This bill, titled the "Cyber Letters of Marque and Reprisal Act," grants the President the authority to issue cyber letters of marque and reprisal . These commissions empower private persons and entities to conduct limited cyberspace operations against designated foreign cyberthreats responsible for attacks against U.S. persons or assets. The legislation is rooted in the constitutional power of Congress to grant letters of marque and reprisal, aiming to address the significant financial losses Americans face from crypto-enabled scams, fraud, and ransomware. The primary purposes include deterring and disrupting cyber command and control structures, providing compensation for successful private action, and facilitating the return of stolen funds to victims of cyber-enabled crime. Authorized cyber operations can encompass intelligence collection, data recovery, asset seizure (including digital assets), disruption of malicious infrastructure, and limited offensive actions using malware. Recipients of these letters must post a security bond, are prohibited from targeting U.S. citizens or entities, and are granted protection from liability for expressly authorized acts. The bill also establishes financial mechanisms, allowing up to 15 percent of recovered assets to fund a bounty program for future operations, with remaining funds deposited into the Crime Victims Fund. It also permits rewards for individuals providing information leading to asset recovery, even without a letter of marque. The President is tasked with issuing guidance on the requirements and qualifications for receiving these cyber letters.
This bill, titled the "Cyber Letters of Marque and Reprisal Act," grants the President the authority to issue cyber letters of marque and reprisal . These commissions empower private persons and entities to conduct limited cyberspace operations against designated foreign cyberthreats responsible for attacks against U.S. persons or assets. The legislation is rooted in the constitutional power of Congress to grant letters of marque and reprisal, aiming to address the significant financial losses Americans face from crypto-enabled scams, fraud, and ransomware. The primary purposes include deterring and disrupting cyber command and control structures, providing compensation for successful private action, and facilitating the return of stolen funds to victims of cyber-enabled crime. Authorized cyber operations can encompass intelligence collection, data recovery, asset seizure (including digital assets), disruption of malicious infrastructure, and limited offensive actions using malware. Recipients of these letters must post a security bond, are prohibited from targeting U.S. citizens or entities, and are granted protection from liability for expressly authorized acts. The bill also establishes financial mechanisms, allowing up to 15 percent of recovered assets to fund a bounty program for future operations, with remaining funds deposited into the Crime Victims Fund. It also permits rewards for individuals providing information leading to asset recovery, even without a letter of marque. The President is tasked with issuing guidance on the requirements and qualifications for receiving these cyber letters.