos ou financeiros de cidadãos roubados por entidades estrangeiras. O objetivo é aumentar a segurança da informação e proteger a privacidade contra ameaças externas.\",\n  \"pt_key_points\": [\n    \"Identificação de dados biométricos e financeiros roubados detidos por entidades estrangeiras.\",\n    \"Estrategias para destruir ou recuperar informações sensíveis em prol da segurança nacional e económica.\",\n    \"Notificação dos proprietários legais sobre as ações do governo para proteger ou recuperar seus dados.\"\n  ],\n  \"category\": [\n    \"Security\",\n    \"Informatization\",\n    \"Economy\"\n  ]\n}"
    }
  ]
}