; and (2) acted in compliance with the guidelines required to be issued by the National Protection and Programs Directorate, and adopted by the contractor described in paragraph (1), under section 3(b) of the Internet of Things (IoT) Cybersecurity Improvement Act of 2017. . (3) Digital millennium copyright act Chapter 12 of title 17, United States Code, is amended— (A) in section 1203, by adding at the end the following new subsection: (d) Limitation of liability A person shall not be held liable under this section if the individual— (1) in good faith, engaged in researching the cybersecurity of an Internet-connected device of the class, model, or type provided by a contractor to a department or agency of the United States; and (2) acted in compliance with the guidelines required to be issued by the National Protection and Programs Directorate, and adopted by the contractor described in paragraph (1), under section 3(b) of the Internet of Things (IoT) Cybersecurity Improvement Act of 2017. ; and (B) in section 1204, by adding at the end the following new subsection: (d) Limitation of liability Subsection (a) shall not apply to a person who— (1) in good faith, engaged in researching the cybersecurity of an Internet-connected device of the class, model, or type provided by a contractor to a department or agency of the United States