SEC. 2. ENHANCED CYBERSECURITY FOR EBT CARDS. 
Section 7(h) of the Food and Nutrition Act of 2008 
(7 U.S.C. 2016(h)) is amended by adding at the end the 
following: 
‘‘(15) CYBERSECURITY OF EBT CARDS.— 
‘‘(A) DEFINITIONS.—In this paragraph: 
‘‘(i) CHIP-ENABLED.— 
‘‘(I) IN
GENERAL.—The term 
‘chip-enabled’, with respect to a pay-
ment card, means a payment card 
that uses industry standard secure 
payment technology, as identified by 
the Administrator of the Food and 
Nutrition Service in consultation with 
the Secretary of the Treasury and the 
Director of the National Institute of 
Standards and Technology, that— 
‘‘(aa) provides for secure 
card-based payment; and 
‘‘(bb) is resistant to cloning. 
‘‘(II) EMV CHIP.—The Adminis-
trator of the Food and Nutrition 
Service, in consultation with the Sec-
retary of the Treasury and the Direc-
tor of the National Institute of Stand-
ards and Technology, shall consider 
VerDate Sep 11 2014 
17:39 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS
whether the secure payment tech-
nology described in subclause (I) 
should meet the standards published 
by EMVCo for contact and contactless 
payments. 
‘‘(ii) MOBILE
FRIENDLY.—The term 
‘mobile friendly’ has the meaning given the 
term in section 3559(b) of title 44, United 
States Code. 
‘‘(iii) NIST 
PIN
AND
PASSWORD 
STANDARDS.—The term ‘NIST PIN and 
password standards’ means the PIN and 
password standards described in Special 
Publication 
800–63B 
entitled 
‘Digital 
Identity Guidelines’ (or a successor docu-
ment) of the National Institute of Stand-
ards and Technology. 
‘‘(iv) PIN.—The term ‘PIN’ has the 
meaning given the term ‘personal identi-
fication number (PIN)’ in section 271.2 of 
title 7, Code of Federal Regulations (or 
successor regulations). 
‘‘(B) REGULATIONS.— 
‘‘(i) IN GENERAL.—Not later than 2 
years after the date of enactment of this 
VerDate Sep 11 2014 
17:39 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS
paragraph, the Secretary shall promulgate, 
and every 5 years thereafter, the Secretary 
shall review and update as necessary, cy-
bersecurity and digital service regulations 
relating to EBT cards and mobile pay-
ments under the supplemental nutrition as-
sistance program, including, at a min-
imum, to ensure that cybersecurity meas-
ures for EBT cards and mobile payments 
keep pace with security safeguards used by 
the private sector and required by Federal 
agencies for credit, debit, and other pay-
ment cards and mobile payments. 
‘‘(ii) REQUIREMENTS.—The Secretary 
shall ensure that the cybersecurity and dig-
ital service regulations described in clause 
(i) require the following: 
‘‘(I)(aa) Each State shall operate 
the user interfaces listed on the list of 
required user interfaces maintained by 
the Secretary under item (dd)(AA), in 
accordance with this subclause, 1 or 
more user interfaces of which house-
holds in the State may, at the election 
of the applicable household, use to 
VerDate Sep 11 2014 
15:49 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS
manage the EBT account of the ap-
plicable household. 
‘‘(bb)(AA) A State may operate 
other user interfaces under item (aa) 
in addition to the required user inter-
faces on the list maintained by the 
Secretary under item (dd)(AA). 
‘‘(BB) Any web-based online por-
tal operated by a State as a user 
interface shall be mobile friendly. 
‘‘(cc) Each user interface offered 
by a State under items (aa) and (bb), 
as applicable, shall— 
‘‘(AA) provide information 
in each language in which the 
State agency is required to make 
material available pursuant to 
section 272.4(b) of title 7, Code 
of Federal Regulations (or suc-
cessor regulations); 
‘‘(BB) be available to house-
holds at least 99 percent of the 
time; and 
‘‘(CC) include any other fea-
tures required by the Secretary. 
VerDate Sep 11 2014 
15:49 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS
‘‘(dd)(AA) The Secretary shall 
maintain a list of required user inter-
faces for purposes of item (aa), which 
may include a web-based online portal 
and a mobile application. 
‘‘(BB) The list under subitem 
(AA) shall include an application pro-
gramming interface through which at 
least 1 user interface offered by a 
State under item (aa) allows house-
holds to delegate access to some or all 
account features identified by the Sec-
retary to third-party provided soft-
ware. No fee shall be charged to any 
party for the use of that application 
programming interface. 
‘‘(CC) During the 10-year period 
following the date on which the regu-
lations 
promulgated 
pursuant 
to 
clause (i) become final, unless the 
Secretary extends that period, the 
Secretary shall maintain on the list 
under subitem (AA) the following user 
interfaces: text message, voice tele-
phone service, and a nondigital user 
VerDate Sep 11 2014 
15:49 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00006
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS
interface that does not require the use 
of a phone or computer by the house-
hold. 
‘‘(II)(aa) Each State shall pro-
vide households on an opt-in basis— 
‘‘(AA) through each digital 
user interface offered under sub-
clause (I), timely electronic notice 
of transactions using the EBT 
account of the household; and 
‘‘(BB) through each user 
interface offered under subclause 
(I), access to, including the abil-
ity to search, historical trans-
actions for not less than the pre-
ceding 12 months. 
‘‘(bb) Transaction information 
under subitems (AA) and (BB) of 
item (aa) shall include the amount of 
the transaction, the merchant for the 
transaction, the city and State of the 
merchant for an in-person trans-
action, and the delivery address or 
collection address for an online trans-
action. 
VerDate Sep 11 2014 
17:39 Mar 17, 2024
Jkt 049200
PO 00000
Frm 00007
Fmt 6652
Sfmt 6201
E:\BILLS\H7585.IH
H7585
ssavage on LAPJG3WLY3PROD with BILLS