H.R. 404 · 115th Congress
Safe and Secure Federal Websites Act of 2017
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 115th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
R
FleischmannSponsorNo cosponsors.
This bill prohibits a federal agency from deploying or making available to the public a new federal personally identifiable information website (new Federal PII Website) until the chief information officer of the agency submits a certification to Congress that the website is fully functional and secure.
What it does: CRS summary · Introduced in House · Jan 10, 2017
Safe and Secure Federal Websites Act of 2017
This bill prohibits a federal agency from deploying or making available to the public a new federal personally identifiable information website (new Federal PII Website) until the chief information officer of the agency submits a certification to Congress that the website is fully functional and secure. "New Federal PII website" is defined as a website that: (1) is operated by (or under contract with) an agency; (2) elicits, collects, stores, or maintains personally identifiable information (i.e., information that can be used to identify an individual, such as a social security number, a date and place of birth, a mother's maiden name, biometric records, or other information linked to an individual); and (3) is first made accessible to the public and collects or stores personally identifiable information on or after October 1, 2012.
Beta websites designed for testing and development are exempted if users execute an agreement acknowledging the risks involved.
The Office of Management and Budget (OMB) must establish and oversee policies and procedures for federal agencies to follow in the event of a breach of information security involving the disclosure of personally identifiable information, including: (1) notice, by 72 hours after discovery of a breach or possible breach, to individuals whose personally identifiable information could be compromised as a result of such breach; (2) timely reporting to a federal cybersecurity center designated by this bill; and (3) any additional actions that the OMB finds necessary and appropriate.
The bill requires: (1) agency heads to ensure that agency actions taken in response to a breach comply with OMB policies and procedures established by this bill; and (2) the OMB to report to Congress, by March 1 of each year, on agency compliance with such policies and procedures.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Safe and Secure Federal Websites Act of 2017
Latest action (Jan 10, 2017): Referred to the House Committee on Oversight and Government Reform.
Policy area: Government Operations and Politics · Origin: House · Introduced: Jan 10, 2017
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.