,i #aafth ,,congress #b;d ,session ,h4 ,r4 #hbae ,,in ,,the ,,house ,,of ,,representatives ,september #aa1 #bjbj,mr4 ,foster 7for himself1 ,mr4 ,katko1 ,mr4 ,langevin1 and ,mr4 ,loudermilk7 introduced the following bill2 which was referred to the ,committee on ,oversight and ,reform1 and in addition to the ,committees on ,science1 ,space1 and ,technology1 and ,ways and ,means1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,a ,,bill ,to establish a governmentwide approach to improving digital identity1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,improving ,digital ,identity ,act of #bjbj4 #b4 ,findings ,congress finds the following3 7#a7 ,the lack of an easy1 affordable1 and reliable way for organizations1 businesses1 and government agencies to identify whether an individual is who they claim to be online creates an attack vector that is widely exploited by adversaries in cyberspace1 and precludes many high-value transactions from being available online4 7#b7 ,incidents of identity theft and identity fraud continue to rise in the ,united ,states1 where more than #afd1jjj1jjj consumer records containing personally identifiable information were breached in #bjai1 increasing the total number of data breaches by #ag percent from the previous year4 7#c7 ,in #bjai1 losses resulting from identity fraud amounted to #af1ijj1jjj1jjj4 7#d7 ,in #bjai1 the ,director of the ,treasury ,department ,financial ,crimes ,enforcement ,network stated1 8,the abuse of personally identifiable information1 and other building blocks of identity1 is a key enabler behind much of the fraud and cybercrime affecting our nation today40 7#e7 ,trustworthy digital identity solutions can help under-banked and unbanked individuals better access to digital financial services through innovative delivery channels that promote financial inclusion4 7#f7 ,the inadequacy of current digital identity solutions degrades security and privacy for all ,americans1 and next generation solutions are needed that improve both security and privacy4 7#g7 ,government entities1 as authoritative issuers of identity in the ,united ,states1 are uniquely positioned to deliver critical components that address deficiencies in our digital identity infrastructure and augment private sector digital identity and authentication solutions4 7#h7 ,state governments are particularly well suited to play a role in enhancing digital identity solutions used by both the public and private sectors1 given the role of ,state governments as the issuers of driver's licenses and other identity documents commonly used today4 7#i7 ,the private sector drives much of the innovation around digital identity in the ,united ,states and has an important role to play in delivering digital identity solutions4 7#aj7 ,the #bjaf bipartisan ,commission on ,enhancing ,national ,cybersecurity called for the ,federal government to 8create an interagency task force directed to find secure1 user-friendly1 privacy-centric ways in which agencies can serve as one authoritative source to validate identity attributes in the broader identity market4 ,this action would enable government agencies and the private sector to drive significant risk out of new account openings and other high-risk1 high-value online services1 and it would help all citizens more easily and securely engage in transactions online40 7#aa7 ,the public and private sectors should collaborate to deliver solutions that promote confidence1 privacy1 choice1 and innovation4 7#ab7 ,it should be the policy of the ,government to use the authorities and capabilities of the ,government to enhance the security1 reliability1 privacy1 and convenience of digital identity solutions that support and protect transactions between individuals1 government entities1 and businesses1 and that enable ,americans to prove who they are online4 #c4 ,improving digital identity task force 7a7 ,establishment ,there is established in the ,executive ,office of the ,president a task force to be known as the ,improving ,digital ,identity ,task ,force 7in this section referred to as the ,task ,force74 7b7 ,purpose ,the purpose of the ,task ,force is to establish a governmentwide effort to develop secure methods for ,federal1 ,state1 and local agencies to validate identity attributes to protect the privacy and security of individuals and support reliable1 interoperable digital identity verification in the public and private sectors4 7c7 ,director ,the ,task ,force shall have a ,director who shall be appointed by the ,president4 7d7 ,membership ,the ,task ,force shall include the following individuals or the designees of such individuals3 7#a7 ,federal ,government membership 7,a7 ,the ,secretary of the ,treasury4 7,b7 ,the ,secretary of ,homeland ,security4 7,c7 ,the ,secretary of ,state4 7,d7 ,the ,secretary of ,education4 7,e7 ,the ,director of the ,office of ,management and ,budget4 7,f7 ,the ,commissioner of the ,social ,security ,administration4 7,g7 ,the ,director of the ,national ,institute of ,standards and ,technology4 7,h7 ,the ,administrator of ,general ,services4 7,i7 ,the heads of other ,federal agencies and offices who the ,president may designate or invite4 7#b7 ,state government membership ,the ,task ,force shall include #e ,state government officials who represent ,state agencies that issue identity credentials and who have knowledge of the systems used to provide such credentials4 ,such officials shall include the following3 7,a7 ,a member appointed by the ,speaker of the ,house of ,representatives1 in consultation with the ,chairman of the ,committee on ,oversight and ,reform and the ,chairman of the ,committee on ,homeland ,security of the ,house of ,representatives4 7,b7 ,a member appointed by the minority leader of the ,house of ,representatives1 in consultation with the ,ranking ,member of the ,committee on ,oversight and ,reform and the ,ranking ,member of the ,committee on ,homeland ,security of the ,house of ,representatives4 7,c7 ,a member appointed by the majority leader of the ,senate1 in consultation with the ,chairman of the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate4 7,d7 ,a member appointed by the minority leader of the ,senate1 in consultation with the ,ranking ,member of the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate4 7,e7 ,a member appointed by the ,president4 7#c7 ,local government membership ,the ,task ,force shall include #e local government officials who represent local agencies that issue identity credentials and who have knowledge of the systems used to provide such credentials4 ,such officials shall include the following3 7,a7 ,a member appointed by the ,speaker of the ,house of ,representatives1 in consultation with the ,chairman of the ,committee on ,oversight and ,reform and ,chairman of the ,committee on ,homeland ,security of the ,house of ,representatives4 7,b7 ,a member appointed by the minority leader of the ,house of ,representatives1 in consultation with the ,chairman of the ,committee on ,oversight and ,reform and the ,chairman of the ,committee on ,homeland ,security of the ,house of ,representatives4 7,c7 ,a member appointed by the majority leader of the ,senate1 in consultation with the ,chairman of the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate4 7,d7 ,a member appointed by the minority leader of the ,senate1 in consultation with the ,ranking ,member of the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate4 7,e7 ,a member appointed by the ,president4 7e7 ,meetings ,the ,task ,force shall convene at the call of the ,director4 7f7 ,duties ,the ,task ,force shall-- 7#a7 identify ,federal1 ,state1 and local agencies that issue identity information or hold information related to identifying an individual2 7#b7 assess restrictions with respect to the abilities of such agencies to verify identity information for other agencies and for nongovernmental organizations2 7#c7 assess any necessary changes in statute1 regulation1 or policy to address any restrictions determined under paragraph 7#b72 7#d7 recommend a standards-based architecture to enable agencies to provide services related to digital identity verification in a way that is secure1 protects privacy1 and is rooted in consumer consent2 7#e7 identify funding or resources needed to support such agencies that provide digital identity verification1 including a recommendation with respect to additional funding required for the grant program under section #e2 7#f7 determine whether it would be practicable for such agencies to use a fee-based model to provide digital identity verification to private sector entities2 7#g7 determine if any additional steps are necessary with respect to ,federal1 ,state1 and local agencies to improve digital identity verification and management processes for the purpose of enhancing the security1 reliability1 privacy1 and convenience of digital identity solutions that support and protect transactions between individuals1 government entities1 and businesses2 7#h7 assess risks related to potential criminal exploitation of digital identity verification services2 and 7#i7 to the extent practicable1 seek input from and collaborate with interested parties in the private sector to carry out the purpose under subsection 7b74 7g7 ,recommendations ,not later than #ahj days after the date of the enactment of this ,act1 the ,task ,force shall publish a report on the activities of the ,task force1 including recommendations on-- 7#a7 priorities for research and development in the systems that enable digital identity verification1 including how such priorities can be executed2 and 7#b7 the standards-based architecture developed pursuant to subsection 7f77#d74 #d4 ,digital identity standards 7a7 ,establishment of a standards framework ,the ,director of the ,national ,institute of ,standards and ,technology 7in this section referred to as the ,director7 shall develop a framework of standards1 methodologies1 procedures1 and processes 7in this section referred to as the ,framework7 as a guide for ,federal1 ,state1 and local governments to follow when providing services related to digital identity