In this task, you are given text for US Congressional and California state bills, your task is to generate a summary for this bill.

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Safe and Secure Federal Websites Act 
of 2015''.

SEC. 2. ENSURING FUNCTIONALITY AND SECURITY OF NEW FEDERAL WEBSITES 
              THAT COLLECT PERSONALLY IDENTIFIABLE INFORMATION.

    (a) Certification Requirement.--
            (1) In general.--Except as otherwise provided under this 
        subsection, an agency may not deploy or make available to the 
        public a new Federal PII website until the date on which the 
        chief information officer of the agency submits a certification 
        to Congress that the website is fully functional and secure.
            (2) Transition.--In the case of a new Federal PII website 
        that is operational on the date of the enactment of this Act, 
        paragraph (1) shall not apply until the end of the 90-day 
        period beginning on such date of enactment. If the 
        certification required under paragraph (1) for such website has 
        not been submitted to Congress before the end of such period, 
        the head of the responsible agency shall render the website 
        inaccessible to the public until such certification is 
        submitted to Congress.
            (3) Exception for beta website with explicit permission.--
        Paragraph (1) shall not apply to a website (or portion thereof) 
        that is in a development or testing phase, if the following 
        conditions are met:
                    (A) A member of the public may access PII-related 
                portions of the website only after executing an 
                agreement that acknowledges the risks involved.
                    (B) No agency compelled, enjoined, or otherwise 
                provided incentives for such a member to access the 
                website for such purposes.
            (4) Construction.--Nothing in this section shall be 
        construed as applying to a website that is operated entirely by 
        an entity (such as a State or locality) that is independent of 
        the Federal Government, regardless of the receipt of funding in 
        support of such website from the Federal Government.
    (b) Definitions.--In this section:
            (1) Agency.--The term ``agency'' has the meaning given that 
        term under section 551 of title 5, United States Code.
            (2) Fully functional.--The term ``fully functional'' means, 
        with respect to a new Federal PII website, that the website can 
        fully support the activities for which it is designed or 
        intended with regard to the eliciting, collection, storage, or 
        maintenance of personally identifiable information, including 
        handling a volume of queries relating to such information 
        commensurate with the purpose for which the website is 
        designed.
            (3) New federal personally identifiable information website 
        (new federal pii website).--The terms ``new Federal personally 
        identifiable information website'' and ``new Federal PII 
        website'' mean a website that--
                    (A) is operated by (or under a contract with) an 
                agency;
                    (B) elicits, collects, stores, or maintains 
                personally identifiable information of individuals and 
                is accessible to the public; and
                    (C) is first made accessible to the public and 
                collects or stores personally identifiable information 
                of individuals, on or after October 1, 2012.
            (4) Operational.--The term ``operational'' means, with 
        respect to a website, that such website elicits, collects, 
        stores, or maintains personally identifiable information of 
        members of the public and is accessible to the public.
            (5) Personally identifiable information (pii).--The terms 
        ``personally identifiable information'' and ``PII'' mean any 
        information about an individual elicited, collected, stored, or 
        maintained by an agency, including--
                    (A) any information that can be used to distinguish 
                or trace the identity of an individual, such as a name, 
                a social security number, a date and place of birth, a 
                mother's maiden name, or biometric records; and
                    (B) any other information that is linked or 
                linkable to an individual, such as medical, 
                educational, financial, and employment information.
            (6) Responsible agency.--The term ``responsible agency'' 
        means, with respect to a new Federal PII website, the agency 
        that is responsible for the operation (whether directly or 
        through contracts with other entities) of the website.
            (7) Secure.--The term ``secure'' means, with respect to a 
        new Federal PII website, that the following requirements are 
        met:
                    (A) The website is in compliance with subchapter II 
                of chapter 35 of title 44, United States Code.
                    (B) The website ensures that personally 
                identifiable information elicited, collected, stored, 
                or maintained in connection with the website is 
                captured at the latest possible step in a user input 
                sequence.
                    (C) The responsible agency for the website has 
                encrypted, masked, or taken other similar actions to 
                protect personally identifiable information elicited, 
                collected, stored, or maintained in connection with the 
                website.
                    (D) The responsible agency for the website has 
                taken reasonable efforts to minimize domain name 
                confusion, including through additional domain 
                registrations.
                    (E) The responsible agency requires all personnel 
                who have access to personally identifiable information 
                in connection with the website to have completed a 
                Standard Form 85P and signed a non-disclosure agreement 
                with respect to personally identifiable information, 
                and the agency takes proper precautions to ensure that 
                only the fewest reasonable number of trustworthy 
                persons may access such information.
                    (F) The responsible agency maintains (either 
                directly or through contract) sufficient personnel to 
                respond in a timely manner to issues relating to the 
                proper functioning and security of the website, and to 
                monitor on an ongoing basis existing and emerging 
                security threats to the website.
            (8) State.--The term ``State'' means each State of the 
        United States, the District of Columbia, each territory or 
        possession of the United States, and each federally recognized 
        Indian tribe.

