(a) Establishment of National Institute of Standards and Technology
There is established within the Department of Commerce a science, engineering, technology, and measurement laboratory to be known as the National Institute of Standards and Technology (hereafter in this chapter referred to as the "Institute").
(b) Functions of Secretary and Institute
The Secretary of Commerce (hereafter in this chapter referred to as the "Secretary") acting through the Director of the Institute (hereafter in this chapter referred to as the "Director") is authorized to serve as the President's principal adviser on standards policy pertaining to the Nation's technological competitiveness and innovation ability and to take all actions necessary and appropriate to accomplish the purposes of this chapter, including the following functions of the Institute—
(1) to assist industry in the development of technology and procedures needed to improve quality, to modernize manufacturing processes, to ensure product reliability, manufacturability, functionality, and cost-effectiveness, and to facilitate the more rapid commercialization, especially by small- and medium-sized companies throughout the United States, of products based on new scientific discoveries in fields such as automation, electronics, advanced materials, biotechnology, and optical technologies;
(2) to develop, maintain, and retain custody of the national standards of measurement, and provide the means and methods for making measurements consistent with those standards;
(3) to facilitate standards-related information sharing and cooperation between Federal agencies and to coordinate the use by Federal agencies of private sector standards, emphasizing where possible the use of standards developed by private, consensus organizations;
(4) to enter into contracts, including cooperative research and development arrangements, and grants and cooperative agreements, in furtherance of the purposes of this chapter;
(5) to provide United States industry, Government, and educational institutions with a national clearinghouse of current information, techniques, and advice for the achievement of higher quality and productivity based on current domestic and international scientific and technical development;
(6) to assist industry in the development of measurements, measurement methods, and basic measurement technology;
(7) to determine, compile, evaluate, and disseminate physical constants and the properties and performance of conventional and advanced materials when they are important to science, engineering, manufacturing, education, commerce, and industry and are not available with sufficient accuracy elsewhere;
(8) to develop a fundamental basis and methods for testing materials, mechanisms, structures, equipment, and systems, including those used by the Federal Government;
(9) to assure the compatibility of United States national measurement standards with those of other nations;
(10) to cooperate with other departments and agencies of the Federal Government, with industry, with State and local governments, with the governments of other nations and international organizations, and with private organizations in establishing standard practices, codes, specifications, and voluntary consensus standards;
(11) to advise government and industry on scientific and technical problems;
(12) to invent, develop, and (when appropriate) promote transfer to the private sector of measurement devices to serve special national needs; and
(13) to coordinate technical standards activities and conformity assessment activities of Federal, State, and local governments with private sector technical standards activities and conformity assessment activities, with the goal of eliminating unnecessary duplication and complexity in the development and promulgation of conformity assessment requirements and measures.
(c) Implementation activities
In carrying out the functions specified in subsection (b), the Secretary, acting through the Director 1 may, among other things—
(1) construct physical standards;
(2) test, calibrate, and certify standards and standard measuring apparatus;
(3) study and improve instruments, measurement methods, and industrial process control and quality assurance techniques;
(4) cooperate with the States in securing uniformity in weights and measures laws and methods of inspection;
(5) cooperate with foreign scientific and technical institutions to understand technological developments in other countries better;
(6) prepare, certify, and sell standard reference materials for use in ensuring the accuracy of chemical analyses and measurements of physical and other properties of materials;
(7) in furtherance of the purposes of this chapter, accept research associates, cash donations, and donated equipment from industry, and also engage with industry in research to develop new basic and generic technologies for traditional and new products and for improved production and manufacturing;
(8) study and develop fundamental scientific understanding and improved measurement, analysis, synthesis, processing, and fabrication methods for chemical substances and compounds, ferrous and nonferrous metals, and all traditional and advanced materials, including processes of degradation;
(9) investigate ionizing and nonionizing radiation and radioactive substances, their uses, and ways to protect people, structures, and equipment from their harmful effects;
(10) determine the atomic and molecular structure of matter, through analysis of spectra and other methods, to provide a basis for predicting chemical and physical structures and reactions and for designing new materials and chemical substances, including biologically active macromolecules;
