,i  #aac? ,,congress  #a/ ,session  ,h4 
,r4 #cfce  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,decemb] #c1 #bjac,mr4
 ,b5tivolio introduc$ ! foll[+ bill2 :i*
 0 ref]r$ to ! ,committee on ,ov]sight &
 ,gov]nm5t ,re=m  ,a ,,bill  ,to ensure 
! functionality & security ( new ,f$]al 
websites t collect p]sonally id5tifiable
 in=mation1 & = o!r purposes4  #a4 ,%ort
 title ,?is ,act may be cit$ z ! ,safe &
 ,secure ,f$]al ,websites ,act ( #bjac4 
#b4 ,ensur+ functionality & security (  
new ,f$]al websites t collect p]sonally 
id5tifiable in=mation  7a7 ,c]tification
 requirem5t  7#a7 ,9 g5]al ,except z    
o!rwise provid$ "u ?is subsection1 an   
ag5cy may n deploy or make available to 
! public a new ,f$]al ,,pii website     
until ! date on :i* a c]tification "u   
subsection 7b77#b7 is submitt$ to       
,congress t ! website is fully          
functional & secure4  7#b7 ,transition  
,9 ! case ( a new ,f$]al ,,pii website t
 is op]ational on ! date ( ! enactm5t ( 
?is ,act1 p>agraph 7#a7 %all n apply    

until ! end ( ! #cj-;day p]iod beg9n+ on
 su* date ( enactm5t4 ,if ! c]tification
 "u subsection 7b77#b7 = su* website has
 n be5 submitt$ to ,congress be=e ! end 
( su* p]iod1 ! head ( ! responsible     
ag5cy %all r5d] ! website inaccessible  
to ! public until su* c]tification is   
submitt$ to ,congress4  7#c7 ,exception 
= beta website ) explicit p]mission     
,p>agraph 7#a7 %all n apply to a website
 7or portion !re(7 t is design$ = te/+ &
 developm5t purposes1 if ! foll[+       
conditions are met3 7,a7 ,a memb] ( !   
public may access ,,pii-relat$ portions 
( ! website only aft] execut+ an        
agreem5t t ackn[l$ges ! risks involv$4  
7,b7 ,no ag5cy compell$1 enjo9$1 or     
o!rwise provid$ inc5tives = su* a memb] 
to access ! website = su* purposes4     
7#d7 ,con/ruction ,no?+ 9 ?is section   
%all be con/ru$ z apply+ to a website t 
is op]at$ entirely by an entity 7su* z a
 ,/ate or locality7 t is indep5d5t ( !  
,f$]al ,gov]nm5t1 reg>dless ( ! receipt 
( fund+ 9 support ( su* website f !     

,f$]al ,gov]nm5t4  7b7 ,process = /udy &
 c]tification ( functionality & security
 ( new ,f$]al ,,pii websites  7#a7 ,,gao
 /udy & report  7,a7 ,/udy  7i7 ,curr5t 
websites ,n lat] ?an #cj days aft] !    
date ( ! enactm5t ( ?is ,act1 !         
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all conduct a /udy ( ea* new ,f$]al    
,,pii website t is op]ational z ( su*   
date ( enactm5t to det]m9e :e!r su*     
website is fully functional & secure4   
7ii7 ,future websites ,n lat] ?an #cj   
days aft] ! date on :i* an advance      
notification is receiv$ "u p>agraph 7#c7
 = a new ,f$]al ,,pii website t is n    
op]ational z ( su* date ( enactm5t1 !   
,comptroll] ,g5]al %all conduct a /udy (
 su* website to det]m9e :e!r su* website
 is fully functional & secure4  7,b7    
,report to appropriate congressional    
committees ,^u ! completion ( a /udy ( a
 website "u subp>agraph 7,a7 or 7,c71 ! 
,comptroll] ,g5]al %all submit to !     
appropriate committees ( ,congress & !  
,*ief ,in=mation ,(fic] = ! responsible 

ag5cy a report on ! results ( ! /udy4   
,su* report %all include a det]m9ation (
 :e!r ! website is fully functional &   
secure4  7,c7 ,foll[up /udies & report  
,if1 bas$ on ! results ( ! mo/ rec5t    
/udy "u subp>agraph 7,a7 or ?is         
subp>agraph1 ! ,comptroll] ,g5]al       
det]m9es t ! website is n fully         
functional or n secure1 ! ,comptroll]   
,g5]al %all conduct an additional /udy  
7& submit a report describ$ 9           
subp>agraph 7,b7 on ! results ( su*     
/udy7 until ! ,comptroll] ,g5]al        
det]m9es t ! website is det]m9$ to be   
fully functional & secure4  7#b7        
,c]tification by ,,cio ( responsible    
ag5cy ,^u ! submission ( a report "u    
p>agraph 7#a7 t det]m9es t a website    
op]at$ by a responsible ag5cy is fully  
functional & secure1 ! ,*ief ,in=mation 
,(fic] = su* ag5cy %all submit to       
,congress a c]tification ( ! results (  
su* report & a c]tification z to :e!r ! 
website is fully functional & secure4   
7#c7 ,advance notification = op]ation ( 

