,,ib  ,union ,cal5d> ,no4 #dba  #aac?   
,,congress  #b;d ,session  ,h4 ,r4 #cfce
  ,report ,no4 #aac-efb  ,,9 ,,! ,,h\se 
,,( ,,repres5tatives  ,decemb] #c1 #bjac
 ,mr4 ,b5tivolio introduc$ ! foll[+     
bill2 :i* 0 ref]r$ to ! ,committee on   
,ov]sight & ,gov]nm5t ,re=m  ,july #bh1 
#bjad ,additional sponsors3 ,mr4 ,cole1 
,mr4 ,wilson ( ,s\? ,c>ol9a1 ,mr4       
,brooks ( ,alabama1 ,mrs4 ,ba*mann1 ,mr4
 ,we/morel&1 ,mr4 ,duncan ( ,s\?        
,c>ol9a1 ,mrs4 ,lummis1 ,mr4 ,yoho1 ,mr4
 ,walb]g1 ,mr4 ,huiz5ga ( ,mi*igan1 ,mr4
 ,mead[s1 ,mrs4 ,blackburn1 ,mr4        
,b5i%ek1 ,mr4 ,k+/on1 ,mr4 ,web] (      
,texas1 ,mr4 ,franks ( ,arizona1 ,mr4   
,la,malfa1 ,mr4 ,rohraba*]1 ,mr4 ,mica1 
,mr4 ,kelly ( ,p5nsylvania1 ,mr4 ,b>r1  
,mr4 ,lucas1 ,mr4 ,mill] ( ,florida1    
,mr4 ,sam ,johnson ( ,texas1 ,mr4       
,mess]1 ,mr4 ,mulvaney1 ,mr4 ,hudson1   
,mr4 ,rice ( ,s\? ,c>ol9a1 ,mr4 ,posey1 
,mr4 ,cram]1 ,mr4 ,williams1 ,mr4       
,/ockman1 ,mr4 ,f>5?old1 ,mr4 ,jordan1  
,mr4 ,mull91 ,mr4 ,brid5/9e1 ,mr4 ,f9*]1

 ,mr4 ,hultgr51 ,mr4 ,coll9s ( ,new     
,york1 ,mr4 ,fleis*mann1 ,mr4 ,gibbs1   
,mr4 ,w5/rup1 ,mr4 ,lank=d1 ,mr4 ,br\n (
 ,georgia1 ,mr4 ,rodney ,davis (        
,ill9ois1 ,mr4 ,"y ( ,alaska1 ,mr4      
,rokita1 ,mr4 ,mc,henry1 ,mr4 ,gos>1    
,mr4 ,c>t]1 ,mr4 ,diaz-,bal>t1 ,mr4     
,coll9s ( ,georgia1 ,mr4 ,de,santis1    
,mr4 ,g[dy1 ,mr4 ,ama%1 ,mr4 ,g+rey (   
,georgia1 ,mr4 ,amodei1 ,mr4 ,hall1 ,mr4
 ,hunt]1 ,mr4 ,price ( ,georgia1 ,mrs4  
,wagn]1 ,mr4 ,joyce1 ,mr4 ,burgess1 ,mr4
 ,cassidy1 ,mr4 ,s*weik]t1 ,mr4 ,/ew>t1 
,ms4 ,j5k9s1 ,mr4 ,scalise1 ,mr4 ,la?am1
 ,mr4 ,hurt1 ,mr4 ,des,jarlais1 ,mr4    
,ad]holt1 ,mr4 ,cook1 ,mr4 ,craw=d1 ,mr4
 ,k+ ( ,i[a1 ,mr4 ,?ompson (            
,p5nsylvania1 ,mr4 ,griff9 ( ,arkansas1 
,mr4 ,duncan ( ,t5nessee1 ,mrs4 ,roby1  
,mr4 ,*abot1 ,mr4 ,pitt5g]1 ,mr4 ,san=d1
 ,mr4 ,graves ( ,georgia1 ,mr4 ,cr5%aw1 
,mr4 ,griffi? ( ,virg9ia1 ,mr4          
,nunnelee1 ,mr4 ,duffy1 ,mr4 ,%u/]1 ,mr4
 ,ha/+s ( ,wa%+ton1 ,mr4 ,roskam1 ,mr4  
,latta1 ,mr4 ,goodlatte1 ,mr4 ,coble1   

