,i  #aaf? ,,congress  #a/ ,session  ,h4 
,r4 #dee  ,,9 ,,! ,,h\se ,,(            
,,repres5tatives  ,janu>y #aj1 #bjai,mr4
 ,fleis*mann introduc$ ! foll[+ bill2   
:i* 0 ref]r$ to ! ,committee on         
,ov]sight & ,re=m  ,a ,,bill  ,to ensure
 ! functionality & security ( new ,f$]al
 websites t collect p]sonally           
id5tifiable in=mation1 & = o!r purposes4
  #a4 ,%ort title ,?is ,act may be cit$ 
z ! ,safe & ,secure ,f$]al ,websites    
,act ( #bjai4  #b4 ,ensur+ functionality
 & security ( new ,f$]al websites t     
collect p]sonally id5tifiable in=mation 
7a7 ,c]tification requirem5t  7#a7 ,9   
g5]al ,except z o!rwise provid$ "u ?is  
subsection1 an ag5cy may n deploy or    
make available to ! public a new ,f$]al 
,,pii website until ! date on :i* ! *ief
 in=mation (fic] ( ! ag5cy submits a    
c]tification to ,congress t ! website is
 fully functional & secure4  7#b7       
,transition ,9 ! case ( a new ,f$]al    
,,pii website t is op]ational on ! date 
( ! enactm5t ( ?is ,act1 p>agraph 7#a7  

%all n apply until ! end ( ! #ij-;day   
p]iod beg9n+ on su* date ( enactm5t4 ,if
 ! c]tification requir$ "u p>agraph 7#a7
 = su* website has n be5 submitt$ to    
,congress be=e ! end ( su* p]iod1 ! head
 ( ! responsible ag5cy %all r5d] !      
website inaccessible to ! public until  
su* c]tification is submitt$ to         
,congress4  7#c7 ,exception = beta      
website ) explicit p]mission ,p>agraph  
7#a7 %all n apply to a website 7or      
portion !re(7 t is 9 a developm5t or    
te/+ phase1 if ! foll[+ conditions are  
met3  7,a7 ,a memb] ( ! public may      
access ,,pii-relat$ portions ( ! website
 only aft] execut+ an agreem5t t        
ackn[l$ges ! risks involv$4  7,b7 ,no   
ag5cy compell$1 enjo9$1 or o!rwise      
provid$ inc5tives = su* a memb] to      
access ! website = su* purposes4  7#d7  
,con/ruction ,no?+ 9 ?is section %all be
 con/ru$ z apply+ to a website t is     
op]at$ entirely by an entity 7su* z a   
,/ate or locality7 t is indep5d5t ( !   
,f$]al ,gov]nm5t1 reg>dless ( ! receipt 

( fund+ 9 support ( su* website f !     
,f$]al ,gov]nm5t4  7b7 ,def9itions ,9   
?is section3 7#a7 ,ag5cy ,! t]m ag5cy   
has ! mean+ giv5 t t]m "u section #eea (
 title #e1 ,unit$ ,/ates ,code4  7#b7   
,fully functional ,! t]m fully          
functional means1 ) respect to a new    
,f$]al ,,pii website1 t ! website c     
fully support ! activities = :i* x is   
design$ or int5d$ ) reg>d to ! elicit+1 
collection1 /orage1 or ma9t5ance (      
p]sonally id5tifiable in=mation1 includ+
 h&l+ a volume ( qu]ies relat+ to su*   
in=mation comm5surate ) ! purpose = :i* 
! website is design$4  7#c7 ,new ,f$]al 
p]sonally id5tifiable in=mation website 
7,new ,f$]al ,,pii website7 ,! t]ms new 
,f$]al p]sonally id5tifiable in=mation  
website & new ,f$]al ,,pii website mean 
a website t-- 7,a7 is op]at$ by 7or "u a
 contract )7 an ag5cy2  7,b7 elicits1   
collects1 /ores1 or ma9ta9s p]sonally   
id5tifiable in=mation ( individuals & is
 accessible to ! public2 &  7,c7 is fir/
 made accessible to ! public & collects 

or /ores p]sonally id5tifiable in=mation
 ( individuals1 on or aft] ,octob] #a1  
#bjab4  7#d7 ,op]ational ,! t]m         
op]ational means1 ) respect to a        
website1 t su* website elicits1         
collects1 /ores1 or ma9ta9s p]sonally   
id5tifiable in=mation ( memb]s ( !      
public & is accessible to ! public4     
7#e7 ,p]sonally id5tifiable in=mation   
7,,pii7 ,! t]ms p]sonally id5tifiable   
in=mation & ,,pii mean any in=mation    
ab\t an individual elicit$1 collect$1   
/or$1 or ma9ta9$ by an ag5cy1 includ+-- 
7,a7 any in=mation t c be us$ to di/+ui%
 or trace ! id5tity ( an individual1 su*
 z a "n1 a social security numb]1 a date
 & place ( bir?1 a "m's maid5 "n1 or    
biometric records2 &  7,b7 any o!r      
in=mation t is l9k$ or l9kable to an    
individual1 su* z m$ical1 educational1  
f9ancial1 & employm5t in=mation4  7#f7  
,responsible ag5cy ,! t]m responsible   
ag5cy means1 ) respect to a new ,f$]al  
,,pii website1 ! ag5cy t is responsible 
= ! op]ation 7:e!r directly or ?r\gh    

