In this task, you are given text for US Congressional and California state bills, your task is to generate a summary for this bill.

Ex Input:
SECTION 1. SHORT TITLE.

This Act may be cited as the ''Safe and Secure Federal Websites Act
of 2015''.

SEC. 2. ENSURING FUNCTIONALITY AND SECURITY OF NEW FEDERAL WEBSITES
THAT COLLECT PERSONALLY IDENTIFIABLE INFORMATION.

(a) Certification Requirement.--
(1) In general.--Except as otherwise provided under this
subsection, an agency may not deploy or make available to the
public a new Federal PII website until the date on which the
chief information officer of the agency submits a certification
to Congress that the website is fully functional and secure.
(2) Transition.--In the case of a new Federal PII website
that is operational on the date of the enactment of this Act,
paragraph (1) shall not apply until the end of the 90-day
period beginning on such date of enactment. If the
certification required under paragraph (1) for such website has
not been submitted to Congress before the end of such period,
the head of the responsible agency shall render the website
inaccessible to the public until such certification is
submitted to Congress.
(3) Exception for beta website with explicit permission.--
Paragraph (1) shall not apply to a website (or portion thereof)
that is in a development or testing phase, if the following
conditions are met:
(A) A member of the public may access PII-related
portions of the website only after executing an
agreement that acknowledges the risks involved.
(B) No agency compelled, enjoined, or otherwise
provided incentives for such a member to access the
website for such purposes.
(4) Construction.--Nothing in this section shall be
construed as applying to a website that is operated entirely by
an entity (such as a State or locality) that is independent of
the Federal Government, regardless of the receipt of funding in
support of such website from the Federal Government.
(b) Definitions.--In this section:
(1) Agency.--The term ''agency'' has the meaning given that
term under section 551 of title 5, United States Code.
(2) Fully functional.--The term ''fully functional'' means,
with respect to a new Federal PII website, that the website can
fully support the activities for which it is designed or
intended with regard to the eliciting, collection, storage, or
maintenance of personally identifiable information, including
handling a volume of queries relating to such information
commensurate with the purpose for which the website is
designed.
(3) New federal personally identifiable information website
(new federal pii website).--The terms ''new Federal personally
identifiable information website'' and ''new Federal PII
website'' mean a website that--
(A) is operated by (or under a contract with) an
agency;
(B) elicits, collects, stores, or maintains
personally identifiable information of individuals and
is accessible to the public; and
(C) is first made accessible to the public and
collects or stores personally identifiable information
of individuals, on or after October 1, 2012.
(4) Operational.--The term ''operational'' means, with
respect to a website, that such website elicits, collects,
stores, or maintains personally identifiable information of
members of the public and is accessible to the public.
(5) Personally identifiable information (pii).--The terms
''personally identifiable information'' and ''PII'' mean any
information about an individual elicited, collected, stored, or
maintained by an agency, including--
(A) any information that can be used to distinguish
or trace the identity of an individual, such as a name,
a social security number, a date and place of birth, a
mother's maiden name, or biometric records; and
(B) any other information that is linked or
linkable to an individual, such as medical,
educational, financial, and employment information.
(6) Responsible agency.--The term ''responsible agency''
means, with respect to a new Federal PII website, the agency
that is responsible for the operation (whether directly or
through contracts with other entities) of the website.
(7) Secure.--The term ''secure'' means, with respect to a
new Federal PII website, that the following requirements are
met:
(A) The website is in compliance with subchapter II
of chapter 35 of title 44, United States Code.
(B) The website ensures that personally
identifiable information elicited, collected, stored,
or maintained in connection with the website is
captured at the latest possible step in a user input
sequence.
(C) The responsible agency for the website has
encrypted, masked, or taken other similar actions to
protect personally identifiable information elicited,
collected, stored, or maintained in connection with the
website.
(D) The responsible agency for the website has
taken reasonable efforts to minimize domain name
confusion, including through additional domain
registrations.
(E) The responsible agency requires all personnel
who have access to personally identifiable information
in connection with the website to have completed a
Standard Form 85P and signed a non-disclosure agreement
with respect to personally identifiable information,
and the agency takes proper precautions to ensure that
only the fewest reasonable number of trustworthy
persons may access such information.
(F) The responsible agency maintains (either
directly or through contract) sufficient personnel to
respond in a timely manner to issues relating to the
proper functioning and security of the website, and to
monitor on an ongoing basis existing and emerging
security threats to the website.
(8) State.--The term ''State'' means each State of the
United States, the District of Columbia, each territory or
possession of the United States, and each federally recognized
Indian tribe.

