In this task, you are given text for US Congressional and California state bills, your task is to generate a summary for this bill.

Example Input: SECTION 1. SHORT TITLE.

This Act may be cited as the ''Cyber-Security Enhancement and
Consumer Data Protection Act of 2006''.

SEC. 2. PERSONAL ELECTRONIC RECORDS.

Section 1030(a)(2) of title 18, United States Code, is amended--
(1) by striking ''or'' at the end of subparagraph (B); and
(2) by adding at the end the following:
''(D) a means of identification (as defined in
section 1028(d)) from a protected computer; or
''(E) the capability to gain access to or remotely
control a protected computer.''.

SEC. 3. USE OF FULL INTERSTATE AND FOREIGN COMMERCE POWER FOR CRIMINAL
PENALTIES.

(a) Broadening of Scope.--Section 1030(e)(2)(B) of title 18, United
States Code, is amended by inserting ''or affecting'' after ''which is
used in''.
(b) Elimination of Requirement of an Interstate or Foreign
Communication for Certain Offenses Involving Protected Computers.--
Section 1030(a)(2)(C) of title 18, United States Code, is amended by
striking ''if the conduct involved an interstate or foreign
communication''.

SEC. 4. RICO PREDICATES.

Section 1961(1)(B) of title 18, United States Code, is amended by
inserting ''section 1030 (relating to fraud and related activity in
connection with computers),'' before ''section 1084''.

SEC. 5. CYBER-EXTORTION.

Section 1030(a)(7) of title 18, United States Code, is amended by
inserting '', or to access without authorization or exceed authorized
access to a protected computer'' after ''cause damage to a protected
computer''.

SEC. 6. CONSPIRACY TO COMMIT CYBER-CRIMES.

Section 1030(b) of title 18, United States Code, is amended by
inserting ''or conspires'' after ''attempts''.

SEC. 7. NOTICE TO LAW ENFORCEMENT.

(a) Criminal Penalty for Failure to Notify Law Enforcement.--
Chapter 47 of title 18, United States Code, is amended by adding at the
end the following:
''Sec. 1039. Concealment of security breaches involving personal
information
''(a) Offense.--Whoever owns or possesses data in electronic form
containing a means of identification (as defined in section 1028),
having knowledge of a major security breach of the system containing
such data maintained by such person, and knowingly fails to provide
notice of such breach to the United States Secret Service or Federal
Bureau of Investigation, with the intent to prevent, obstruct, or
impede a lawful investigation of such breach, shall be fined under this
title, imprisoned not more than 5 years, or both.
''(b) Definitions.--As used in this section--
''(1) Major security breach.--The term 'major security
breach' means any security breach--
''(A) whereby means of identification pertaining to
10,000 or more individuals is, or is reasonably
believed to have been acquired, and such acquisition
causes a significant risk of identity theft;
''(B) involving databases owned by the Federal
Government; or
''(C) involving primarily data in electronic form
containing means of identification of Federal
Government employees or contractors involved in
national security matters or law enforcement.
''(2) Significant risk of identity theft.--
''(A) In general.--The term 'significant risk of
identity theft' means such risk that a reasonable
person would conclude, after a reasonable opportunity
to investigate, that it is more probable than not that
identity theft has occurred or will occur as a result
of the breach.
''(B) Presumption.--If the data in electronic form
containing a means of identification involved in a
suspected breach has been encrypted, redacted, requires
technology to use or access the data that is not
commercially available, or has otherwise been rendered
unusable, then there shall be a presumption that the
breach has not caused a significant risk of identity
theft. Such presumption may be rebutted by facts
demonstrating that the encryption code has been or is
reasonably likely to be compromised, that the entity
that acquired the data is believed to possess the
technology to access it, or the owner or possessor of
the data is or reasonably should be aware of an unusual
pattern of misuse of the data that indicates fraud or
identity theft.''.
(b) Rulemaking.--Within 180 days after the date of enactment of
this Act, the Attorney General and Secretary of Homeland Security shall
jointly promulgate rules and regulations, after adequate notice and an
opportunity for comment, as are reasonably necessary, governing the
form, content, and timing of the notices required pursuant to section
1039 of title 18, United States Code. Such rules and regulations shall
not require the deployment or use of specific products or technologies,
including any specific computer hardware or software, to protect
against a security breach. Such rules and regulations shall require
that--
(1) such notice be provided to the United States Secret
Service or Federal Bureau of Investigation before any notice of
a breach is made to consumers under State or Federal law, and
within 14 days of discovery of the breach;
(2) if the United States Secret Service or Federal Bureau
of Investigation determines that any notice required to be made
to consumers under State or Federal law would impede or
compromise a criminal investigation or national security, the
United States Secret Service or Federal Bureau of Investigation
shall direct in writing within 7 days that such notice shall be
delayed for 30 days, or until the United States Secret Service
or Federal Bureau of Investigation determines that such notice
will not impede or compromise a criminal investigation or
national security;
(3) the United States Secret Service shall notify the
Federal Bureau of Investigation, if the United States Secret
Service determines that such breach may involve espionage,
foreign counterintelligence, information protected against
unauthorized disclosure for reasons of national defense or
foreign relations, or Restricted Data (as that term is defined
in section 11y of the Atomic Energy Act of 1954 (42 U.S.C.
2014(y))), except for offenses affecting the duties of the
United States Secret Service under section 3056(a) of title 18,
United States Code; and
(4) the United States Secret Service or Federal Bureau of
Investigation notify the Attorney General in each State
affected by the breach, if the United States Secret Service or
Federal Bureau of Investigation declines to pursue a criminal
investigation, or as deemed necessary and appropriate.
(c) Immunity From Lawsuit.--No cause of action shall lie in any
court against any law enforcement entity or any person who notifies law
enforcement of a security breach pursuant to this section for any
penalty, prohibition, or damages relating to the delay of notification
for law enforcement purposes under this Act.
(d) Civil Penalty for Failure to Notify.--Whoever knowingly fails
to give a notice required under section 1039 of title 18, United States
Code, shall be subject to a civil penalty of not more than $50,000 for
each day of such failure, but not more than $1,000,000.
(e) Relation to State Laws.--
(1) In general.--The requirement to notify law enforcement
under this section shall supersede any other notice to law
enforcement required under State law.
(2) Exception for state consumer notice laws.--The notice
required to law enforcement under this section shall be in
addition to any notice to consumers required under State or
Federal law following the discovery of a security breach.
Nothing in this section annuls, alters, affects or exempts any
person from complying with the laws of any State with respect
to notice to consumers of a security breach, except as provided
by subsections (b) and (c).
(f) Duty of Federal Agencies and Departments.--An agency or
department of the Federal Government which would be required to give
notice of a major security breach under section 1039 of title 18,
United States Code, if that agency or department were a person, shall
notify the United States Secret Service or Federal Bureau of
Investigation of the breach in the same time and manner as a person
subject to that section. The rulemaking authority under subsection (b)
shall include the authority to make rules for notice under this
subsection of a major security breach.
(g) Clerical Amendment.--The table of sections at the beginning of
chapter 47 of title 18, United States Code, is amended by adding at the
end the following new item:

''1039. Concealment of security breaches involving personal
information.''.

SEC. 8. PENALTIES FOR SECTION 1030 VIOLATIONS.

Subsection (c) of section 1030 of title 18, United States Code, is
amended to read as follows:
''(c)(1) The punishment for an offense under subsection (a) or (b)
is a fine under this title or imprisonment for not more than 30 years,
or both.
''(2) The court, in imposing sentence for an offense under
subsection (a) or (b), shall, in addition to any other sentence imposed
and irrespective of any provision of State law, order that the person
forfeit to the United States--
''(A) the person's interest in any personal property that
was used or intended to be used to commit or to facilitate the
commission of such violation; and
''(B) any property, real or personal, constituting or
derived from, any proceeds the person obtained, directly or
indirectly, as a result of such violation.''.

SEC. 9. DIRECTIVE TO SENTENCING COMMISSION.

(a) Directive.--Pursuant to its authority under section 994(p) of
title 28, United States Code, and in accordance with this section, the
United States Sentencing Commission shall forthwith review its
guidelines and policy statements applicable to persons convicted of
offenses under sections 1028, 1028A, 1030, 1030A, 2511 and 2701 of
title 18, United States Code and any other relevant provisions of law,
in order to reflect the intent of Congress that such penalties be
increased in comparison to those currently provided by such guidelines
and policy statements.
(b) Requirements.--In determining its guidelines and policy
statements on the appropriate sentence for the crimes enumerated in
paragraph (a), the Commission shall consider the extent to which the
guidelines and policy statements may or may not account for the
following factors in order to create an effective deterrent to computer
crime and the theft or misuse of personally identifiable data--
(1) the level of sophistication and planning involved in
such offense;
(2) whether such offense was committed for purpose of
commercial advantage or private financial benefit;
(3) the potential and actual loss resulting from the
offense;
(4) whether the defendant acted with intent to cause either
physical or property harm in committing the offense;
(5) the extent to which the offense violated the privacy
rights of individuals;
(6) the effect of the offense upon the operations of a
government agency of the United States, or of a State or local
government;
(7) whether the offense involved a computer used by the
government in furtherance of national defense, national
security or the administration of justice;
(8) whether the offense was intended to, or had the effect
of significantly interfering with or disrupting a critical
infrastructure;
(9) whether the offense was intended to, or had the effect
of creating a threat to public health or safety, injury to any
person, or death; and
(10) whether the defendant purposefully involved a juvenile
in the commission of the offense to avoid punishment.
(c) Additional Requirements.--In carrying out this section, the
Commission shall--
(1) assure reasonable consistency with other relevant
directives and with other sentencing guidelines;
(2) account for any additional aggravating or mitigating
circumstances that might justify exceptions to the generally
applicable sentencing ranges;
(3) make any conforming changes to the sentencing
guidelines; and
(4) assure that the guidelines adequately meet the purposes
of sentencing as set forth in section 3553(a)(2) of title 18,
United States Code.

