10 U.S.C. § 430e

(a) Oversight, Deconfliction, and Risk Assessment Capability .— The Secretary of Defense shall establish, maintain, continuously update, and use a secure, centralized technical capability to facilitate oversight, deconfliction, and risk assessments of all commercial vendor support to the Department of Defense for clandestine activities. Such capability shall— (1) enable the Department of Defense to perform oversight, deconfliction, and risk assessments of past, ongoing, or planned clandestine activity involving support from commercial vendors, including all subcontractors; and (2) include use of the minimum information required to— (A) identify potential conflicts between clandestine activities; (B) identify the need for additional coordination with respect to clandestine activities; and (C) conduct aggregate risk assessments of clandestine activities involving support from commercial vendors; and 1 1 So in original. (b) Exclusions .— (1) Notwithstanding subsection (a), if the Secretary of Defense determines that information concerning a commercial vendor should not be used by the centralized technical capability required by subsection (a) due to operational, counterintelligence, or other national security concerns, the Secretary may exclude such information from use by such centralized technical capability. (2) Not later than 7 days after making a determination under paragraph (1), the Secretary shall submit to the congressional defense committees, the Select Committee on Intelligence of the Senate, and the Permanent Select Committee on Intelligence of the House of Representatives notice of the determination that includes the following information disaggregated by the element of the Department of Defense with respect to which such commercial vendor provides support: (A) The number of commercial vendors with respect to which the Secretary made the determination under paragraph (1). (B) A description of the types of activities supported by such commercial vendors. (C) The rationale for excluding the information concerning such commercial vendors from such capability. (c) Deconfliction .— The Secretary of Defense shall ensure the centralized technical capability required by subsection (a) is used in each case where a commercial vendor is expected to provide support to a clandestine activity to— (1) deconflict the use of commercial vendors in support of clandestine activities of the Department of Defense; and (2) assess operational risk and counterintelligence exposure attributable to the use of commercial vendors in support of clandestine activities of the Department of Defense. (d) Clandestine Activity Defined .— In this section, the term “clandestine activity” means any activity where it is intended that the role of the United States Government will not be apparent or acknowledged publicly.