SEC. 3. PRIVACY BREACH REQUIREMENTS.

(a) Information Security Amendment.--Subchapter II of chapter 35 of
title 44, United States Code, is amended by adding at the end the
following:
''Sec. 3559. Privacy breach requirements
''(a) Policies and Procedures.--The Director of the Office of
Management and Budget shall establish and oversee policies and
procedures for agencies to follow in the event of a breach of
information security involving the disclosure of personally
identifiable information, including requirements for--
''(1) not later than 72 hours after the agency discovers
such a breach, or discovers evidence that reasonably indicates
such a breach has occurred, notice to the individuals whose
personally identifiable information could be compromised as a
result of such breach;
''(2) timely reporting to a Federal cybersecurity center,
as designated by the Director of the Office of Management and
Budget; and
''(3) any additional actions that the Director finds
necessary and appropriate, including data breach analysis,
fraud resolution services, identity theft insurance, and credit
protection or monitoring services.
''(b) Required Agency Action.--The head of each agency shall ensure
that actions taken in response to a breach of information security
involving the disclosure of personally identifiable information under
the authority or control of the agency comply with policies and
procedures established by the Director of the Office of Management and
Budget under subsection (a).
''(c) Report.--Not later than March 1 of each year, the Director of
the Office of Management and Budget shall report to Congress on agency
compliance with the policies and procedures established under
subsection (a).
''(d) Federal Cybersecurity Center Defined.--The term 'Federal
cybersecurity center' means any of the following:
''(1) The Department of Defense Cyber Crime Center.
''(2) The Intelligence Community Incident Response Center.
''(3) The United States Cyber Command Joint Operations
Center.
''(4) The National Cyber Investigative Joint Task Force.
''(5) Central Security Service Threat Operations Center of
the National Security Agency.
''(6) The United States Computer Emergency Readiness Team.
''(7) Any successor to a center, team, or task force
described in paragraphs (1) through (6).
''(8) Any center that the Director of the Office of
Management and Budget determines is appropriate to carry out
the requirements of this section.''.
(b) Technical and Conforming Amendment.--The table of sections for
subchapter II of chapter 35 of title 44, United States Code, is amended
by adding at the end the following:

''3559. Privacy breach requirements.''.

Ex Output:
Safe and Secure Federal Websites Act of 2015 This bill establishes security and privacy requirements for new federal websites that collect personally identifiable information (PII) (i.e., information that can be used to distinguish or trace the identity of an individual or that is linked or linkable to an individual). (Sec. 2) A federal agency may not deploy or make available to the public a new federal PII website until the agency's chief information officer (CIO) certifies to Congress that the website is fully functional and secure. The CIO must make such certification within 90 days after enactment of this Act. After such 90-day period, any new federal PII website that has not been certified must be rendered inaccessible until certification is submitted. The prohibition does not apply to a website that is: (1) operated entirely by an entity that is independent of the federal government, or (2) in a development or testing phase (beta website). The exemption for beta websites applies only if: (1) a member of the public may access PII-related portions of the website only after executing an agreement that acknowledges the risks involved; and (2) no agency compelled, enjoined, or otherwise provided incentives for a member of the public to access such website. The bill defines a "new federal PII website" as a website that: (1) is operated by (or under contract with) an agency; (2) elicits, collects, stores, or maintains PII and is accessible to the public; and (3) is first made accessible to the public and collects or stores PII on or after October 1, 2012. The bill also sets forth requirements that must be met to deem a new federal PII website as "secure." (Sec. 3) The Director of the Office of Management and Budget (OMB) must establish and oversee policies and procedures for federal agencies to follow in the event of a breach of information security involving the disclosure of PII, including: (1) notice, not later than 72 hours after discovery of a breach or possible breach, to individuals whose PII could be compromised; and (2) timely reporting to a federal cybersecurity center designated by the OMB and defined in this Act. Agency heads must ensure that agency actions taken in response to a breach of information security involving the disclosure of PII comply with OMB policies and procedures established by this Act. The OMB must report to Congress, not later than March 1 of each year, on agency compliance with such policies and procedures. A "federal cybersecurity center" is defined to include: (1) the Department of Defense Cyber Crime Center, (2) the Intelligence Community Incident Response Center, (3) the U.S. Cyber Command Joint Operations Center, (4) the National Cyber Investigative Task Force, (5) the Central Security Service Threat Operations Center of the National Security Agency, (6) the U.S. Computer Emergency Readiness Team, and (7) any center that the OMB determines is appropriate to carry out privacy breach notice and reporting requirements.