(11) perform research on electromagnetic waves, including optical waves, and on properties and performance of electrical, electronic, and electromagnetic devices and systems and their essential materials, develop and maintain related standards, and disseminate standard signals through broadcast and other means;
(12) develop and test standard interfaces, communication protocols, and data structures for computer and related telecommunications systems;
(13) study computer systems (as that term is defined in section 278g–3(d) 2 of this title) and their use to control machinery and processes;
(14) perform research to develop standards and test methods to advance the effective use of computers and related systems and to protect the information stored, processed, and transmitted by such systems and to provide advice in support of policies affecting Federal computer and related telecommunications systems;
(15) on an ongoing basis, facilitate and support the development of a voluntary, consensus-based, industry-led set of standards, guidelines, best practices, methodologies, procedures, and processes to cost-effectively reduce cyber risks to critical infrastructure (as defined under subsection (e));
(16) perform research to support the development of voluntary, consensus-based, industry-led standards and recommendations on the security of computers, computer networks, and computer data storage used in election systems to ensure voters can vote securely and privately.3
(17) determine properties of building materials and structural elements, and encourage their standardization and most effective use, including investigation of fire-resisting properties of building materials and conditions under which they may be most efficiently used, and the standardization of types of appliances for fire prevention;
(18) undertake such research in engineering, pure and applied mathematics, statistics, computer science, materials science, and the physical sciences as may be necessary to carry out and support the functions specified in this section;
(19) host, participate in, and support scientific and technical workshops (as defined in section 202 of the American Innovation and Competitiveness Act);
(20) collect and retain any fees charged by the Secretary for hosting a scientific and technical workshop described in paragraph (19);
(21) notwithstanding title 31 of the United States Code, use the fees described in paragraph (20) to pay for any related expenses, including subsistence expenses for participants;
(22) compile, evaluate, publish, and otherwise disseminate general, specific and technical data resulting from the performance of the functions specified in this section or from other sources when such data are important to science, engineering, or industry, or to the general public, and are not available elsewhere;
(23) collect, create, analyze, and maintain specimens of scientific value;
(24) operate national user facilities;
(25) evaluate promising inventions and other novel technical concepts submitted by inventors and small companies and work with other Federal agencies, States, and localities to provide appropriate technical assistance and support for those inventions which are found in the evaluation process to have commercial promise;
(26) demonstrate the results of the Institute's activities by exhibits or other methods of technology transfer, including the use of scientific or technical personnel of the Institute for part-time or intermittent teaching and training activities at educational institutions of higher learning as part of and incidental to their official duties; and
(27) undertake such other activities similar to those specified in this subsection as the Director determines appropriate.
(d) Management costs
In carrying out the extramural funding programs of the Institute, including the programs established under sections 278k and 278l of this title, the Secretary may retain reasonable amounts of any funds appropriated pursuant to authorizations for these programs in order to pay for the Institute's management of these programs.
(e) Cyber risks
(1) In general
In carrying out the activities under subsection (c)(15), the Director—
(A) shall—
(i) coordinate closely and regularly with relevant private sector personnel and entities, critical infrastructure owners and operators, and other relevant industry organizations, including Sector Coordinating Councils and Information Sharing and Analysis Centers, and incorporate industry expertise;
(ii) consult with the heads of agencies with national security responsibilities, sector-specific agencies and other appropriate agencies, State and local governments, the governments of other nations, and international organizations;
(iii) identify a prioritized, flexible, repeatable, performance-based, and cost-effective approach, including information security measures and controls, that may be voluntarily adopted by owners and operators of critical infrastructure to help them identify, assess, and manage cyber risks;
(iv) include methodologies—
(I) to identify and mitigate impacts of the cybersecurity measures or controls on business confidentiality; and
(II) to protect individual privacy and civil liberties;
(v) incorporate voluntary consensus standards and industry best practices;
(vi) align with voluntary international standards to the fullest extent possible;
(vii) prevent duplication of regulatory processes and prevent conflict with or superseding of regulatory requirements, mandatory standards, and related processes;
(viii) consider small business concerns (as defined in section 632 of this title); and
(ix) include such other similar and consistent elements as the Director considers necessary; and
(B) shall not prescribe or otherwise require—
(i) the use of specific solutions;
(ii) the use of specific information or communications technology products or services; or
(iii) that information or communications technology products or services be designed, developed, or manufactured in a particular manner.
