; (C) the term attacker means a person or an entity that is the source of the persistent unauthorized intrusion into the victim’s computer; and (D) the term intermediary computer means a person or entity’s computer that is not under the ownership or primary control of the attacker but has been used to launch or obscure the origin of the persistent cyber-attack. . (c) Notification requirement for the use of active cyber defense measures Section 1030 of title 18, United States Code, is amended by adding the following: (m) Notification requirement for the use of active cyber defense measures (1) In general A defender who uses an active cyber defense measure under the preceding section must notify the FBI National Cyber Investigative Joint Task Force and either receive a response from the FBI acknowledging receipt of the notification or wait 48 hours prior to using the measure. (2) Required notification Notification must include the type of cyber breach that the person or entity was a victim of, the intended target of the active cyber defense measure, the steps the defender plans to take to preserve evidence of the attacker’s criminal cyber intrusion, as well as the steps they plan to prevent damage to intermediary computers not under the ownership of the attacker and other information requested by the FBI to assist with oversight. . 21. Ensuring transparency for Chinese listings on U.S. Exchanges (a) Definitions In this section— (1) the term applicable Chinese issuer means a Chinese issuer— (A) that is required to file a covered form; and (B) for which, during the period covered by the filing described in subparagraph (A), a covered foreign public accounting firm has prepared an audit report for the issuer; (2) the term audit report has the meaning given the term in section 2(a) of the Sarbanes-Oxley Act of 2002 ( 15 U.S.C. 7201(a) ); (3) the term Board means the Public Company Accounting Oversight Board; (4) the term Commission means the Securities and Exchange Commission