SEC. 10. DAMAGE TO PROTECTED COMPUTERS.

(a) Section 1030(a)(5)(B) of title 18, United States Code, is
amended--
(1) by striking ''or'' at the end of clause (iv);
(2) by inserting ''or'' at the end of clause (v); and
(3) by adding at the end the following:
''(vi) damage affecting ten or more
protected computers during any 1-year
period.''.
(b) Section 1030(g) of title 18, United States Code, is amended by
striking ''or'' after ''(iv),'' and inserting '', or (vi)'' after
''(v)''.
(c) Section 2332b(g)(5)(B)(i) of title 18, United States Code, is
amended by striking ''(v) (relating to protection of computers)'' and
inserting ''(vi) (relating to the protection of computers)''.

SEC. 11. ADDITIONAL FUNDING FOR RESOURCES TO INVESTIGATE AND PROSECUTE
CRIMINAL ACTIVITY INVOLVING COMPUTERS.

(a) Additional Funding for Resources.--
(1) Authorization.--In addition to amounts otherwise
authorized for resources to investigate and prosecute criminal
activity involving computers, there are authorized to be
appropriated for each of the fiscal years 2007 through 2011--
(A) $10,000,000 to the Director of the United
States Secret Service;
(B) $10,000,000 to the Attorney General for the
Criminal Division of the Department of Justice; and
(C) $10,000,000 to the Director of the Federal
Bureau of Investigation.
(2) Availability.--Any amounts appropriated under paragraph
(1) shall remain available until expended.
(b) Use of Additional Funding.--Funds made available under
subsection (a) shall be used by the Director of the United States
Secret Service, the Director of the Federal Bureau of Investigation,
and the Attorney General, for the United States Secret Service, the
Federal Bureau of Investigation, and the criminal division of the
Department of Justice, respectively, to--
(1) hire and train law enforcement officers to--
(A) investigate crimes committed through the use of
computers and other information technology, including
through the use of the Internet; and
(B) assist in the prosecution of such crimes; and
(2) procure advanced tools of forensic science to
investigate, prosecute, and study such crimes.
Example Output: Cyber-Security Enhancement and Consumer Data Protection Act of 2006 - (Sec. 2) Amends the federal criminal code to prohibit obtaining without authorization: (1) a means of identification from a protected computer (a computer exclusively for the use of a financial institution or the federal government); or (2) the capability to gain access to or remotely control a protected computer.

(Sec. 3) Revises the definition of "protected computer" to include a computer the use of which affects interstate or foreign commerce or communication. Eliminates the criminal law requirement that conduct constituting computer fraud involve an interstate or foreign communication.

(Sec. 4) Includes computer fraud within the definition of racketeering for purposes of the Racketeer Influenced and Corrupt Organizations Act (RICO).

(Sec. 5) Includes threats to access a protected computer without authorization or to exceed such authorized access within the definition of computer-related extortion.

(Sec. 6) Expands the crime of computer fraud to include conspiracy to commit computer fraud.

(Sec. 7) Imposes a fine and/or prison term of up to five years for failure to notify the U.S. Secret Service or Federal Bureau of Investigation (FBI) of a major security breach in a database containing identification information with the intent to prevent, obstruct, or impede a lawful investigation of such breach. Defines "major security breach" as any security breach that involves: (1) the acquisition of the identification information of 10,000 or more individuals causing a significant risk of identity theft; (2) databases owned by the federal government; and (3) data containing identification information of federal employees or contractors involved in national security matters or law enforcement.

Directs the Attorney General and the Secretary of Homeland Security to jointly issue regulations on the form, content, and timing of notices of major security breaches. Requires that such regulations provide that notice of a security breach be provided to the Secret Service or FBI before notice is provided to consumers and within 14 days after discovery of such breach.