(2) Limitation
Information shared with or provided to the Institute for the purpose of the activities described under subsection (c)(15) shall not be used by any Federal, State, tribal, or local department or agency to regulate the activity of any entity. Nothing in this paragraph shall be construed to modify any regulatory requirement to report or submit information to a Federal, State, tribal, or local department or agency.
(3) Definitions
In this subsection:
(A) Critical infrastructure
The term "critical infrastructure" has the meaning given the term in section 5195c(e) of title 42.
(B) Sector-specific agency
The term "sector-specific agency" means the Federal department or agency responsible for providing institutional knowledge and specialized expertise as well as leading, facilitating, or supporting the security and resilience programs and associated activities of its designated critical infrastructure sector in the all-hazards environment.
References in Text
Section 278g–3 of this title, referred to in subsec. (c)(13), was amended, and no longer defines the term "computer systems".
Section 202 of the American Innovation and Competitiveness Act, referred to in subsec. (c)(19), is section 202 of Pub. L. 114–329, title II, Jan. 6, 2017, 130 Stat. 2997. Subsec. (a) of that section, which defines "scientific and technical workshop", is not classified to the Code.
Amendments
2018—Subsec. (e)(1)(A)(viii), (ix). Pub. L. 115–236 added cl. (viii) and redesignated former cl. (viii) as (ix).
2017—Subsec. (b). Pub. L. 114–329, §403(1), in introductory provisions, substituted "authorized to serve as the President's principal adviser on standards policy pertaining to the Nation's technological competitiveness and innovation ability and to take" for "authorized to take".
Subsec. (b)(3). Pub. L. 114–329, §403(2), substituted "facilitate standards-related information sharing and cooperation between Federal agencies" for "compare standards used in scientific investigations, engineering, manufacturing, commerce, industry, and educational institutions with the standards adopted or recognized by the Federal Government".
Subsec. (b)(13). Pub. L. 114–329, §403(3), substituted "technical standards activities and conformity assessment activities of Federal, State, and local governments with private sector" for "Federal, State, and local technical standards activities and conformity assessment activities, with private sector".
Subsec. (c)(16) to (27). Pub. L. 114–329, §§104(b)(4), 202(d), added pars. (16) and (19) to (21), redesignated former pars. (16) and (17) as (17) and (18), respectively, and redesignated former pars. (18) to (23) as (22) to (27), respectively.
Subsec. (d). Pub. L. 114–329, §205(a)(2)(B), substituted "sections 278k and 278l" for "sections 278k, 278l, and 278n".
2014—Subsec. (c)(15) to (23). Pub. L. 113–274, §101(a), added par. (15) and redesignated former pars. (15) to (22) as (16) to (23), respectively.
Subsec. (e). Pub. L. 113–274, §101(b), added subsec. (e).
2007—Subsec. (b). Pub. L. 110–69, §3002(c)(2)(A)(i), struck out "and, if appropriate, through other officials," before "is authorized" in introductory provisions.
Subsec. (b)(4). Pub. L. 110–69, §3013(b), inserted "and grants and cooperative agreements," after "arrangements,".
Subsec. (c). Pub. L. 110–69, §3002(c)(2)(A)(ii), struck out "and, if appropriate, through other appropriate officials," before "may," in introductory provisions.
1996—Subsec. (b)(2). Pub. L. 104–113, §12(a)(1), struck out ", including comparing standards used in scientific investigations, engineering, manufacturing, commerce, industry, and educational institutions with the standards adopted or recognized by the Federal Government" after "consistent with those standards".
