; and (2) for taking appropriate adverse personnel action against any officer or employee of the department or agency who engages in such a violation, including more severe adverse actions for any subsequent violation. . (b) Clerical amendment The table of contents for the Foreign Intelligence Surveillance Act of 1978 ( 50 U.S.C. 1801 et seq. ), as amended by this Act, is further amended by adding at the end the following: 607. Agency procedures to ensure compliance. . (c) Report Not later than 3 months after the date of enactment of this Act, the head of each Federal department or agency that is required to establish procedures under section 607 of the Foreign Intelligence Surveillance Act of 1978 shall report to Congress on such procedures. 18. Protection of records held by data brokers Section 2702 of title 18, United States Code, is amended by adding at the end the following: (e) Prohibition on obtaining in exchange for anything of value certain records and information by law enforcement and intelligence agencies (1) Definitions In this subsection— (A) the term covered customer or subscriber record means a covered record that is— (i) disclosed to a third party by— (I) a provider of an electronic communication service to the public or a provider of a remote computing service of which the covered person with respect to the covered record is a subscriber or customer; or (II) an intermediary service provider that delivers, stores, or processes communications of such covered person; (ii) collected by a third party from an online account of a covered person; or (iii) collected by a third party from or about an electronic device of a covered person; (B) the term covered person means— (i) a person who is located inside the United States; or (ii) a person— (I) who is located outside the United States or whose location cannot be determined; and (II) who is a United States person, as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 ( 50 U.S.C. 1801 )