verification4 7b7 ,consideration ,in developing the ,framework1 the ,director shall consider-- 7#a7 methods to protect the privacy of individuals2 7#b7 security needs2 and 7#c7 the needs of potential end-users and individuals that will use services related to digital identity verification4 7c7 ,consultation ,in carrying out subsection 7a71 the ,director shall consult with-- 7#a7 the ,improving ,digital ,identity ,task ,force established under section #c2 7#b7 potential end-users and individuals that will use services related to digital identity verification2 and 7#c7 experts with relevant experience in the systems that enable digital identity verification1 as determined by the ,director4 7d7 ,interim publication ,not later than #bdj days after the date of the enactment of this ,act1 the ,director shall publish an interim version of the ,framework4 7e7 ,final publication ,not later than #a year after the date of the enactment of this ,act1 the ,director shall publish a final version of the ,framework4 7f7 ,updates to the ,framework ,the ,director shall1 from time to time1 update the ,framework1 with consideration given to-- 7#a7 feedback from ,federal1 ,state1 and local agencies that provide services related to digital identity verification2 and 7#b7 any technological changes to the systems that enable digital identity verification4 #e4 ,digital identity innovation grants 7a7 ,establishment ,not later than #ah months after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security 7in this section referred to as the ,secretary7 shall award grants to ,states to upgrade systems that provide drivers' licenses or other types of identity credentials to support the development of highly secure1 interoperable ,state systems that enable digital identity verification4 7b7 ,use of funds ,a ,state that receives a grant under this section shall use-- 7#a7 grant funds for services related to digital identity verification using the ,framework developed pursuant to section #d2 and 7#b7 not less than #aj percent of grant funds to provide services that assist individuals with obtaining identity credentials or identity verification services needed to obtain a driver's license or ,state identity card4 7c7 ,authorization of appropriations ,there is authorized to be appropriated to the ,secretary such sums as may be necessary to carry out this section4 #f4 ,report and recommendation on the use of social security numbers by nongovernmental organizations ,not later than #a year after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall submit to the ,committees on ,ways and ,means and ,financial ,services of the ,house of ,representatives and the ,committee on ,finance of the ,senate a report that includes the following3 7#a7 ,an analysis of legal and regulatory requirements with respect to the collection and retention of ,social ,security numbers by nongovernmental organizations4 7#b7 ,a recommendation on the necessity and effectiveness of any legal and regulatory requirement analyzed pursuant to paragraph 7#a7 and the use of a form of identification other than a ,social ,security number4 #g4 ,security enhancements to ,federal systems 7a7 ,directives for ,federal agencies ,not later than #f months after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security shall issue binding operational directives to ,federal agencies for purpose of implementing-- 7#a7 the guidelines published by the ,national ,institute of ,standards and ,technology in ,special ,publication #hjj-fc 7commonly referred to as the ,digital ,identity ,guidelines72 and 7#b7 the memorandum of the ,office of ,management and ,budget issued on ,may #ba1 #bjai1 which includes the subject ,enabling ,mission ,delivery through ,improved ,identity1 ,credential1 and ,access ,management4 7b7 ,reports 7#a7 ,federal ,agency reports ,not later than #a year after the date of the enactment of this ,act1 the head of each ,federal agency shall submit to the ,secretary of ,homeland ,security a report on the efforts of each such ,federal agency to implement the directives issued pursuant to subsection 7a74 7#b7 ,report to ,congress ,not later than #b years after the date of the enactment of this ,act1 the ,secretary of ,homeland ,security shall submit a report summarizing the efforts from the reports submitted pursuant to paragraph 7#a7 to the following3 7,a7 ,the ,committee on ,homeland ,security of the ,house of ,representatives4 7,b7 ,the ,committee on ,oversight and ,reform of the ,house of ,representatives4 7,c7 ,the ,committee on ,homeland ,security and ,governmental ,affairs of the ,senate4 #h4 ,definitions ,for purposes of this ,act3 7#a7 ,digital identity verification ,the term digital identity verification means a process to verify the identity of an individual accessing a service online or through another electronic means4 7#b7 ,identity credential ,the term identity credential means a document or other evidence of the identity of an individual issued by a government agency that conveys the identity of the individual1 including a driver's license or passport4