Subsec. (b)(3) to (12). Pub. L. 104–113, §12(a)(2), (3), added par. (3) and redesignated former pars. (3) to (11) as (4) to (12), respectively.
Subsec. (b)(13). Pub. L. 104–113, §12(b)(3), added par. (13).
1992—Subsec. (d). Pub. L. 102–245 added subsec. (d).
1988—Pub. L. 100–418 amended section generally, substituting provisions relating to establishment, functions and activities of the National Institute of Standards and Technology and the Secretary of Commerce for provisions which authorized Secretary to undertake certain enumerated functions and activities related to the National Bureau of Standards and for which need might arise in operations of Government agencies, scientific institutions, and industrial enterprises.
Par. (20). Pub. L. 100–235 added par. (20).
1972—Par. (19). Pub. L. 92–317 inserted provisions authorizing use of National Bureau of Standards personnel for teaching and training activities without additional compensation.
1950—Act July 22, 1950, provided basic authority for performance of certain functions and activities of Department of Commerce.
Construction of Pub. L. 115–236
Pub. L. 115–236, §2(d), Aug. 14, 2018, 132 Stat. 2445, provided that: "Nothing in this section [amending this section and enacting provisions set out as notes under this section] may be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to Federal agencies."
Dissemination of Resources for Small Businesses
Pub. L. 115–236, §2(c), Aug. 14, 2018, 132 Stat. 2444, provided that:
"(1)
"(2)
"(A) are generally applicable and usable by a wide range of small business concerns;
"(B) vary with the nature and size of the implementing small business concern, and the nature and sensitivity of the data collected or stored on the information systems or devices of the implementing small business concern;
"(C) include elements, that promote awareness of simple, basic controls, a workplace cybersecurity culture, and third-party stakeholder relationships, to assist small business concerns in mitigating common cybersecurity risks;
"(D) include case studies of practical application;
"(E) are technology-neutral and can be implemented using technologies that are commercial and off-the-shelf; and
"(F) are based on international standards to the extent possible, and are consistent with the Stevenson-Wydler Technology Innovation Act of 1980 (15 U.S.C. 3701 et seq.).
"(3)
"(4)
"(5)
"(6)
"(7)
NIST Cybersecurity Priorities
Pub. L. 114–329, title I, §104(b)(1), (2), Jan. 6, 2017, 130 Stat. 2975, provided that:
"(1)
"(2)
"(A) research information systems for future cybersecurity needs; and
"(B) coordinate with relevant stakeholders to develop a process—
"(i) to research and identify or, if necessary, develop cryptography standards and guidelines for future cybersecurity needs, including quantum-resistant cryptography standards; and
"(ii) to provide recommendations to Congress, Federal agencies, and industry consistent with the National Technology Transfer and Advancement Act of 1995 (Public Law 104–113; 110 Stat. 775), for a secure and smooth transition to the standards under clause (i)."
Laboratory Program Improvements
Pub. L. 114–329, title I, §107, Jan. 6, 2017, 130 Stat. 2987, provided that:
"(a)
"(1) interactions with academia, international researchers, and industry; and
"(2) commercial and industrial applications.
"(b)
"(1) include performance metrics for the dissemination of fundamental research results, measurements, and standards research results to industry, including manufacturing, and other interested parties;
"(2) document any positive benefits of research on the competitiveness of the interested parties described in paragraph (1);
"(3) clarify the current approach to the technology transfer activities of NIST; and
"(4) consider recommendations from the National Academy of Sciences."
Enhancement of Science and Mathematics Programs
Pub. L. 105–309, §6, Oct. 30, 1998, 112 Stat. 2936, as amended by Pub. L. 114–329, title II, §204(a)(1)(A), Jan. 6, 2017, 130 Stat. 2998, provided that:
"(a)
"(1)
"(2)
"(b)
Transmittal of Plan for Standards Conformity to Congress
Pub. L. 104–113, §12(c), Mar. 7, 1996, 110 Stat. 783, provided that: "The National Institute of Standards and Technology shall, within 90 days after the date of enactment of this Act [Mar. 7, 1996], transmit to the Congress a plan for implementing the amendments made by this section [amending this section and enacting provisions set out as a note below]."
