This is a bill proposed by people who have no clue of how hacking works.
I mean, how do you "hack back" against a ransomware attack?
Or a phishing attack?
Furthermore, in "legit" cases, in C&C for example, when you would be allowed to hack the control server - there are two major problems.
1) The bad guys will just set up a new control server, and all the money and effort to "hack back" would have been for nothing.
2) Blackhats vs whitehats is an arms race. If you allow victims to hack back, the attackers will just switch to decentralized methods - leaving no target for the victim.
Additionally, it sets an extremely dangerous precedent that could allow state actors, corporations and even individual bad guys to hack innocent civilians under the pretense of "hacking back".
Imagine, like in Mr Robot Season 1, someone would forge evidence of a hack (or just forge the IP of the attackers after a "real" hack). He could now use that to hack competitors or civilians - without any legal repercussions.
The bill is one of the most stupid and most dangerous things I have ever read and I hope that this will never come to pass.