,,ii ,cal5d> ,no4 #add #aai? ,,congress 
#a/ ,session  ,s4 #aif ,report ,no4     
#aai-eg ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ 
,,/ates  ,janu>y #bb1 #bjbe,mrs4        
,blackburn 7= h]self & ,mr4 ,lujn7      
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation    
,septemb] #b1 #bjbe,report$ by ,mr4     
,cruz1 ) an amendment,strike out all    
aft] ! enact+ clause & ins]t ! "p pr9t$ 
9 italic  ,a ,,bill  ,to improve onl9e  
ticket sales & protect consum]s1 & = o!r
 purposes4  #a4 ,%ort title ,?is ,act   
may be cit$ z ! ,mitigat+ ,automat$     
,int]net ,networks = ,ev5t ,ticket+ ,act
 or ! ,,ma9 ,ev5t ,ticket+ ,act4  #b4   
,/r5g!n+ ! ,,bots ,act  7a7 ,9 g5]al    
,section #b ( ! ,bett] ,onl9e ,ticket   
,sales ,act ( #bjaf 7#ae ,u4,s4,c4      
#de;c7 is am5d$-- 7#a7 9 subsection     
7a77#a7-- 7,a7 9 subp>agraph 7,a71 by   
/rik+ 2 or & ins]t+ a semicolon2  7,b7 9
 subp>agraph 7,b71 by /rik+ ! p]iod at !
 end & ins]t+ 2 or2 &  7,c7 by add+ at !

 end ! foll[+ new subp>agraph3  7,c7 to 
use or cause to be us$ an application t 
p]=ms automat$ tasks to pur*ase ev5t    
tickets f an ,int]net website or onl9e  
s]vice 9 circumv5tion ( po/$ onl9e      
ticket pur*as+ ord] rules ( ! ,int]net  
website or onl9e s]vice1 includ+ a      
s(tw>e application t circumv5ts an      
access control sy/em1 security measure1 
or o!r te*nological control or measure4 
2  7#b7 by r$esignat+ subsections 7b7 & 
7c7 z subsections 7c7 & 7d71            
respectively2  7#c7 by ins]t+ aft]      
subsection 7a7 ! foll[+ new subsection3 
7b7 ,requir+ onl9e ticket issu]s ,to put
 9 place site policies & e/abli%        
safegu>ds ,to protect site security     
7#a7 ,requirem5t to en=ce site policies 
,ea* ticket issu] t owns or op]ates an  
,int]net website or onl9e s]vice t      
facilitates or executes ! sale ( ev5t   
tickets %all ensure t su* website or    
s]vice has 9 place an access control    
sy/em1 security measure1 or o!r         
te*nological control or measure to en=ce

 po/$ ev5t ticket pur*as+ limits4  7#b7 
,requirem5t to e/abli% site security    
safegu>ds  7,a7 ,9 g5]al ,ea* ticket    
issu] t owns or op]ates an ,int]net     
website or onl9e s]vice t facilitates or
 executes ! sale ( ev5t tickets %all    
e/abli%1 implem5t1 & ma9ta9 reasonable  
adm9i/rative1 te*nical1 & physical      
safegu>ds to protect ! security1        
confid5tiality1 integrity1 or           
availability ( ! website or s]vice4     
7,b7 ,consid]ations ,9 e/abli%+ !       
safegu>ds describ$ 9 subp>agraph 7,a71  
ea* ticket issu] describ$ 9 su* p>agraph
 %all consid]-- 7i7 ! adm9i/rative1     
te*nical1 & physical safegu>ds t are    
appropriate to ! size & complexity ( !  
ticket issu]2  7ii7 ! nature & scope ( !
 activities ( ! ticket issu]2  7iii7 !  
s5sitivity ( any cu/om] in=mation at    
issue2 &  7iv7 ! range ( security risks 
& vuln]abilities t are reasonably       
=eseeable or kn[n to ! ticket issu]4    
7,c7 ,?ird p>ties & s]vice provid]s  7i7
 ,9 g5]al ,:]e applicable1 a ticket     