Utilization of Consensus Technical Standards by Federal Agencies
Pub. L. 104–113, §12(d), Mar. 7, 1996, 110 Stat. 783, as amended by Pub. L. 107–107, div. A, title XI, §1115, Dec. 28, 2001, 115 Stat. 1241, provided that:
"(1)
"(2)
"(3)
"(4)
"(5)
International Standards
Pub. L. 100–519, title I, §112, Oct. 24, 1988, 102 Stat. 2592, provided that:
"(a)
"(b)
Initial Organization Plan for Institute
Pub. L. 100–418, title V, §5112(d), Aug. 23, 1988, 102 Stat. 1431, provided that:
"(1) At least 60 days before its effective date and within 120 days after the date of the enactment of this Act [Aug. 23, 1988], an initial organization plan for the National Institute of Standards and Technology (hereafter in this part [see Short Title of 1988 Amendment note set out under section 271 of this title] referred to as the 'Institute') shall be submitted by the Director of the Institute (hereafter in this part referred to as the 'Director') after consultation with the Visiting Committee on Advanced Technology, to the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Commerce, Science, and Transportation of the Senate. Such plan shall—
"(A) establish the major operating units of the Institute;
"(B) assign each of the activities listed in section 2(c) of the Act of March 3, 1901 [15 U.S.C. 272(c)], and all other functions and activities of the Institute, to at least one of the major operating units established under subparagraph (A);
"(C) provide details of a 2-year program for the Institute, including the Advanced Technology Program;
"(D) provide details regarding how the Institute will expand and fund the Inventions program in accordance with section 27 of the Act of March 3, 1901 [former 15 U.S.C. 278m]; and
"(E) make no changes in the Center for Building Technology or the Center for Fire Research.
"(2) The Director may revise the organization plan. Any revision of the organization plan submitted under paragraph (1) shall be submitted to the appropriate committees of the House of Representatives and the Senate at least 60 days before the effective date of such revision.
"(3) Until the effective date of the organization plan, the major operating units of the Institute shall be the major operating units of the National Bureau of Standards that were in existence on the date of the enactment of this Act [Aug. 23, 1988] and the Advanced Technology Program."
National Institute of Standards and Technology; Small Business Plan
Pub. L. 100–418, title V, §5163(b), Aug. 23, 1988, 102 Stat. 1450, provided that: "The Director of the National Institute of Standards and Technology shall prepare a plan detailing the manner in which the Institute will make small businesses more aware of the Institute's activities and research, and the manner in which the Institute will seek to increase the application by small businesses of the Institute's research, particularly in manufacturing. The plan shall be submitted to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Science, Space, and Technology of the House of Representatives not later than 120 days after the date of the enactment of this Act [Aug. 23, 1988]."
Construction of Radio Laboratory Building
Act Oct. 25, 1949, ch. 703, 63 Stat. 886, provided for the construction and equipment of a suitable radio laboratory building, together with necessary utilities and appurtenances thereto, under a limit of cost of $4,475,000, for the National Bureau of Standards.
Construction of a Guided-Missile Research Laboratory
Act Oct. 25, 1949, ch. 728, 63 Stat. 905, provided for the construction and equipment of a research laboratory building, suitable for use as a guided-missile laboratory, together with necessary utilities and appurtenances thereto, under a limit of cost of $1,900,000, for the National Bureau of Standards.
Definitions
Pub. L. 115–236, §2(a), Aug. 14, 2018, 132 Stat. 2444, provided that: "In this section [amending this section and enacting provisions set out as notes under this section]:
"(1)
"(2)
"(3)
Tried the LawStack mobile app?
Join thousands and try LawStack mobile for FREE today.
- Carry the law offline, wherever you go.
- Download CFR, USC, rules, and state law to your mobile device.