SEC. 3. PRIVACY BREACH REQUIREMENTS.

    (a) Information Security Amendment.--Subchapter II of chapter 35 of 
title 44, United States Code, is amended by adding at the end the 
following:
``Sec. 3559. Privacy breach requirements
    ``(a) Policies and Procedures.--The Director of the Office of 
Management and Budget shall establish and oversee policies and 
procedures for agencies to follow in the event of a breach of 
information security involving the disclosure of personally 
identifiable information, including requirements for--
            ``(1) not later than 72 hours after the agency discovers 
        such a breach, or discovers evidence that reasonably indicates 
        such a breach has occurred, notice to the individuals whose 
        personally identifiable information could be compromised as a 
        result of such breach;
            ``(2) timely reporting to a Federal cybersecurity center, 
        as designated by the Director of the Office of Management and 
        Budget; and
            ``(3) any additional actions that the Director finds 
        necessary and appropriate, including data breach analysis, 
        fraud resolution services, identity theft insurance, and credit 
        protection or monitoring services.
    ``(b) Required Agency Action.--The head of each agency shall ensure 
that actions taken in response to a breach of information security 
involving the disclosure of personally identifiable information under 
the authority or control of the agency comply with policies and 
procedures established by the Director of the Office of Management and 
Budget under subsection (a).
    ``(c) Report.--Not later than March 1 of each year, the Director of 
the Office of Management and Budget shall report to Congress on agency 
compliance with the policies and procedures established under 
subsection (a).
    ``(d) Federal Cybersecurity Center Defined.--The term `Federal 
cybersecurity center' means any of the following:
            ``(1) The Department of Defense Cyber Crime Center.
            ``(2) The Intelligence Community Incident Response Center.
            ``(3) The United States Cyber Command Joint Operations 
        Center.
            ``(4) The National Cyber Investigative Joint Task Force.
            ``(5) Central Security Service Threat Operations Center of 
        the National Security Agency.
            ``(6) The United States Computer Emergency Readiness Team.
            ``(7) Any successor to a center, team, or task force 
        described in paragraphs (1) through (6).
            ``(8) Any center that the Director of the Office of 
        Management and Budget determines is appropriate to carry out 
        the requirements of this section.''.
    (b) Technical and Conforming Amendment.--The table of sections for 
subchapter II of chapter 35 of title 44, United States Code, is amended 
by adding at the end the following:

``3559. Privacy breach requirements.''.
Safe and Secure Federal Websites Act of 2015 This bill establishes security and privacy requirements for new federal websites that collect personally identifiable information (PII) (i.e., information that can be used to distinguish or trace the identity of an individual or that is linked or linkable to an individual).  (Sec. 2) A federal agency may not deploy or make available to the public a new federal PII website until the agency's chief information officer (CIO) certifies to Congress that the website is fully functional and secure. The CIO must make such certification within 90 days after enactment of this Act. After such 90-day period, any new federal PII website that has not been certified must be rendered inaccessible until certification is submitted.  The prohibition does not apply to a website that is: (1) operated entirely by an entity that is independent of the federal government, or (2) in a development or testing phase (beta website). The exemption for beta websites applies only if: (1) a member of the public may access PII-related portions of the website only after executing an agreement that acknowledges the risks involved; and (2) no agency compelled, enjoined, or otherwise provided incentives for a member of the public to access such website.  The bill defines a "new federal PII website" as a website that: (1) is operated by (or under contract with) an agency; (2) elicits, collects, stores, or maintains PII and is accessible to the public; and (3) is first made accessible to the public and collects or stores PII on or after October 1, 2012. The bill also sets forth requirements that must be met to deem a new federal PII website as "secure." (Sec. 3) The Director of the Office of Management and Budget (OMB) must establish and oversee policies and procedures for federal agencies to follow in the event of a breach of information security involving the disclosure of PII, including: (1) notice, not later than 72 hours after discovery of a breach or possible breach, to individuals whose PII could be compromised; and (2) timely reporting to a federal cybersecurity center designated by the OMB and defined in this Act.  Agency heads must ensure that agency actions taken in response to a breach of information security involving the disclosure of PII comply with OMB policies and procedures established by this Act. The OMB must report to Congress, not later than March 1 of each year, on agency compliance with such policies and procedures.  A "federal cybersecurity center" is defined to include: (1) the Department of Defense Cyber Crime Center, (2) the Intelligence Community Incident Response Center, (3) the U.S. Cyber Command Joint Operations Center, (4) the National Cyber Investigative Task Force, (5) the Central Security Service Threat Operations Center of the National Security Agency, (6) the U.S. Computer Emergency Readiness Team, and (7) any center that the OMB determines is appropriate to carry out privacy breach notice and reporting requirements. 