Ex Input:
OF CONFLICTS.

To the extent permitted by law, disagreements or conflicts between
or among agency heads or between OMB and any agency that cannot be
resolved by the Administrator of OIRA shall be resolved by the
President or a designee of the President.

SEC. 8. PUBLICATION.

Except to the extent required by law, an agency shall not publish
in the Federal Register or otherwise issue to the public any regulatory
action that is subject to review under section 6 until--
(1) the Administrator of OIRA notifies the agency that OIRA
has waived its review of the action or has completed its review
without any requests for further consideration, or
(2) the applicable time period in section 6(b)(2) expires
without OIRA having notified the agency that it is returning
the regulatory action for further consideration under section
6(b)(3),
whichever occurs first. If the terms of the preceding sentence have not
been satisfied and an agency wants to publish or otherwise issue a
regulatory action, the head of that agency may request Presidential
consideration through the Administrator of OIRA, as provided under
section 8. Upon receipt of this request, the Administrator of OIRA
shall notify the Advisers. The guidelines and time period set forth in
section 8 shall apply to the publication of regulatory actions for
which Presidential consideration has been sought.

SEC. 9. AGENCY AUTHORITY.

Nothing in this Act shall be construed as displacing the agencies'
authority or responsibilities, as authorized by law.

SEC. 10. JUDICIAL REVIEW.

Nothing in this Act shall affect any otherwise available judicial
review of agency action. This Act is intended only to improve the
internal management of the Federal Government and does not create any
right or benefit, substantive or procedural, enforceable at law or
equity by a party against the United States, its agencies or
instrumentalities, its officers or employees, or any other person.

SEC. 11. DEFINITIONS.

For purposes of this Act:
(1) The term ''Advisers'' refers to such regulatory policy
advisers to the President as the President and the
Administrator of OIRA may from time to time consult, including,
among others--
(A) the Director of OMB;
(B) the Chair (or another member) of the Council of
Economic Advisers;
(C) the Assistant to the President for Economic
Policy;
(D) the Assistant to the President for Domestic
Policy;
(E) the Assistant to the President for National
Security Affairs;
(F) the Assistant to the President for Science and
Technology;
(G) the Assistant to the President for
Intergovernmental Affairs;
(H) the Assistant to the President and Staff
Secretary;
(I) the Assistant to the President and Chief of
Staff to the Administrator of OIRA;
(J) the Assistant to the President and Counsel to
the President; and
(K) the Deputy Assistant to the President and
Director of the White House Office on Environmental
Policy.
(2) Except as provided in section 4(f), the term ''agency''
means any authority of the United States that is an ''agency''
under section 3502(1) of title 44, United States Code, other
than those considered to be independent regulatory agencies, as
defined in section 3502(10) of title 44, United States Code.
(3) The term ''Director'' means the Director of OMB.
(4) The term ''regulation'' or ''rule'' means an agency
statement of general applicability and future effect, which the
agency intends to have the force and effect of law, that is
designed to implement, interpret, or prescribe law or policy or
to describe the procedure or practice requirements of an
agency. It does not, however, include--
(A) regulations or rules issued in accordance with
the formal rulemaking provisions of sections 556 and
557 of title 5, United States Code;
(B) regulations or rules that pertain to a military
or foreign affairs function of the United States, other
than procurement regulations and regulations involving
the import or export of non-defense articles and
services;
(C) regulations or rules that are limited to agency
organization, management, or personnel matters; or
(D) any other category of regulations exempted by
the Administrator of OIRA.
(5) The term ''regulatory action'' means any substantive
action by an agency (normally published in the Federal
Register) that promulgates or is expected to lead to the
promulgation of a final rule or regulation, including notices
of inquiry, advance notices of proposed rulemaking, and notices
of proposed rulemaking.
(6) The term ''significant regulatory action'' means any
regulatory action that is likely to result in a rule that may--
(A) have an annual effect on the economy of $100
million or more or adversely affect in a material way
the economy, a sector of the economy, productivity,
competition, jobs, the environment, public health or
safety, or State, local, or tribal governments or
communities;
(B) create a serious inconsistency or otherwise
interfere with an action taken or planned by another
agency;
(C) materially alter the budgetary impact of
entitlements, grants, user fees, or loan programs or
the rights and obligations of recipients thereof; or
(D) raise novel legal or policy issues arising out
of legal mandates, the President's priorities, or the
principles set forth in this Act.