contracts ) o!r entities7 ( ! website4  
7#g7 ,secure ,! t]m secure means1 )     
respect to a new ,f$]al ,,pii website1 t
 ! foll[+ requirem5ts are met3 7,a7 ,!  
website is 9 compliance ) sub*apt] ,,ii 
( *apt] #ce ( title #dd1 ,unit$ ,/ates  
,code4  7,b7 ,! website ensures t       
p]sonally id5tifiable in=mation elicit$1
 collect$1 /or$1 or ma9ta9$ 9 connection
 ) ! website is captur$ at ! late/      
possible /ep 9 a us] input sequ5ce4     
7,c7 ,! responsible ag5cy = ! website   
has encrypt$1 mask$1 or tak5 o!r simil> 
actions to protect p]sonally id5tifiable
 in=mation elicit$1 collect$1 /or$1 or  
ma9ta9$ 9 connection ) ! website4  7,d7 
,! responsible ag5cy = ! website has    
tak5 reasonable ef=ts to m9imize doma9  
"n confusion1 includ+ ?r\gh additional  
doma9 regi/rations4  7,e7 ,! responsible
 ag5cy requires all p]sonnel :o h access
 to p]sonally id5tifiable in=mation 9   
connection ) ! website to h complet$ a  
,/&>d ,=m #he,p & sign$ a nondisclosure 
agreem5t ) respect to p]sonally         

id5tifiable in=mation1 & ! ag5cy takes  
prop] precautions to ensure t only !    
fewe/ reasonable numb] ( tru/wor?y      
p]sons may access su* in=mation4  7,f7  
,! responsible ag5cy ma9ta9s 7ei!r      
directly or ?r\gh contract7 suffici5t   
p]sonnel to respond 9 a timely mann] to 
issues relat+ to ! prop] function+ &    
security ( ! website1 & to monitor on an
 ongo+ basis exi/+ & em]g+ security     
?reats to ! website4  7#h7 ,/ate ,! t]m 
,/ate means ea* ,/ate ( ! ,unit$ ,/ates1
 ! ,di/rict ( ,columbia1 ea* t]ritory or
 possession ( ! ,unit$ ,/ates1 & ea*    
f$]ally recogniz$ ,indian tribe4  #c4   
,privacy brea* requirem5ts  7a7         
,in=mation security am5dm5t ,sub*apt]   
,,ii ( *apt] #ce ( title #dd1 ,unit$    
,/ates ,code1 is am5d$ by add+ at ! end 
! foll[+3  #ceei4 ,privacy brea*        
requirem5ts  7a7 ,policies & ,proc$ures 
,! ,director ( ! ,(fice ( ,managem5t &  
,budget %all e/abli% & ov]see policies &
 proc$ures = ag5cies to foll[ 9 ! ev5t (
 a brea* ( in=mation security involv+ ! 

disclosure ( p]sonally id5tifiable      
in=mation1 includ+ requirem5ts =--  7#a7
 n lat] ?an #gb h\rs aft] ! ag5cy       
discov]s su* a brea*1 or discov]s       
evid5ce t reasonably indicates su* a    
brea* has occurr$1 notice to !          
individuals ^: p]sonally id5tifiable    
in=mation c\ld be compromis$ z a result 
( su* brea*2  7#b7 timely report+ to a  
,f$]al cyb]security c5t]1 z designat$ by
 ! ,director ( ! ,(fice ( ,managem5t &  
,budget2 &  7#c7 any additional actions 
t ! ,director f9ds necess>y &           
appropriate1 includ+ data brea*         
analysis1 fraud resolution s]vices1     
id5tity !ft insurance1 & cr$it          
protection or monitor+ s]vices4  7b7    
,requir$ ,ag5cy ,action ,! head ( ea*   
ag5cy %all ensure t actions tak5 9      
response to a brea* ( in=mation security
 involv+ ! disclosure ( p]sonally       
id5tifiable in=mation "u ! au?ority or  
control ( ! ag5cy comply ) policies &   
proc$ures e/abli%$ by ! ,director ( !   
,(fice ( ,managem5t & ,budget "u        

subsection 7a74  7c7 ,report ,n lat] ?an
 ,m>* #a ( ea* ye>1 ! ,director ( !     
,(fice ( ,managem5t & ,budget %all      
report to ,congress on ag5cy compliance 
) ! policies & proc$ures e/abli%$ "u    
subsection 7a74  7d7 ,f$]al cyb]security
 c5t] def9$ ,! t]m ,f$]al cyb]security  
c5t] means any ( ! foll[+3 7#a7 ,!      
,dep>tm5t ( ,def5se ,cyb] ,crime ,c5t]4 
7#b7 ,! ,intellig5ce ,community ,incid5t
 ,response ,c5t]4  7#c7 ,! ,unit$ ,/ates
 ,cyb] ,comm& ,jo9t ,op]ations ,c5t]4   
7#d7 ,! ,national ,cyb] ,inve/igative   
,jo9t ,task ,=ce4  7#e7 ,c5tral         
,security ,s]vice ,?reat ,op]ations     
,c5t] ( ! ,national ,security ,ag5cy4   
7#f7 ,! ,unit$ ,/ates ,comput] ,em]g5cy 
,read9ess ,team4  7#g7 ,any successor to
 a c5t]1 team1 or task =ce describ$ 9   
p>agraphs 7#a7 ?r\gh 7#f74  7#h7 ,any   
c5t] t ! ,director ( ! ,(fice (         
,managem5t & ,budget det]m9es is        
appropriate to c>ry out ! requirem5ts ( 
?is section4  4  7b7 ,te*nical & ,con=m+
 ,am5dm5t ,! table ( sections = sub*apt]

 ,,ii ( *apt] #ce ( title #dd1 ,unit$   
,/ates ,code1 is am5d$ by add+ at ! end 
! foll[+3  #ceei4 ,privacy brea*        
requirem5ts4  4