,mr4 ,s5s5br5n]1 ,mr4 ,lance1 ,mr4      
,s\!rl&1 ,mr4 ,culb]son1 ,mr4 ,cotton1  
,mr4 ,m>*ant1 ,mr4 ,b\/any1 ,mr4        
,:itfield1 ,mr4 ,roe ( ,t5nessee1 ,mr4  
,wittman1 ,mr4 ,tib]i1 ,mr4 ,poe (      
,texas1 ,mr4 ,smi? ( ,texas1 ,mr4       
,frel+huys51 ,mr4 ,ross1 ,mrs4 ,h>tzl]1 
,mr4 ,ribble1 ,mr4 ,tipton1 ,mr4 ,s*ock1
 ,mr4 ,calv]t1 ,mr4 ,=t5b]ry1 ,mr4      
,b>letta1 ,mr4 ,gibson1 ,mr4 ,gu?rie1   
,mr4 ,c(fman1 ,mr4 ,byrne1 ,mrs4        
,mc,morris ,rodg]s1 ,mr4 ,mc,clintock1  
,mr4 ,kl9e1 ,mr4 ,wolf1 ,mr4 ,camp1 ,mr4
 ,connolly1 & ,mr4 ,johnson ( ,ohio     
,july #bh1 #bjad ,report$ ) an am5dm5t1 
committ$ to ! ,committee ( ! ,:ole ,h\se
 on ! ,/ate ( ! ,union1 & ord]$ to be   
pr9t$ ,/rike out all aft] ! enact+      
clause & ins]t ! "p pr9t$ 9 italic ,=   
text ( introduc$ bill1 see copy ( bill z
 introduc$ on ,decemb] #c1 #bjac  ,a    
,,bill  ,to ensure ! functionality &    
security ( new ,f$]al websites t collect
 p]sonally id5tifiable in=mation1 & =   
o!r purposes4  #a4 ,%ort title ,?is ,act

 may be cit$ z ! ,safe & ,secure ,f$]al 
,websites ,act ( #bjad4  #b4 ,ensur+    
functionality & security ( new ,f$]al   
websites t collect p]sonally id5tifiable
 in=mation  7a7 ,c]tification requirem5t
  7#a7 ,9 g5]al ,except z o!rwise       
provid$ "u ?is subsection1 an ag5cy may 
n deploy or make available to ! public a
 new ,f$]al ,,pii website until ! date  
on :i* ! *ief in=mation (fic] ( ! ag5cy 
submits a c]tification to ,congress t ! 
website is fully functional & secure4   
7#b7 ,transition ,9 ! case ( a new      
,f$]al ,,pii website t is op]ational on 
! date ( ! enactm5t ( ?is ,act1 p>agraph
 7#a7 %all n apply until ! end ( !      
#ij-;day p]iod beg9n+ on su* date (     
enactm5t4 ,if ! c]tification requir$ "u 
p>agraph 7#a7 = su* website has n be5   
submitt$ to ,congress be=e ! end ( su*  
p]iod1 ! head ( ! responsible ag5cy %all
 r5d] ! website inaccessible to ! public
 until su* c]tification is submitt$ to  
,congress4  7#c7 ,exception = beta      
website ) explicit p]mission ,p>agraph  

7#a7 %all n apply to a website 7or      
portion !re(7 t is 9 a developm5t or    
te/+ phase1 if ! foll[+ conditions are  
met3  7,a7 ,a memb] ( ! public may      
access ,,pii-relat$ portions ( ! website
 only aft] execut+ an agreem5t t        
ackn[l$ges ! risks involv$4  7,b7 ,no   
ag5cy compell$1 enjo9$1 or o!rwise      
provid$ inc5tives = su* a memb] to      
access ! website = su* purposes4  7#d7  
,con/ruction ,no?+ 9 ?is section %all be
 con/ru$ z apply+ to a website t is     
op]at$ entirely by an entity 7su* z a   
,/ate or locality7 t is indep5d5t ( !   
,f$]al ,gov]nm5t1 reg>dless ( ! receipt 
( fund+ 9 support ( su* website f !     
,f$]al ,gov]nm5t4  7b7 ,def9itions ,9   
?is section3  7#a7 ,ag5cy ,! t]m ag5cy  
has ! mean+ giv5 t t]m "u section #eea (
 title #e1 ,unit$ ,/ates ,code4  7#b7   
,fully functional ,! t]m fully          
functional means1 ) respect to a new    
,f$]al ,,pii website1 t ! website c     
fully support ! activities = :i* x is   
design$ or int5d$ ) reg>d to ! elicit+1 