issu] t owns or op]ates an ,int]net     
website or onl9e s]vice t facilitates or
 executes ! sale ( ev5t tickets %all    
implem5t & ma9ta9 proc$ures to require t
 any ?ird p>ty or s]vice provid] t p]=ms
 s]vices ) respect to ! sale ( ev5t     
tickets or has access to data reg>d+    
ev5t ticket pur*as+ on ! website or     
s]vice ma9ta9s reasonable adm9i/rative1 
te*nical1 & physical safegu>ds to       
protect ! security & integrity ( !      
website or s]vice & t data4  7ii7       
,ov]sight proc$ure requirem5ts ,!       
proc$ures implem5t$ & ma9ta9$ by a      
ticket issu] 9 accordance ) clause 7i7  
%all include ! foll[+3 7,i7 ,tak+       
reasonable /eps to select & reta9 s]vice
 provid]s t are capable ( ma9ta9+       
appropriate safegu>ds = ! cu/om]        
in=mation at issue4  7,,ii7 ,requir+    
s]vice provid]s by contract to implem5t 
& ma9ta9 adequate safegu>ds4  7,,iii7   
,p]iodically assess+ s]vice provid]s    
bas$ on ! risk !y pres5t & ! cont9u$    
adequacy ( _! safegu>ds4  7,d7 ,updates 

,a ticket issu] t owns or op]ates an    
,int]net website or onl9e s]vice t      
facilitates or executes ! sale ( ev5t   
tickets %all regul>ly evaluate & make   
adju/m5ts to ! safegu>ds describ$ 9     
subp>agraph 7,a7 9 light ( any mat]ial  
*anges 9 te*nology1 int]nal or ext]nal  
?reats to sy/em security1               
confid5tiality1 integrity1 &            
availability1 & ! *ang+ bus9ess         
arrangem5ts or op]ations ( ! ticket     
issu]4  7#c7 ,requirem5t to report      
incid5ts ( circumv5tion2 consum]        
compla9ts  7,a7 ,9 g5]al ,a ticket issu]
 t owns or op]ates an ,int]net website  
or onl9e s]vice t facilitates or        
executes ! sale ( ev5t tickets %all     
report to ! ,commission any incid5ts (  
circumv5tion ( :i* ! ticket issu] has   
actual k4  7,b7 ,consum] compla9t       
website ,n lat] ?an #ahj days aft] !    
date ( enactm5t ( ! ,mitigat+ ,automat$ 
,int]net ,networks = ,ev5t ,ticket+     
,act1 ! ,commission %all create a       
publicly available website 7or modify an

 exi/+ publicly available website ( !   
,commission7 to all[ individuals to     
report violations ( ?is subsection to ! 
,commission4  7,c7 ,report+ timel9e &   
process  7i7 ,timel9e ,a ticket issu]   
%all report kn[n incid5ts ( circumv5tion
 )9 a reasonable p]iod ( "t aft] !      
incid5t ( circumv5tion is discov]$ by ! 
ticket issu]1 & 9 no case lat] ?an #cj  
days aft] an incid5t ( circumv5tion is  
discov]$ by ! ticket issu]4  7ii7       
,automat$ submission ,! ,commission may 
e/abli% a report+ me*anism to provide = 
! automatic submission ( reports requir$
 "u ?is subsection4  7iii7 ,coord9ation 
) /ate attorneys g5]al ,! ,commission   
%all-- 7,i7 %>e reports receiv$ f ticket
 issu]s "u subp>agraph 7,a7 ) ,/ate     
attorneys g5]al z appropriate2 &  7,,ii7
 %>e consum] compla9ts submitt$ ?r\gh ! 
website e/abli%$ "u subp>agraph 7,b7 )  
,/ate attorneys g5]al z appropriate4    
7#d7 ,duty to address causes (          
circumv5tion ,a ticket issu] t owns or  
op]ates an ,int]net website or onl9e    