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``State Long-Term Care Partnership Act 
of 2005''.

SEC. 2. ALLOWANCE OF ADDITIONAL STATE LONG-TERM CARE PARTNERSHIPS.

    (a) In General.--Section 1917(b) of the Social Security Act (42 
U.S.C. 1396(b)) is amended--
            (1) in paragraph (1)(C)(i), by striking ``shall seek 
        adjustment'' and inserting ``may seek adjustment'';
            (2) in paragraph (1)(C)(ii), by inserting ``Qualified State 
        Long-Term Care Insurance Partnership or under a'' after 
        ``Clause (i) shall not apply in the case of an individual who 
        received medical assistance under a''; and
            (3) in paragraph (4)(B), by striking ``(and shall include, 
        in the case of an individual to whom paragraph (1)(C)(i) 
        applies)''.
    (b) Definition of a Qualified State Long-Term Care Insurance 
Partnership.--Section 1917(e) of the Social Security Act (42 U.S.C. 
1396p(e)) is amended by inserting at the end the following:
            ``(6) The term `Qualified State Long-Term Care Insurance 
        Partnership' means a State plan amendment that provides for the 
        disregard of any assets or resources in an amount equal to the 
        insurance benefits payments that are made under a long-term 
        care insurance policy (including a certificate issued under a 
        group insurance contract), but only if--
                    ``(A) the policy covers an insured who, at the time 
                coverage under the policy first becomes effective, is a 
                resident of such State or of a State that maintains a 
                Qualified Long-Term Care Insurance Partnership;
                    ``(B) the policy is a qualified long-term care 
                insurance contract within the meaning of section 
                7702B(b) of the Internal Revenue Code of 1986;
                    ``(C) the policy provides some level of inflation 
                protection;
                    ``(D) the policy satisfies any requirements of 
                State or other applicable law that apply to a long-term 
                care insurance policy; and
                    ``(E) the issuer of the policy reports--
                            ``(i) to the Secretary, such information or 
                        data as the Secretary may require; and
                            ``(ii) to the State, the information or 
                        data reported to the Secretary (if any), the 
                        information or data required under the minimum 
                        reporting requirements developed under section 
                        2(c)(1) of the State Long-Term Care Partnership 
                        Act of 2005, and such additional information or 
                        data as the State may require.
        For purposes of applying this paragraph, if a long-term care 
        insurance policy is exchanged for another such policy, the date 
        coverage became effective under the first policy shall 
        determine when coverage first becomes effective.''.
    (c) Regulatory Authority.--Not later than 6 months after the date 
of enactment of this Act, the Secretary of Health and Human Services 
(in this subsection and subsection (d) referred to as the 
``Secretary''), in consultation with the National Association of 
Insurance Commissioners, issuers of long-term care insurance policies, 
States with experience with long-term care insurance partnership plans, 
and other States, shall develop the following requirements and 
standards:
            (1) Minimum, consistent reporting requirements.--
                    (A) In general.--Minimum reporting requirements for 
                issuers of long-term care insurance policies under 
                Qualified State Long-Term Care Insurance Partnerships 
                that shall specify the data and information that each 
                such issuer shall report to the State with which it has 
                such a partnership. The requirements developed in 
                accordance with this paragraph shall specify the type 
                and format of the data and information to be reported 
                and the frequency with which such reports are to be 
                made.
                    (B) State required data.--Nothing in subparagraph 
                (A) shall be construed as prohibiting a State from 
                requiring an issuer of a long-term care insurance 
                policy sold in the State (regardless of whether the 
                policy is issued under a Qualified State Long-Term Care 
                Insurance Partnership) to require the issuer to report 
                State information or data to the State that is in 
                addition to the information or data required under the 
                minimum reporting requirements developed under that 
                subparagraph.
            (2) Reciprocity standards.--Standards for ensuring that 
        long-term care insurance policies issued under a Qualified 
        State Long-Term Care Insurance Partnership are portable to 
        other States with such a partnership.
    (d) Consumer Education.--The Secretary shall establish procedures 
for educating consumers regarding Qualified State Long-Term Care 
Insurance Partnerships and long-term care insurance policies issued in 
connection with such partnerships.
    (e) Annual Reports to Congress.--The Secretary shall annually 
report to Congress on the Qualified State Long-Term Care Insurance 
Partnerships established in accordance with subsections (b)(1)(C)(ii) 
and (e)(6) of section 1917 of the Social Security Act (42 U.S.C. 
1396p).
    (f) Effective Date.--The amendments made by subsections (a) and (b) 
take effect on October 1, 2005.
State Long-Term Care Partnership Act of 2005 - Amends title XIX (Medicaid) of the Social Security Act to provide for establishment of long-term care insurance partnerships between states and insurers (Qualified State Long-Term Care Insurance Partnerships (QSLTCIPs)). Defines a QSLTCIP as a state plan amendment that provides for the disregard of any assets or resources in an amount equal to the insurance benefits payments made under a long-term care insurance policy (including a certificate issued under a group insurance contract), but only if the policy meets certain requirements, including coverage of an insured who, at the time coverage first becomes effective, is a resident of such state or of a state that maintains a QSLTCIP.