Ex Output:
Government Regulatory Improvement and Performance Act of 1998 - Declares that: (1) Federal agencies should promulgate only such regulations as are required by law, necessary to interpret the law, or necessary to protect and promote or improve the health and safety of the public, the environment, or the well-being of the American people; and (2) in deciding whether and how to regulate, agencies should assess all costs and benefits of available regulatory alternatives, including the alternative of not regulating.
Sets forth principles of regulation to ensure that the agencies' regulatory programs are consistent with such philosophy, including that each agency: (1) identify the problem that it intends to address by regulation, assess its significance, and if possible conduct a risk analysis; (2) identify and assess available alternatives to direct regulation; (3) wherever feasible, seek views of appropriate State, local, and tribal officials before imposing requirements that might significantly or uniquely affect those governmental entities.
(Sec. 3) Directs the Office of Management and Budget to carry out coordinated review of agency rulemaking. Designates its Office of Information and Regulatory Affairs (OIRA) as the repository of expertise concerning regulatory issues.
(Sec. 4) Directs the OIRA Administrator, early in each year's planning cycle, to convene a meeting of the regulatory policy advisers to the President and agency heads to seek a common understanding of priorities and to coordinate regulatory efforts for the upcoming year.
Requires each agency to prepare: (1) a unified regulatory agenda of all regulations under development or review; and (2) a regulatory plan of the most important significant regulatory actions that the agency reasonably expects to issue in that fiscal year or thereafter.
Directs the Administrator to: (1) convene and chair a regulatory working group, which shall meet at least quarterly, to assist agencies in identifying and analyzing important regulatory issues; (2) meet quarterly, along with agency heads, with representatives of State, local, and tribal governments to identify exiting and proposed regulations that may uniquely or significantly affect those governmental entities; and (3) convene periodic conferences with representatives of businesses, nongovernmental organizations, and the public to discuss regulatory issues.
(Sec. 5) Requires that: (1) each agency submit to OIRA a program under which the agency will periodically review its existing significant regulations; and (2) any significant regulations selected for review be included in the agency's annual plan, and the agency identify any legislative mandates that require the agency to promulgate or continue to impose unnecessary or outdated regulations.
(Sec. 5) Requires each agency to: (1) submit to the OIRA a program under which the agency will periodically review its existing significant regulations for possible modification or elimination; (2) provide the public with meaningful participation in the regulatory process and a meaningful opportunity to comment on any proposed regulation, generally including a comment period of not less than 60 days; and (2) explore and, where appropriate, use consensual mechanisms for developing regulations, including negotiated rulemaking.
Directs: (1) each agency head to designate a Regulatory Policy Office; (2) each agency to develop its regulatory actions in a timely fashion and adhere to specified procedures; (3) each agency to provide the OIRA with a list of its planned regulatory actions, including significant regulatory actions; and (4) the Administrator to provide meaningful guidance and oversight.
(Sec. 8) Prohibits an agency from publishing a regulation until the Administrator has waived review of the action, completed such review, or the review period has passed, whichever occurs first.

Ex Input:
SECTION 1. SHORT TITLE.

This Act may be cited as the ''Children's Privacy Protection and
Parental Empowerment Act of 1997''.

SEC. 2. PROHIBITION OF CERTAIN ACTIVITIES RELATING TO PERSONAL
INFORMATION ABOUT CHILDREN.