s]vice t facilitates or executes ! sale 
( ev5t tickets mu/ take reasonable /eps 
to improve its access control sy/ems1   
security measures1 & o!r te*nological   
controls or measures to address any     
incid5ts ( circumv5tion ( :i* ! ticket  
issu] has actual k4  7#e7 ,,ftc guidance
 ,n lat] ?an #a ye> aft] ! date (       
enactm5t ( ! ,mitigat+ ,automat$        
,int]net ,networks = ,ev5t ,ticket+     
,act1 ! ,commission %all publi% guidance
 = ticket issu]s on compliance ) !      
requirem5ts ( ?is subsection4  2  7#d7 9
 subsection 7c71 z r$esignat$ by        
p>agraph 7#a7 ( ?is subsection-- 7,a7 by
 /rik+ subsection 7a7 ea* place x appe>s
 & ins]t+ subsection 7a7 or 7b72  7,b7 9
 p>agraph 7#b7-- 7i7 9 subp>agraph 7,a71
 by /rik+ ,! ,commission & ins]t+       
,except z provid$ 9 p>agraph 7#c71 !    
,commission2 &  7ii7 9 subp>agraph 7,b71
 by /rik+ ,any p]son & ins]t+ ,subject  
to p>agraph 7#c71 any p]son2 &  7,c7 by 
add+ at ! end ! foll[+ new p>agraphs3   
7#c7 ,civil action  7,a7 ,9 g5]al ,if ! 

,commission has reason to believe t any 
p]son has committ$ a violation (        
subsection 7a7 or 7b71 ! ,commission may
 br+ a civil action 9 an appropriate    
di/rict c\rt ( ! ,unit$ ,/ates to-- 7i7 
recov] a civil p5alty "u p>agraph 7#d72 
&  7ii7 seek o!r appropriate relief1    
includ+ injunctive relief & o!r         
equitable relief4  7,b7 ,litigation     
au?ority ,except z o!rwise provid$ 9    
section #af7;a77#c7 ( ! ,f$]al ,trade   
,commission ,act 7#ae ,u4,s4,c4         
#ef7;a77#c771 ! ,commission %all h      
exclusive au?ority to comm5ce or def5d1 
& sup]vise ! litigation (1 any civil    
action au?oriz$ "u ?is p>agraph & any   
appeal ( su* action 9 its own "n by any 
( its attorneys designat$ by x = su*    
purpose1 unless ! ,commission au?orizes 
! ,attorney ,g5]al to d s4 ,!           
,commission %all in=m ! ,attorney ,g5]al
 ( ! ex]cise ( su* au?ority & su*       
ex]cise %all n preclude ! ,attorney     
,g5]al f int]v5+ on behalf ( ! ,unit$   
,/ates 9 su* action & any appeal ( su*  

action z may be o!rwise provid$ by law4 
7,c7 ,rule ( con/ruction ,any civil     
p5alty or relief s\ght ?r\gh a civil    
action "u ?is p>agraph %all be 9        
addition to o!r p5alties & relief z may 
be prescrib$ by law4  7#d7 ,civil       
p5alties  7,a7 ,9 g5]al ,any p]son :o   
violates subsection 7a7 or 7b7 %all be  
liable =-- 7i7 a civil p5alty ( n less  
?an #aj1jjj = ea* day dur+ :i* !        
violation occurs or cont9ues to occur2 &
  7ii7 an additional civil p5alty ( n   
less ?an #a1jjj p] violation4  7,b7     
,enhanc$ civil p5alty = int5tional      
violations ,9 addition to ! civil       
p5alties "u subp>agraph 7,a71 a p]son t 
int5tionally violates subsection 7a7 or 
7b7 %all be liable = a civil p5alty ( n 
less ?an #aj1jjj p] violation4  2  7#e7 
9 subsection 7d71 z r$esignat$ by       
p>agraph 7#a7 ( ?is subsection1 by /rik+
 subsection 7a7 ea* place x appe>s &    
ins]t+ subsection 7a7 or 7b72 &  7#f7 by
 add+ at ! end ! foll[+ new subsections3
  7e7 ,law en=cem5t coord9ation  7#a7 ,9

