1. Study on cyberexploitation of employees of certain Federal departments and their families (a) Definitions In this section: (1) Covered department The term covered department includes the following: (A) The Department of Justice. (B) The Department of Energy. (C) The Department of Homeland Security. (D) The Department of State. (E) The Department of the Treasury. (F) The United States Agency for International Development. (G) The civilian employees of the Department of Defense. (2) Cyberexploitation The term cy­ber­ex­ploi­ta­tion means the use of digital means to knowingly access, or conspire to access, without authorization, an individual’s personal information to be employed (or to be used for) with malicious intent. (3) Deep fake The term deep fake means the digital insertion of a person’s likeness into or digital alteration of a person’s likeness in visual media, such as photographs and videos, without the person’s permission and with malicious intent. (b) Study required Not later than 150 days after the date of the enactment of this Act, each head of a covered department shall complete a study on the cy­ber­ex­ploi­ta­tion of the personal information and accounts of employees of the covered department and their families. (c) Elements The study required by subsection (b) shall include, with respect to a covered department, the following: (1) An assessment of the vulnerability of employees described in subsection (b) and their families to inappropriate access to their personal information and accounts of such employees and their families, including identification of particularly vulnerable subpopulations. (2) Creation of a catalogue of past and current efforts by foreign governments and non-state actors at the cyberexploitation of the personal information and accounts of such employees and their families, including an assessment of the purposes of such efforts and their degrees of success. (3) An assessment of the actions taken by the department or agency to educate employees and their families, including