,i #aaf? ,,congress #b;d ,session ,h4 ,r4 #gdgb ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,july #a1 #bjbj ,ms4 ,spei] 7= h]self1 ,ms4 ,de,gette1 ,mrs4 ,d+ell1 ,mr4 ,c>son ( ,indiana1 ,ms4 ,b>ragn1 ,mr4 ,lyn*1 ,mr4 ,rask91 ,mr4 ,san ,nicolas1 ,mr4 ,takano1 & ,mr4 ,ha/+s7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,en]gy & ,comm]ce ,a ,,bill ,to au?orize ! ,director ( ! ,c5t]s = ,disease ,control & ,prev5tion to aw>d grants to eligible ,/ate1 ,tribal1 & t]ritorial public heal? ag5cies to develop & adm9i/] a program = digital contact trac+ = ,,covid-#ai1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,secure ,data & ,privacy = ,contact ,trac+ ,act ( #bjbj4 #b4 ,grant program = digital contact trac+ = ,,covid-#ai 7a7 ,9 g5]al ,! ,director ( ! ,c5t]s = ,disease ,control & ,prev5tion %all aw>d grants to eligible ,/ate1 ,tribal1 & t]ritorial public heal? ag5cies to-- 7#a7 e/abli% a contact-trac+ program t implem5ts traditional contact trac+ protocols ) ! assi/ance ( digital contact trac+ te*nology to track & prev5t ! spread ( ,,covid-#ai2 or 7#b7 incorporate digital contact trac+ te*nology into a contact-trac+ program t implem5ts traditional contact trac+ protocols to track & prev5t ! spread ( ,,covid-#ai4 7b7 ,fund+ disqualification ,if a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy develops or procures any digital contact trac+ te*nology ) respect to ,,covid-#ai t does n meet ea* ( ! requirem5ts li/$ 9 subsection 7c71 su* ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy %all be ineligible to receive or cont9ue to receive-- 7#a7 any funds ?r\gh a grant "u ?is section2 & 7#b7 any o!r ,f$]al funds1 includ+ "u ! ,,c>es ,act 7,public ,law #aaf-acf71 = any digital contact-trac+ te*nology ) respect to ,,covid-#ai4 7c7 ,digital contact-,trac+ requirem5ts ,a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy may use a grant "u ?is section = digital contact trac+ te*nology1 z describ$ 9 subsection 7a71 only if ! te*nology meets ea* ( ! foll[+ requirem5ts3 7#a7 ,! te*nology %all be volunt>y = ! us] & provide to ! us] complete & cle> in=mation on ! int5d$ use & process+ ( data collect$ by ! te*nology4 ,to be volunt>y = ! us]1 ! te*nology %all meet requirem5ts includ+ ea* ( ! foll[+3 7,a7 ,use ( ! te*nology & ( contact-trac+ data collect$ us+ ! te*nology %all be pr$icat$ on ! us]'s affirmative cons5t4 7,b7 ,use ( ! te*nology %all n be a condition = ! reception ( gov]nm5t b5efits4 7,c7 ,use ( ! te*nology %all n be made a condition ( employm5t or employm5t /atus4 7#b7 ,! te*nology %all limit ! collection ( data by ! te*nology to only ! data t is necess>y to meet contact-trac+ objectives1 includ+-- 7,a7 ! /atus ( any p]son z an infect$ or pot5tially infect$ p]son2 & 7,b7 ! proximity ( a p]son to someone :o is symptomatic or has te/$ positive4 7#c7 ,! te*nology-- 7,a7 %all delete or de-id5tify any contact-trac+ data t is individually id5tifiable in=mation n lat] ?an ! date t is #cj days aft] ! end ( ! ,,covid-#ai em]g5cy decl>ation2 & 7,b7 %all include notifications to prompt us]s to disable or completely remove any digital contact-trac+ te*nology :]e practical4 7#d7 ,! te*nology %all h robu/ contact detection specifications1 includ+ = di/ance & "t1 t all[ = detection consi/5t ) guidance ( ! ,c5t]s = ,disease ,control & ,prev5tion on ,,covid-#ai4 7#e7 ,! te*nology %all ensure t ! /or+ ( proximity & any contact-trac+ data is encrypt$ to ! maximum ext5t possible4 7d7 ,plan = int]op]ability ,z a condition on receipt ( a grant "u ?is section1 a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy %all-- 7#a7 develop & make publicly available