((a)) ** Access to NCIC** Not later than 1 year after , the Attorney General shall, in accordance with this section, provide access to the NCIC Missing Person and Unidentified Person Files to the National Institute of Justice or its designee administering the NamUs program as a grantee or contractor, for the purpose of reviewing missing and unidentified person records in NCIC for case validation and NamUs data reconciliation.December 27, 20222022-12-27

((b)) ** Electronic data sharing** Not later than 6 months after , the Attorney General shall, in accordance with this section, have completed an assessment of the NCIC and NamUs system architectures and governing statutes, policies, and procedures and provide a proposed plan for the secure and automatic data transmission of missing and unidentified person records that are reported to and entered into the NCIC database, with the following criteria, to be electronically transmitted to the NamUs system.

((1)) Missing Person cases with an MNP (Missing Person) code of CA (Child Abduction) or AA (Amber Alert) within 72 hours of entry into NCIC;

((2)) Missing Person cases with an MNP code EME (Endangered) or EMI (Involuntary) within 30 days of entry into NCIC;

((3)) All other Missing Person cases that have been active (non-cancelled) in NCIC for 180 days;

((4)) Unidentified person cases that have been active (non-cancelled) in NCIC for 60 days;

((5)) Once case data are transmitted to NamUs, cases are marked as such within NCIC, and any updates to such cases will be transmitted to NamUs within 24 hours.

((c)) ** Rules on confidentiality**

((1)) ** In general** Not later than 1 year after , the Attorney General, in consultation with the Director of the FBI, shall promulgate rules pursuant to notice and comment that specify the information the Attorney General may allow NamUs to access from the NCIC Missing Person and Unidentified Person files or be transmitted from the NCIC database to the NamUs databases for purposes of this Act. Such rules shall—

((A)) provide for the protection of confidential, private, and law enforcement sensitive information contained in the NCIC Missing Person and Unidentified Person files; and

((B)) specify the circumstances in which access to portions of information in the Missing Person and Unidentified Person files may be withheld from the NamUs databases.