collection1 /orage1 or ma9t5ance (      
p]sonally id5tifiable in=mation1 includ+
 h&l+ a volume ( qu]ies relat+ to su*   
in=mation comm5surate ) ! purpose = :i* 
! website is design$4  7#c7 ,new ,f$]al 
p]sonally id5tifiable in=mation website 
7,new ,f$]al ,,pii website7 ,! t]ms new 
,f$]al p]sonally id5tifiable in=mation  
website & new ,f$]al ,,pii website mean 
a website t--  7,a7 is op]at$ by 7or "u 
a contract )7 an ag5cy2  7,b7 elicits1  
collects1 /ores1 or ma9ta9s p]sonally   
id5tifiable in=mation ( individuals & is
 accessible to ! public2 &  7,c7 is fir/
 made accessible to ! public & collects 
or /ores p]sonally id5tifiable in=mation
 ( individuals1 on or aft] ,octob] #a1  
#bjab4  7#d7 ,op]ational ,! t]m         
op]ational means1 ) respect to a        
website1 t su* website elicits1         
collects1 /ores1 or ma9ta9s p]sonally   
id5tifiable in=mation ( memb]s ( !      
public & is accessible to ! public4     
7#e7 ,p]sonally id5tifiable in=mation   
7,,pii7 ,! t]ms p]sonally id5tifiable   

in=mation & ,,pii mean any in=mation    
ab\t an individual elicit$1 collect$1   
/or$1 or ma9ta9$ by an ag5cy1 includ+-- 
7,a7 any in=mation t c be us$ to di/+ui%
 or trace ! id5tity ( an individual1 su*
 z a "n1 a social security numb]1 a date
 & place ( bir?1 a "m's maid5 "n1 or    
biometric records2 &  7,b7 any o!r      
in=mation t is l9k$ or l9kable to an    
individual1 su* z m$ical1 educational1  
f9ancial1 & employm5t in=mation4  7#f7  
,responsible ag5cy ,! t]m responsible   
ag5cy means1 ) respect to a new ,f$]al  
,,pii website1 ! ag5cy t is responsible 
= ! op]ation 7:e!r directly or ?r\gh    
contracts ) o!r entities7 ( ! website4  
7#g7 ,secure ,! t]m secure means1 )     
respect to a new ,f$]al ,,pii website1 t
 ! foll[+ requirem5ts are met3  7,a7 ,! 
website is 9 compliance ) sub*apt] ,,iii
 ( *apt] #ce ( title #dd1 ,unit$ ,/ates 
,code4  7,b7 ,! website ensures t       
p]sonally id5tifiable in=mation elicit$1
 collect$1 /or$1 or ma9ta9$ 9 connection
 ) ! website is captur$ at ! late/      

possible /ep 9 a us] input sequ5ce4     
7,c7 ,! responsible ag5cy = ! website   
has tak5 reasonable ef=ts to m9imize    
doma9 "n confusion1 includ+ ?r\gh       
additional doma9 regi/rations4  7,d7 ,! 
responsible ag5cy requires all p]sonnel 
:o h access to p]sonally id5tifiable    
in=mation 9 connection ) ! website to h 
complet$ a ,/&>d ,=m #he,p & sign$ a    
non-disclosure agreem5t ) respect to    
p]sonally id5tifiable in=mation1 & !    
ag5cy takes prop] precautions to ensure 
only tru/wor?y p]sons may access su*    
in=mation4  7,e7 ,! responsible ag5cy   
ma9ta9s 7ei!r directly or ?r\gh         
contract7 suffici5t p]sonnel to respond 
9 a timely mann] to issues relat+ to !  
prop] function+ & security ( ! website1 
& to monitor on an ongo+ basis exi/+ &  
em]g+ security ?reats to ! website4     
7#h7 ,/ate ,! t]m ,/ate means ea* ,/ate 
( ! ,unit$ ,/ates1 ! ,di/rict (         
,columbia1 ea* t]ritory or possession ( 
! ,unit$ ,/ates1 & ea* f$]ally recogniz$
 ,indian tribe4  #c4 ,privacy brea*     