a plan = h[ ! digital contact-trac+ te*nology ( ! ag5cy ) respect to ,,covid-#ai augm5ts-- 7,a7 traditional contact trac+ ef=ts1 if applicable2 & 7,b7 /atewide ef=ts to prev5t1 prep>e =1 & respond to ,,covid-#ai2 & 7#b7 include 9 su* plan a description ( ! ag5cy's ef=ts to ensure t ! digital contact-trac+ te*nologies ( ! ag5cy ) respect to ,,covid-#ai are int]op]able ) ! digital contact-trac+ te*nology & public heal? ag5cy databases ( o!r jurisdictions ) respect to ,,covid-#ai2 & 7#c7 ensure t data collect$ by ! digital contact-trac+ te*nology ( ! ag5cy-- 7,a7 is access$ & process$ only by public heal? au?orities 7or _! designees72 & 7,b7 is n %>$ ) any p]son1 or access$ or us$ by any p]son1 = any purpose o!r ?an diagnosis1 conta9m5t1 treatm5t1 or r$uction (1 or rese>* into1 ,,covid-#ai4 7e7 ,indep5d5t security assessm5ts 7#a7 ,9 g5]al ,z a condition on receipt ( a grant "u ?is section1 a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy %all-- 7,a7 e/abli% proc$ures = complet+ or obta9+ indep5d5t security assessm5ts ( digital contact-trac+ infra/ructure to ensure t physical & network security is resili5t & secure2 & 7,b7 develop a process to address ! mitigation or rem$iation ( ! security vuln]abilities discov]$ dur+ su* indep5d5t security assessm5ts4 7#b7 ,s\rce code ,a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy %\ld consid] mak+ public ! s\rce code ( ! digital contact-trac+ te*nology us$ by ! ag5cy4 7f7 ,application ,to seek a grant "u ?is section1 an eligible ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy %all submit an application 9 su* =m1 9 su* mann]1 & conta9+ su* in=mation & assurances z ! ,director may require4 7g7 ,secur+ digital contact-,trac+ data 7#a7 ,9 g5]al ,! provisions ( ! ,,hipaa privacy & security law 7z def9$ 9 section #cjji7;a77#b7 ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #cjj;jj-#ai7;a77#b777 %all apply to a ,/ate1 ,tribal1 or t]ritorial public heal? ag5cy receiv+ a grant "u subsection 7a7 ) respect to individually id5tifiable heal? in=mation 7z def9$ 9 section #aaga7;a77#f7 ( ! ,social ,security ,act 7#db ,u4,s4,c4 #acbj;d7a77#f777 receiv$ by1 ma9ta9$ on1 or transmitt$ ?r\gh a contact-trac+ program describ$ 9 su* subsection 7a7 9 ! same mann] z su* provisions apply ) respect to su* in=mation & a cov]$ entity 7z def9$ 9 section #acdjj7c7 ( ! ,,hite* ,act 7#db ,u4,s4,c4 #agiba7c7774 7#b7 ,bus9ess associates 7,a7 ,9 g5]al ,any entity ) a contract 9 effect ) an ag5cy describ$ 9 p>agraph 7#a7 = ! developm5t1 ma9t5ance1 or op]ation ( a program describ$ 9 su* p>agraph %all be deem$ to be a bus9ess associate ( su* ag5cy = purposes ( subtitle ,d ( ! ,,hite* ,act 7#db ,u4,s4,c4 #agiba et seq474 7,b7 ,revision ( sample agreem5t ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y %all revise ! sample bus9ess associate agreem5t provisions publi%$ on ,janu>y #be1 #bjac1 to take acc\nt ( ! provisions ( ?is subsection4 7,c7 ,effective date ,! provisions ( subp>agraph 7,a7 %all apply beg9n+ on ! day aft] ! ,secret>y revises ! provisions describ$ 9 subp>agraph 7,b74 7h7 ,limitation on use ( data ,data g5]at$ 9 connection ) ! op]ation ( digital contact trac+ te*nology fund$ pursuant to ?is section may n be us$ = any punitive purpose1 includ+ law en=cem5t1 immigration en=cem5t1 or crim9al prosecution4 ,su* data & any in=mation d]iv$ f x1 :e!r 9 :ole or 9 "p1 may n be receiv$ z evid5ce 9 any trial1 he>+1 or o!r proce$+ 9 or be=e any c\rt1 gr& jury1 dep>tm5t1 (fic]1 ag5cy1 regulatory body1 legislative committee1 or o!r au?ority ( ! ,unit$ ,/ates1 a ,/ate1 or a political subdivision !re(4 7i7 ,report to ,congress ,n lat] ?an #ij days aft] ! date ( enactm5t ( ?is ,act1 ! ,comptroll] ,g5]al ( ! ,unit$ ,/ates %all-- 7#a7 evaluate ! outcome ( ! grants aw>d$ "u ?is section1 includ+ an assessm5t ( ! impact ( ! implem5tation ( digital contact-trac+ programs fund$ ?r\gh su* grants on ! spread ( ,,covid-#ai2 & 7#b7 submit to ! ,congress a report on ! results ( su* evaluation4 7j7 ,def9itions ,9 ?is section3 7#a7 ,affirmative express cons5t ,! t]m affirmative express cons5t means an affirmative act by an individual t cle>ly & conspicu\sly communicates ! individual's au?orization = an act or practice1 9 response to a specific reque/ t-- 7,a7 is provid$ to ! individual 9 a cle> & conspicu\s disclosure t is sep>ate f o!r options or acceptance ( g5]al t]ms2 7,b7 includes a description ( ea* act or practice = :i* ! individual's cons5t is s\ght &-- 7i7 is writt5 cle>ly & unmi/akably /at$2 & 7ii7 includes a prom95t head+ t w\ld enable a reasonable individual to id5tify & und]/& ! act or practice2 & 7,c7 _c be inf]r$ f inaction4 7#b7 ,contact-trac+ data ,! t]m contact-trac+ data means in=mation l9k$ or reasonably l9kable to a us] or device1 t-- 7,a7 conc]ns ! ,,covid-#ai p&emic2 & 7,b7 is ga!r$1 process$1 or transf]r$ by digital contact trac+ te*nology4 7#c7 ,,covid-#ai em]g5cy decl>ation ,! t]m ,,covid-#ai em]g5cy decl>ation has ! mean+ giv5 to su* t]m 9 section #aace7;g77#a77;,b7 ( ! ,social ,security ,act 7#db ,u4,s4,c4 #acbj;b-#e74 7#d7 ,de-id5tify ,! t]m de-id5tify means to ensure t in=mation _c reasonably id5tify1 relate to1 describe1 be capable ( be+ associat$ )1 or be l9k$1 directly or indirectly1 to a p>ticul> individual4 7#e7 ,designee ,! t]m designee-- 7,a7 subject to subp>agraph 7,b71 means any p]son or entity1 o!r ?an a public heal? ag5cy1 t collects1 processes1 or transf]s contact-trac+ data 9 ! c\rse ( p]=m+ a s]vice or function on behalf (1 = ! b5efit (1 "u in/ruction (1 & "u contractual agreem5t ) a public heal? au?ority2 & 7,b7 excludes any ,f$]al1 ,/ate1 ,tribal1 t]ritorial1 or local law 7includ+ immigration law7 en=cem5t p]sonnel or entity4 7#f7 ,digital contact-trac+ te*nology 7,a7 ,9 g5]al ,! t]m digital contact-trac+ te*nology means a website1 onl9e application1 mobile application1 mobile op]at+ sy/em feature1 or sm>t device application t is design$1 9 "p or 9 full1 = ! purpose (-- 7i7 det]m9+ t a contact incid5t has occurr$ relat+ to ! ,,covid-#ai p&emic2 & 7ii7 tak+ consequ5t /eps su* z report+ ! incid5t to a public heal? au?ority or us]1 or provid+ guidance or in/ructions to ! us] ( ! mobile device or ! us]'s h\sehold4 7,b7 ,limitations ,su* t]m does n include any te*nology to assi/ individuals to evaluate :e!r !y are exp]i5c+ ,,covid-#ai symptoms to ! ext5t ! te*nology is n us$ z describ$ 9 subp>agraph 7,a74 7#g7 ,director ,! t]m ,director means ! ,director ( ! ,c5t]s = ,disease ,control & ,prev5tion4 7#h7 ,mobile ,application ,! t]m mobile application means a s(tw>e program t runs on ! op]at+ sy/em ( a mobile device4 7#i7 ,mobile device ,! t]m mobile device means a sm>tphone1 tablet comput]1 or simil> portable comput+ device t transmits data ov] a wireless connection4 7#aj7 ,s\rce code ,! t]m s\rce code is ! programm+ in/ruction = a comput] program 9 its orig9al =m & sav$ 9 a file4 7#aa7 ,traditional contact trac+ ,! t]m traditional contact trac+ means contact trac+ by traditional means prior to contempor>y digital contact trac+4 7#ab7 ,us] ,! t]m us] means a memb] ( ! public :o utilizes ! s(tw>e or h>dw>e product4 7k7 ,au?orization ( appropriations ,to c>ry out ?is section1 !re are au?oriz$ to be appropriat$ #ge1jjj1jjj1 to rema9 available until exp5d$4