 g5]al ,! ,f$]al ,bureau (              
,inve/igation1 ! ,dep>tm5t ( ,ju/ice1 & 
o!r relevant ,/ate or local law en=cem5t
 (ficials %all coord9ate z appropriate )
 ! ,commission to %>e in=mation ab\t    
kn[n in/ances ( cyb]attacks on security 
measures1 access control sy/ems1 or o!r 
te*nological controls or measures on an 
,int]net website or onl9e s]vice t are  
us$ by ticket issu]s to en=ce po/$ ev5t 
ticket pur*as+ limits or to ma9ta9 !    
integrity ( po/$ onl9e ticket pur*as+   
ord] rules4 ,su* coord9ation may include
 provid+ in=mation ab\t ongo+           
inve/igations b may exclude classifi$   
in=mation or in=mation t c\ld compromise
 a law en=cem5t or national security    
ef=t1 z appropriate4  7#b7 ,cyb]attack  
def9$ ,9 ?is p>agraph1 ! t]m cyb]attack 
means an attack1 via cyb]space1 t>get+  
an ent]prise's use ( cyb]space = !      
purpose (-- 7,a7 disrupt+1 disabl+1     
de/roy+1 or malici\sly controll+ a      
comput+ environm5t or comput+           
infra/ructure2 or  7,b7 de/roy+ !       

integrity ( data or /eal+ controll$     
in=mation4  7f7 ,congressional report ,n
 lat] ?an #a ye> aft] ! date ( enactm5t 
( ?is p>agraph1 ! ,commission %all      
report to ,committee on ,comm]ce1       
,sci5ce1 & ,transportation ( ! ,s5ate & 
! ,committee on ,en]gy & ,comm]ce ( !   
,h\se ( ,repres5tatives on ! /atus (    
en=cem5t actions tak5 pursuant to ?is   
,act1 z well z any id5tifi$ limitations 
to ! ,commission's ability to pursue    
incid5ts ( circumv5tion describ$ 9      
subsection 7a77#a77;,a74  4  7b7        
,additional def9ition ,section #c ( !   
,bett] ,onl9e ,ticket ,sales ,act (     
#bjaf 7#ae ,u4,s4,c4 #de;c note7 is     
am5d$ by add+ at ! end ! foll[+ new     
p>agraph3  7#d7 ,circumv5tion ,! t]m    
circumv5tion means ! act ( avoid+1      
bypass+1 remov+1 deactivat+1 or o!rwise 
impair+ an access control sy/em1        
security measure1 safegu>d1 or o!r      
te*nological control or measure describ$
 9 section #b7;b77#a74  4  #a4 ,%ort    
title ,?is ,act may be cit$ z !         

,mitigat+ ,automat$ ,int]net ,networks =
 ,ev5t ,ticket+ ,act or ! ,,ma9 ,ev5t   
,ticket+ ,act4  #b4 ,/r5g!n+ ! ,,bots   
,act  7a7 ,9 g5]al ,section #b ( !      
,bett] ,onl9e ,ticket ,sales ,act (     
#bjaf 7#ae ,u4,s4,c4 #de;c7 is am5d$--  
7#a7 9 subsection 7a77#a7-- 7,a7 9      
subp>agraph 7,a7-- 7i7 by ins]t+ onl9e  
be=e ticket issu]2 &  7ii7 by /rik+ 2 or
 & ins]t+ a semicolon2  7,b7 9          
subp>agraph 7,b71 by /rik+ ! p]iod at ! 
end & ins]t+ 2 or2 &  7,c7 by add+ at ! 
end ! foll[+ new subp>agraph3  7,c7 to  
use or cause to be us$ an application1  
includ+ a s(tw>e application1 t p]=ms   
automat$ tasks to pur*ase ev5t tickets f
 an ,int]net website or onl9e s]vice us$
 by an onl9e ticket issu] ?r\gh !       
circumv5tion ( an access control sy/em1 
security measure1 or o!r te*nological   
control or measure us$ by su* ,int]net  
website or onl9e s]vice to en=ce po/$   
onl9e ticket pur*as+ ord] rules ( !     
,int]net website or onl9e s]vice4  2    
7#b7 by r$esignat+ subsections 7b7 & 7c7