requirem5ts  7a7 ,in=mation security    
am5dm5t ,sub*apt] ,,iii ( *apt] #ce (   
title #dd1 ,unit$ ,/ates ,code1 is am5d$
 by add+ at ! end ! foll[+3  #ceej4     
,privacy brea* requirem5ts  7a7         
,policies & ,proc$ures ,! ,director ( ! 
,(fice ( ,managem5t & ,budget %all      
e/abli% & ov]see policies & proc$ures = 
ag5cies to foll[ 9 ! ev5t ( a brea* (   
in=mation security involv+ ! disclosure 
( p]sonally id5tifiable in=mation1      
includ+ requirem5ts =--  7#a7 n lat] ?an
 #gb h\rs aft] ! ag5cy discov]s su* a   
brea*1 or discov]s evid5ce t reasonably 
indicates su* a brea* has occurr$1      
notice to ! individuals ^: p]sonally    
id5tifiable in=mation c\ld be compromis$
 z a result ( su* brea*2  7#b7 timely   
report+ to a ,f$]al cyb]security c5t]1 z
 designat$ by ! ,director ( ! ,(fice (  
,managem5t & ,budget2 &  7#c7 any       
additional actions t ! ,director f9ds   
necess>y & appropriate1 includ+ data    
brea* analysis1 fraud resolution        
s]vices1 id5tity !ft insurance1 & cr$it 

protection or monitor+ s]vices4  7b7    
,requir$ ,ag5cy ,action ,! head ( ea*   
ag5cy %all ensure t actions tak5 9      
response to a brea* ( in=mation security
 involv+ ! disclosure ( p]sonally       
id5tifiable in=mation "u ! au?ority or  
control ( ! ag5cy comply ) policies &   
proc$ures e/abli%$ by ! ,director ( !   
,(fice ( ,managem5t & ,budget "u        
subsection 7a74  7c7 ,report ,n lat] ?an
 ,m>* #a ( ea* ye>1 ! ,director ( !     
,(fice ( ,managem5t & ,budget %all      
report to ,congress on ag5cy compliance 
) ! policies & proc$ures e/abli%$ "u    
subsection 7a74  7d7 ,f$]al cyb]security
 c5t] def9$ ,! t]m ,f$]al cyb]security  
c5t] means any ( ! foll[+3  7#a7 ,!     
,dep>tm5t ( ,def5se ,cyb] ,crime ,c5t]4 
7#b7 ,! ,intellig5ce ,community ,incid5t
 ,response ,c5t]4  7#c7 ,! ,unit$ ,/ates
 ,cyb] ,comm& ,jo9t ,op]ations ,c5t]4   
7#d7 ,! ,national ,cyb] ,inve/igative   
,jo9t ,task ,=ce4  7#e7 ,c5tral         
,security ,s]vice ,?reat ,op]ations     
,c5t] ( ! ,national ,security ,ag5cy4   

7#f7 ,! ,unit$ ,/ates ,comput] ,em]g5cy 
,read9ess ,team4  7#g7 ,any successor to
 a c5t]1 team1 or task =ce describ$ 9   
p>agraphs 7#a7 ?r\gh 7#f74  7#h7 ,any   
c5t] t ! ,director ( ! ,(fice (         
,managem5t & ,budget det]m9es is        
appropriate to c>ry out ! requirem5ts ( 
?is section4  4  7b7 ,te*nical & ,con=m+
 ,am5dm5t ,! table ( sections = sub*apt]
 ,,iii ( *apt] #ce ( title #dd1 ,unit$  
,/ates ,code1 is am5d$ by add+ at ! end 
! foll[+3  #ceej4 ,privacy brea*        
requirem5ts4  4  ,july #bh1 #bjad       
,report$ ) an am5dm5t1 committ$ to !    
,committee ( ! ,:ole ,h\se on ! ,/ate ( 
! ,union1 & ord]$ to be pr9t$