Directs the Secretary to establish procedures for educating consumers regarding QSLTCIPs and long-term care insurance policies issued in connection with them.

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Safeguard Tribal Objects of 
Patrimony Act of 2017''.

SEC. 2. ENHANCED PROTECTIONS FOR NATIVE AMERICAN CULTURAL HERITAGE.

    (a) Enhanced Penalties.--Section 1170 of title 18, United States 
Code, is amended by striking ``5 years'' each place it appears and 
inserting ``10 years''.
    (b) Prohibition of Exporting Native American Cultural Heritage.--
Chapter 53 of title 18, United States Code, is amended by adding at the 
end the following:
``Sec. 1171. Illegal exportation of Native American cultural heritage
    ``(a) Definitions.--In this section:
            ``(1) Archaeological resource.--The term `archaeological 
        resource' has the meaning given the term in section 3 of the 
        Archaeological Resources Protection Act of 1979 (16 U.S.C. 
        470bb).
            ``(2) Cultural item.--The term `cultural item' has the 
        meaning given the term in section 2 of the Native American 
        Graves Protection and Repatriation Act (25 U.S.C. 3001).
            ``(3) Native american.--The term `Native American' has the 
        meaning given the term in section 2 of the Native American 
        Graves Protection and Repatriation Act (25 U.S.C. 3001).
    ``(b) Prohibition.--It shall be unlawful for any person to 
knowingly export or otherwise transport from the United States any--
            ``(1) Native American cultural item that was obtained in 
        violation of section 1170 of this title or section 3(c) of the 
        Native American Graves Protection and Repatriation Act (25 
        U.S.C. 3002(c));
            ``(2) Native American archaeological resource that was 
        obtained in violation of the Archaeological Resources 
        Protection Act of 1979 (16 U.S.C. 470aa et seq.); or
            ``(3) Native American object of antiquity that was obtained 
        in violation of section 1866(b) of this title.
    ``(c) Penalty.--Any person who violates subsection (b) shall--
            ``(1) in the case of a first violation under this section, 
        be fined under this title, imprisoned for not more than 1 year, 
        or both; and
            ``(2) in the case of a second or subsequent violation under 
        this section, be fined under this title, imprisoned for not 
        more than 10 years, or both.''.
    (c) Regulations.--The Attorney General and Secretary of Homeland 
Security, in consultation with the Secretary of the Interior, shall 
prescribe such rules and regulations as are necessary and appropriate 
to carry out the amendments made by this section.
    (d) Technical and Conforming Amendment.--The table of sections for 
chapter 53 of title 18, United States Code, is amended by adding at the 
end the following:

``1171. Illegal exportation of Native American cultural heritage.''.

SEC. 3. DEFINITIONS.

    In this Act:
            (1) Indian tribe.--The term ``Indian tribe'' has the 
        meaning given the term in section 2 of the Native American 
        Graves Protection and Repatriation Act (25 U.S.C. 3001).
            (2) Native american.--The term ``Native American'' has the 
        meaning given the term in section 2 of the Native American 
        Graves Protection and Repatriation Act (25 U.S.C. 3001).
            (3) Native hawaiian organization.--The term ``Native 
        Hawaiian organization'' has the meaning given the term in 
        section 2 of the Native American Graves Protection and 
        Repatriation Act (25 U.S.C. 3001).
            (4) Secretary.--The term ``Secretary'' means the Secretary 
        of the Interior.
            (5) Tangible cultural heritage.--The term ``tangible 
        cultural heritage'' means--
                    (A) Native American human remains; or
                    (B) culturally, historically, or archaeologically 
                significant objects, resources, patrimony, or other 
                items that are affiliated with a Native American 
                culture.