 z subsections 7c7 & 7d71 respectively2 
7#c7 by ins]t+ aft] subsection 7a7 !    
foll[+ new subsection3  7b7 ,requir+    
onl9e ticket issu]s to en=ce site       
policies  7#a7 ,requirem5t to en=ce &   
update site policies ,ea* onl9e ticket  
issu] %all-- 7,a7 e/abli%1 implem5t1 &  
ma9ta9 an access control sy/em1 security
 measure1 or o!r te*nological control or
 measure to en=ce po/$ ev5t ticket      
pur*as+ limits & to ma9ta9 ! integrity (
 po/$ onl9e ticket pur*as+ ord] rules2 &
  7,b7 regul>ly evaluate & make         
adju/m5ts1 z necess>y1 to su* an access 
control sy/em1 security measure1 or o!r 
te*nological control or measure 9 light 
( any mat]ial *anges 9 te*nology1       
int]nal or ext]nal ?reats to sy/em      
security1 & ! *ang+ bus9ess arrangem5ts 
or op]ations ( ! ticket issu]4  7#b7    
,requirem5t to report incid5ts (        
circumv5tion2 consum] compla9ts  7,a7 ,9
 g5]al ,ea* onl9e ticket issu] %all     
report to ! ,commission any incid5ts (  
circumv5tion ( :i* ! ticket issu] has   

actual k n lat] ?an #cj days aft] !     
incid5t ( circumv5tion is discov]$ by ! 
onl9e ticket issu]4  7,b7 ,electronic   
submission ,! ,commission may e/abli% a 
report+ me*anism to provide = !         
electronic submission ( reports requir$ 
by subp>agraph 7,a74  7,c7 ,coord9ation 
) ,/ate attorneys g5]al ,! ,commission  
%all %>e ) ,/ate attorneys g5]al1 z     
appropriate-- 7i7 any report receiv$ f  
onl9e ticket issu]s "u subp>agraph 7,a72
 &  7ii7 consum] compla9ts relat$ to any
 violation ( ?is subsection t are       
submitt$ ?r\gh ! ,commission's website4 
7#c7 ,requirem5t to address kn[n causes 
( circumv5tion ,ea* onl9e ticket issu]  
%all take reasonable /eps to improve its
 access control sy/ems1 security        
measures1 & o!r te*nological controls or
 measures to address any kn[n or        
reasonably =eseeable risks connect$ to  
incid5ts ( circumv5tion4  7#d7          
,commission guidance ,n lat] ?an #a ye> 
aft] ! date ( enactm5t ( ! ,mitigat+    
,automat$ ,int]net ,networks = ,ev5t    

,ticket+ ,act1 ! ,commission %all publi%
 guidance = onl9e ticket issu]s reg>d+  
compliance ) ! requirem5ts ( ?is        
subsection4  2  7#d7 9 subsection 7c71 z
 r$esignat$ by p>agraph 7#b7 ( ?is      
subsection-- 7,a7 by /rik+ subsection   
7a7 ea* place x appe>s & ins]t+         
subsection 7a7 or 7b72 &  7,b7 by add+  
at ! end ! foll[+ new p>agraph3  7#c7   
,limitation on ,commission guidance     
7,a7 ,9 g5]al ,no guidance issu$ by !   
,commission ) respect to ?is ,act %all  
conf] any rights on any p]son1 ,/ate1 or
 locality1 nor %all op]ate to b9d !     
,commission or any p]son to ! approa*   
recomm5d$ 9 su* guidance4  7,b7         
,specific allegations ,9 any en=cem5t   
action br\ght pursuant to ?is ,act1 !   
,commission-- 7i7 %all allege a specific
 violation ( a provision ( ?is ,act2 &  
7ii7 may n base an en=cem5t action on1  
or execute a cons5t ord] bas$ on1       
practices t are alleg$ to be inconsi/5t 
) any su* guidance1 unless ! practices  
alleg$ly violate ?is ,act4  2  7#e7 9   