(a) In General.--Chapter 89 of title 18, United States Code, is
amended by adding at the end the following:
''Sec. 1822. Sale of personal information about children
''(a) Whoever, in or affecting interstate or foreign commerce,
being a list broker, knowingly--
''(1) sells, purchases, or receives remuneration for
providing personal information about a child, knowing that such
information pertains to a child, without the written consent of
a parent of that child;
''(2) conditions any sale or service to a child or to that
child's parent on the granting of such a consent; or
''(3) fails to comply with the request of a parent--
''(A) to disclose the source of personal
information offered for sale or remuneration by the
list broker about that parent's child;
''(B) to disclose all information that has been
sold or otherwise disclosed by that list broker about
that child;
''(C) to disclose the identity of all persons to
whom the list broker has sold or otherwise disclosed
personal information about that child; or
''(D) to discontinue providing personal information
to third parties about that parent's child;
shall be fined under this title or imprisoned for not more than 1 year,
or both.
''(b) Whoever, in or affecting interstate or foreign commerce,
being a person who uses, in the course of commerce, any personal
information about a child under age 16, that was obtained for
commercial purposes, to contact that child or a parent of that child to
offer a commercial product or service to that child, knowingly fails to
comply with the request of a parent--
''(1) to disclose the source of personal information about
that parent's child;
''(2) to disclose all information that has been sold or
otherwise disclosed by that list broker about that child;
''(3) to disclose the identity of all persons to whom
personal information about that child has been disclosed; or
''(4) to discontinue providing personal information to
third parties about that parent's child;
shall be fined not more than $5,000.
''(c) Whoever, in or affecting interstate or foreign commerce,
knowingly--
''(1) uses prison inmate labor, or any worker who is
registered pursuant to title XVII of the Violent Crime Control
and Law Enforcement Act of 1994, for data processing of
personal information about children; or
''(2) distributes or solicits any personal information
about a child, with the intent of abusing or causing physical
harm to the child or to sexually exploit the child, or having
reason to believe that the child will be so abused, harmed, or
exploited as a result of that distribution or solicitation;
shall be fined under this title or imprisoned not more than 5 years, or
both.
''(d) Whoever, in or affecting interstate or foreign commerce,
knowingly releases personal information about another person's child to
any entity that intends to use the information to solicit the sale of a
product or service, without the permission of that child's parent,
shall be fined not more than $5,000.
''(e) A child or a parent of a child with respect to whom a
violation of this section occurs may in a civil action obtain
appropriate relief, including statutory money damages of not less than
$5,000. The court shall award a prevailing plaintiff in a civil action
under this subsection a reasonable attorney's fee as a part of the
costs.
''(f) Nothing in this section affects the sale of lists to--
''(1) the National Center for Missing and Exploited
Children;
''(2) accredited colleges, universities, and other
institutions of higher learning;
''(3) the United States military; or
''(4) local, State, or Federal law enforcement agencies.
''(g) It shall be the duty of each list broker operating in or
affecting interstate or foreign commerce to make that broker's
databases available twice annually, without charge, to the National
Center for Missing and Exploited Children, established under section
404(b) of the Missing Children's Assistance Act, in order to allow the
Center to match it with the database of missing children held by the
Center.
''(h) As used in this section--
''(1) the term 'child' means a person who has not attained
the age of 16 years;
''(2) the term 'parent' includes a legal guardian;
''(3) the term 'personal information' means information
(including name, address, telephone number, social security
number, electronic mail address, and physical description)
about an individual identified as a child, that would suffice
to locate and contact that individual; and
''(4) the term 'list broker' means a person who provides
for remuneration mailing lists, computerized or telephone
reference services, databases, or the like, containing personal
information about children.''.
(b) Clerical Amendment.--The table of sections at the beginning of
chapter 89 of title 18, United States Code, is amended by adding at the
end the following new item:

''1822. Sale of personal information about children.''.

Ex Output:
Children's Privacy Protection and Parental Empowerment Act of 1997 - Amends the Federal criminal code to prohibit and set penalties for specified activities relating to personal information about a child (defined as a person under age 16), including knowingly: (1) selling such information (by a list broker) without the written consent of a parent of that child, knowing that such information pertains to a child; (2) using prison inmate labor for data processing of personal information about children; and (3) distributing or soliciting any such information, knowing or having reason to believe that the information will be used to abuse or physically harm the child.
Sets penalties for contacting that child or a parent of that child (by a person who uses personal information about a child that was obtained for commercial purposes) to offer a commercial product or service to that child and knowingly failing to comply with a parent's request to: (1) disclose the source of such information, all information that has been sold or otherwise disclosed by that list broker about that child, and the identity of all persons to whom such information has been disclosed; or (2) discontinue providing such information to third parties.
Sets penalties for knowingly releasing personal information about another person's child to any entity that intends to use the information to solicit the sale of a product or service, without the permission of that child's parent.
Authorizes civil actions by a child or a parent with respect to whom a violation of this Act occurs. Directs the court to award a prevailing plaintiff a reasonable attorney's fee as part of the costs.
Specifies that nothing in this Act affects the sale of lists to: (1) the National Center for Missing and Exploited Children (the Center); (2) accredited colleges, universities, and other institutions of higher learning; (3) the U.S. military; or (4) local, State, or Federal law enforcement agencies.
Declares that it shall be the duty of each list broker operating in or affecting interstate or foreign commerce to make that broker's databases available twice annually, without charge, to the Center to allow the Center to match it with the database of missing children held by the Center.