SEC. 4. VOLUNTARY RETURN OF TANGIBLE CULTURAL HERITAGE.

    (a) Policy.--It shall be the policy of the United States to 
encourage the voluntary return of tangible cultural heritage to Indian 
tribes and Native Hawaiian organizations by collectors, dealers, and 
other individuals and non-Federal organizations that hold such 
heritage.
    (b) Liaison.--The Secretary and the Secretary of State shall each 
designate a liaison to facilitate the voluntary return of tangible 
cultural heritage.
    (c) Trainings and Workshops.--The individuals listed in subsection 
(b) shall hold trainings and workshops for representatives of Indian 
tribes and Native Hawaiian organizations and collectors, dealers, and 
other individuals and non-Federal organizations regarding the voluntary 
return of tangible cultural heritage.
    (d) Referrals.--
            (1) In general.--The Secretary shall refer individuals and 
        organizations to one or more Indian tribes or Native Hawaiian 
        organizations with a likely cultural affiliation to tangible 
        cultural heritage for the purpose of facilitating the voluntary 
        return of tangible cultural heritage.
            (2) Referral representatives.--The Secretary shall compile 
        a list of representatives from each Indian tribe and Native 
        Hawaiian organization for purposes of referral under paragraph 
        (1).
            (3) Consultation.--The Secretary shall consult with Indian 
        tribes and Native Hawaiian organizations that possess unique 
        expertise in their cultural heritage before making a referral 
        under paragraph (1).
            (4) Third-party experts.--The Secretary may utilize 
        knowledgeable experts from regional academic institutions and 
        museums to aid in making determinations regarding to which 
        Indian tribe or Native Hawaiian organization an individual or 
        organization should be referred under paragraph (1).

SEC. 5. TRIBAL WORKING GROUP.

    (a) In General.--The Secretary shall convene a tribal working group 
consisting of representatives of Indian tribes and Native Hawaiian 
organizations to advise the Federal Government.
    (b) Recommendations.--The tribal working group convened under 
subsection (a) may provide recommendations regarding--
            (1) the return of tangible cultural heritage by collectors, 
        dealers, and other individuals and non-Federal organizations 
        that hold such tangible cultural heritage;
            (2) the elimination of illegal commerce in tangible 
        cultural heritage in the United States and foreign markets; and
            (3) the repatriation to Indian tribes and Native Hawaiian 
        organizations of tangible cultural heritage that have been 
        illegally removed or trafficked in violation of Federal law.
    (c) Agency and Committee Assistance.--
            (1) In general.--The agencies and committees described in 
        paragraph (2) shall provide information and assistance to the 
        tribal working group convened under subsection (a) upon request 
        by the tribal working group.
            (2) Agencies and committees.--The agencies and committees 
        described in this paragraph are the following:
                    (A) The Department of the Interior.
                    (B) The Department of Justice.
                    (C) The Department of Homeland Security.
                    (D) The Department of State.
                    (E) The Native American Graves Protection and 
                Repatriation Review Committee established under section 
                8 of the Native American Graves Protection and 
                Repatriation Act (25 U.S.C. 3006).
                    (F) The Cultural Property Advisory Committee 
                established under section 306 of the Convention on 
                Cultural Property Implementation Act (19 U.S.C. 2605).
                    (G) Any other relevant Federal agency.

Safeguard Tribal Objects of Patrimony Act of 2017 This bill amends the federal criminal code to double the maximum prison term (from 5 years to 10 years) for persons convicted of selling, purchasing, using for profit, or transporting for sale or profit the human remains of Native Americans or cultural items obtained in violation of the Native American Graves Protection and Repatriation Act. The bill prohibits the export of Native American cultural items that were obtained in violation of the Act, Native American archaeological resources that were obtained in violation of the Archaeological Resources Protection Act of 1979, or Native American objects of antiquity that were obtained in violation of the criminal code. Violators may be subject to fines, imprisonment, or both.  The Department of the Interior and the Department of State must each designate a liaison to facilitate and hold trainings and workshops on the voluntary return of human remains or cultural items. Interior must refer individuals and organizations to Indian tribes or Native Hawaiian organizations to facilitate the voluntary return of human remains or cultural items.  In addition, Interior must convene a tribal working group consisting of representatives of tribes and Native Hawaiian organizations to provide advice on issues concerning the return of, and illegal trade in, human remains or cultural items.