A proposed amendment would exclude legitimate security research from the definition of data espionage.