Data Infrastructure Risk Reduction Act

The Data Infrastructure Risk Reduction Act directs the Department of Homeland Security to identify data centers that should be classified as critical infrastructure within 180 days of enactment. This directive requires the agency to evaluate the security of power and water supplies connected to these facilities and assess the potential impact of their locations near residential communities. Following this assessment, the Department must submit a strategy to Congress outlining how to defend these sites from breaches and protect nearby neighborhoods. The law applies to federal agencies responsible for cybersecurity and infrastructure security, specifically focusing on data centers as defined by existing energy legislation.