subsection 7d71 z r$esignat$ by p>agraph
 7#b7 ( ?is subsection1 by /rik+        
subsection 7a7 ea* place x appe>s &     
ins]t+ subsection 7a7 or 7b72 &  7#f7 by
 add+ at ! end ! foll[+ new subsections3
  7e7 ,law en=cem5t coord9ation  7#a7 ,9
 g5]al ,! ,f$]al ,bureau (              
,inve/igation1 ! ,attorney ,g5]al1 & o!r
 relevant ,/ate or local law en=cem5t   
(ficials %all coord9ate z appropriate ) 
! ,commission to %>e in=mation ab\t any 
kn[n in/ance ( a cyb]attack on a        
security measure1 access control sy/em1 
or o!r te*nological control or measure  
on an ,int]net website or onl9e s]vice t
 is us$ by an onl9e ticket issu] to     
en=ce po/$ ev5t ticket pur*as+ limits or
 to ma9ta9 ! integrity ( po/$ onl9e     
ticket pur*as+ ord] rules4 ,su*         
coord9ation may include provid+         
in=mation ab\t ongo+ inve/igations1 b   
may exclude classifi$ in=mation or      
in=mation t c\ld compromise a law       
en=cem5t or national security ef=t1 z   
appropriate4  7#b7 ,cyb]attack def9$ ,9 

?is p>agraph1 ! t]m cyb]attack means an 
attack1 via cyb]space1 t>get+ an        
ent]prise's use ( cyb]space = ! purpose 
(-- 7,a7 disrupt+1 disabl+1 de/roy+1 or 
malici\sly controll+ a comput+          
environm5t or comput+ infra/ructure2 or 
7,b7 de/roy+ ! integrity ( data or /eal+
 controll$ in=mation4  7f7              
,congressional report ,n lat] ?an #a ye>
 aft] ! date ( enactm5t ( ?is p>agraph1 
! ,commission %all report to ,committee 
on ,comm]ce1 ,sci5ce1 & ,transportation 
( ! ,s5ate & ! ,committee on ,en]gy &   
,comm]ce ( ! ,h\se ( ,repres5tatives on 
! /atus ( any en=cem5t action tak5      
pursuant to ?is ,act1 z well z any      
id5tifi$ limitations to ! ,commission's 
ability to pursue incid5ts (            
circumv5tion describ$ 9 subsection      
7a77#a77;,a74  4  7b7 ,additional       
def9itions ,section #c ( ! ,bett] ,onl9e
 ,ticket ,sales ,act ( #bjaf 7#ae       
,u4,s4,c4 #de;c note7 is am5d$ by add+  
at ! end ! foll[+ new p>agraphs3  7#d7  
,circumv5tion ,! t]m circumv5tion means 

! act ( avoid+1 bypass+1 remov+1        
deactivat+1 or o!rwise impair+ an access
 control sy/em1 security measure1       
safegu>d1 or o!r te*nological control or
 measure describ$ 9 section #b4  7#e7   
,onl9e ticket issu] ,! t]m onl9e ticket 
issu] means a ticket issu] t owns or    
op]ates an ,int]net website or onl9e    
s]vice t1 9 ! regul> c\rse ( trade or   
bus9ess ( ! issu]1 facilitates or       
executes ! sale ( ev5t tickets to !     
g5]al public4  4  ,septemb] #b1         
#bjbe,report$ ) an am5dm5t