future websites ,ea* ag5cy t int5ds to  
op]ate a new ,f$]al ,,pii website on or 
aft] ! date ( ! enactm5t ( ?is ,act %all
 notify ! ,comptroll] ,g5]al ( su*      
int5tion & provide to ! ,comptroll]     
,g5]al1 9 advance ( ! website becom+    
op]ational1 su* in=mation z !           
,comptroll] ,g5]al may require to       
conduct a /udy & p]=m an evaluation "u  
?is subsection4  7c7 ,def9itions ,9 ?is 
section3 7#a7 ,ag5cy ,! t]m ag5cy has ! 
mean+ giv5 t t]m "u section #eea ( title
 #e1 ,unit$ ,/ates ,code4  7#b7 ,fully  
functional ,! t]m fully functional      
means1 ) respect to a new ,f$]al ,,pii  
website1 t ! website c fully support !  
activities = :i* x is design$ or int5d$ 
) reg>d to ! elicit+1 collection1 or    
/orage ( p]sonally id5tifiable          
in=mation1 includ+ h&l+ a volume (      
qu]ies relat+ to su* in=mation          
comm5surate ) ! purpose = :i* ! website 
is design$4  7#c7 ,new ,f$]al ,,pii     
website ,! t]m new ,f$]al ,,pii website 
means a website t-- 7,a7 is op]at$ by   

7or "u a contract )7 an ag5cy2  7,b7    
elicits1 collects1 or /ores p]sonally   
id5tifiable in=mation ( individuals & is
 accessible to ! public2 &  7,c7 is fir/
 made accessible to ! public & collects 
or /ores p]sonally id5tifiable in=mation
 ( individuals1 on or aft] ,july #a1    
#bjac4  7#d7 ,op]ational ,! t]m         
op]ational means1 ) respect to a        
website1 t su* website elicits1         
collects1 or /ores p]sonally id5tifiable
 in=mation ( memb]s ( ! public & is     
accessible to ! public4  7#e7 ,p]sonally
 id5tifiable in=mation 7,,pii7 ,! t]ms  
p]sonally id5tifiable in=mation & ,,pii 
mean any in=mation t c be associat$ ) "o
 individual ?r\gh a social security     
acc\nt numb]1 taxpay] id5tification     
numb]1 /ate id5tification numb] or o!r  
id5tif]1 b does n include in=mation 7su*
 z "n1 mail+ or email address1 telephone
 numb]1 or simil> contact in=mation7    
necess>y to contact an individual4  7#f7
 ,responsible ag5cy ,! t]m responsible  
ag5cy means1 ) respect to a new ,f$]al  

,,pii website1 ! ag5cy t is responsible 
= ! op]ation 7:e!r directly or ?r\gh    
contracts ) o!r entities7 ( ! website4  
7#g7 ,secure ,! t]m secure means1 )     
respect to a new ,f$]al ,,pii website1 t
 ! foll[+ requirem5ts are met3 7,a7 ,!  
website has security features t meet a  
/&>d acceptable = bank+ purposes & !    
responsible ag5cy has a nam$ ov]all     
security lead] ) a compreh5sive1 top-d[n
 view ( ! security po/ure = ! website :o
 has sup]vis$ a complete end-to-end     
security te/4  7,b7 ,! website ensures t
 p]sonally id5tifiable in=mation        
elicit$1 collect$1 or /or$ 9 connection 
) ! website is captur$ at ! late/       
possible /ep 9 a us] input sequ5ce4     
7,c7 ,! responsible ag5cy = ! website   
has tak5 reasonable ef=ts to m9imize    
doma9 "n confusion1 includ+ ?r\gh       
additional doma9 regi/rations & a       
program to educate consum]s h[ to spot  
fraudul5t websites4  7,d7 ,! responsible
 ag5cy requires all p]sonnel :o h access
 to p]sonally id5tifiable in=mation 9   

connection ) ! website to h complet$ a  
,/&>d ,=m #he,p & sign$ a non-disclosure
 agreem5t ) respect to p]sonally        
id5tifiable in=mation1 & ! ag5cy takes  
prop] precautions to ensure only        
tru/wor?y p]sons may access su*         
in=mation4  7,e7 ,! responsible ag5cy   
ma9ta9s 7ei!r directly or ?r\gh         
contract7 ample p]sonnel to respond 9 a 
timely mann] to issues relat+ to ! prop]
 function+ & security ( ! website1 & to 
monitor on an ongo+ basis exi/+ & em]g+ 
security ?reats to ! website4  7#h7     
,/ate ,! t]m ,/ate means ea* ,/ate ( !  
,unit$ ,/ates1 ! ,di/rict ( ,columbia1  
ea* t]ritory or possession ( ! ,unit$   
,/ates1 & ea* f$]ally recogniz$ ,indian 
tribe4