Grants immunity to law enforcement entities or to any person who notifies law enforcement of a security breach.

Imposes a civil penalty of $50,000 for each day any individual fails to provide notice of a major security breach (not to exceed $1 million).

(Sec. 8) Increases the prison term for computer fraud to a maximum of 30 years. Requires forfeiture of any personal property used to commit computer fraud.

(Sec. 9) Directs the U.S. Sentencing Commission to review and amend its guidelines and policy statements to reflect congressional intent to increase criminal penalties for computer fraud.

(Sec. 10) Imposes criminal penalties for damage affecting ten or more protected computers during any one-year period.

(Sec. 11) Authorizes additional funding in FY2007-FY2011 to the Director of the Secret Service, the Attorney General for the Criminal Division of the Department of Justice, and the Director of the FBI to investigate and prosecute crimes committed through the use of computers.

Example Input: That section 4 of
Public Law 94-456 (43 U.S.C. 1611 note) is amended--
(1) by striking out ''subsection (a)'' in subsection (c)
and inserting in lieu thereof ''subsections (a) and (d)''; and
(2) by adding at the end the following:
''(d)(1) In order to convey to the Village Corporations named in
this subsection certain lands the Villages have selected under section
12(a) of the Settlement Act, the Secretary shall convey all right,
title, and interest of the United States in and to the surface estate
of the lands described in paragraph (2) to the Village Corporations
within Cook Inlet Region named in paragraph (2) in partial satisfaction
of each Village Corporation's statutory entitlement under section 12(a)
of the Settlement Act. Conveyances shall be made pursuant to sections
12(a) and 14(f) of the Settlement Act. The conveyances described in
paragraph (2) shall be made within 90 days after the date of enactment
of this subsection.
''(2) The lands described in this paragraph are to be conveyed to
Village Corporations as follows:
To Chickaloon-Moose Creek Native Association, Inc.:

seward meridian, alaska

Township 1 North, Range 20 West (Unsurveyed)
Sections 24, 25, and 36 (fractional).
To Knikatnu, Inc.:

seward meridian, alaska

Township 1 South, Range 20 West (Unsurveyed)
Section 1 (fractional).
Township 3 South, Range 20 West (Unsurveyed)
Section 3 (fractional);
Sections 4 and 9.
Township 1 North, Range 20 West (Unsurveyed)
Section 9 (fractional).
To Ninilchik Native Association, Inc.:

seward meridian, alaska

Township 1 South, Range 19 West (Unsurveyed)
Sections 29 and 32 (fractional).
Township 2 South, Range 19 West (Unsurveyed)
Sections 6 and 18 (fractional).
Township 2 South, Range 20 West (Unsurveyed)
Section 1 (fractional);
Sections 6 and 14;
Sections 23, 24, and 26 (fractional);
Sections 32 and 33;
Sections 34 and 35 (fractional).
Township 3 South, Range 20 West (Unsurveyed)
Section 10 (fractional).
Township 3 South, Range 21 West (Unsurveyed)
Sections 13 and 19 through 24, inclusive;
Section 25 (fractional);
Sections 32 and 34 (fractional).
Township 1 North, Range 20 West (Unsurveyed)
Sections 6 through 8 (fractional), inclusive;
Section 16;
Sections 22 and 23 (fractional);
Section 26.
Township 4 North, Range 19 West (Unsurveyed)
Sections 20 and 36.
To Seldovia Native Association, Inc.:

seward meridian, alaska

Township 2 South, Range 20 West (Unsurveyed)
Section 13 (fractional).
Township 3 South, Range 20 West (Unsurveyed)
Sections 7 and 8;
Section 16 (fractional);
Sections 17 and 18;
Sections 19 and 20 (fractional).
To Tyonek Native Corporation:

seward meridian, alaska

Township 1 South, Range 20 West (Unsurveyed)
Section 2 (fractional);
Section 3.
Township 2 South, Range 21 West (Unsurveyed)
Section 36.
Township 2 South, Range 20 West (Unsurveyed)
Section 12 (fractional);
Section 31.
Township 3 South, Range 20 West (Unsurveyed)
Sections 15, 21, and 30 (fractional).
Township 3 South, Range 21 West (Unsurveyed)
Section 26;
Sections 27 and 28 (fractional);
Sections 29 through 31 (fractional), inclusive;
Sections 33, 35, and 36 (fractional).
Township 1 North, Range 20 West (Unsurveyed)
Section 15 (fractional);
Section 35.
Aggregating approximately 29,900 acres, more or less.
''(3) No later than 180 days following the completion of the
conveyances required by paragraph (1), Cook Inlet Region, Inc., shall
convey to each of the Village Corporations referred to in paragraph (2)
the surface estate in such lands described in Appendix A of that
certain Agreement dated August 31, 1976, known as the Deficiency
Agreement, as the Village Corporations have identified, and in the
order they identified in their priority selection rounds, to satisfy
each Village Corporation's section 12(a) entitlement under the
Settlement Act.
''(4) If the Secretary does not convey the lands in paragraph (2)
within 90 days of the date of the enactment of this subsection, then
all right, title, and interest of the United States in and to the
surface estate of such lands shall nevertheless pass immediately to the
Village Corporations named in paragraph (2).
''(5) Nothing in this subsection shall be construed to increase or
decrease the entitlement under the Settlement Act of any of the Village
Corporations named in this subsection or of Cook Inlet Region, Inc.''.
Example Output: Amends Federal law to provide for conveyance of certain Alaskan lands under the Alaska Native Claims Settlement Act to: (1) Chickaloon-Moose Creek Native Association, Inc.; (2) Knikatnu, Inc.; (3) Ninilchik Native Association, Inc.; (4) Seldovia Native Association, Inc.; and (5) Tyonek Native Corporation.

Example Input: SECTION 1. SHORT TITLE.

This Act may be cited as the ''Positive Train Control Enforcement
and Implementation Act of 2015''.

SEC. 2. ENSURING SAFE IMPLEMENTATION OF POSITIVE TRAIN CONTROL ON
POISONOUS OR TOXIC-BY-INHALATION AND PASSENGER RAIL
LINES.

Section 20157 of title 49, United States Code, is amended--
(1) in subsection (a)(1)--
(A) by striking ''18 months after the date of
enactment of the Rail Safety Improvement Act of 2008''
and inserting ''60 days after the date of enactment of
the Positive Train Control Enforcement and
Implementation Act of 2015'';
(B) by striking ''develop'' and inserting
''revise'';
(C) by striking ''December 31, 2015'' and inserting
''December 31, 2018, or the deadline determined
appropriate by the Secretary pursuant to paragraph
(2)''; and
(D) in subparagraph (B) by striking ''parts'' and
inserting ''sections'';
(2) by striking subsection (a)(2) and inserting the
following:
''(2) Authority to extend deadline.--
''(A) The Secretary may extend the deadline
described in paragraph (1) of this subsection,
applicable to each carrier or entity required to submit
a plan under paragraph (1), for a period not to exceed
12 months if such a carrier or entity demonstrates to
the satisfaction of the Secretary that such carrier or
entity--
''(i) will not be able to implement a
positive train control system by the deadline
described in paragraph (1) due to technical,
programmatic, or operational challenges, such
as availability of public funding, spectrum,
technology, and interoperability standards;
''(ii) has taken actions to address such
challenges and mitigate risks to successful
implementation of a positive train control
system; and
''(iii) has made good faith efforts to
implement the plan described in paragraph (1).
''(B)(i) The Secretary may grant an additional one-
time extension of the deadline described in paragraph
(1), applicable to each carrier or entity required to
submit a plan under paragraph (1), not to exceed 12
months, if such a carrier or entity, or a group
thereof, is not able to fully implement a positive
train control system on or before the date that is the
last day of the extension granted under subparagraph
(A), and such carrier or entity--
''(I) demonstrates to the satisfaction of
the Secretary that implementing a positive
train control system was delayed due to 1 or
more circumstances beyond the control of the
carrier or entity, such as a delay in Federal
approval of a plan, testing, or certification;
or
''(II) demonstrates to the satisfaction of
the Secretary--
''(aa) that such carrier or entity
will not be able to implement a
positive train control system by the
deadline described in paragraph (1) due
to technical, programmatic, or
operational challenges;
''(bb) due diligence in its efforts
to fully implement a positive train
control system; and
''(cc) that substantial progress
has been made in deploying positive
train control, to the extent feasible.
''(ii) A demonstrating carrier or entity under
clause (i) must certify to the Secretary in writing
that such carrier or entity will be in full compliance
with the requirements of this section on or before the
date that is the last date of the extension granted
under clause (i).
''(3) Implementation.--
''(A) The revised plan shall--
''(i) describe how the railroad carrier or
entity will provide for interoperability of the
system with movements of trains of other
railroad carriers or entities over its lines;
''(ii) to the extent practical, provide for
implementation of the system in a manner that
addresses areas of greater risk before areas of
lesser risk;
''(iii) comply with this section and
subpart I of part 236 of title 49, Code of
Federal Regulations; and
''(iv) include a detailed schedule and
sequence for fully implementing a positive
train control system in accordance with this
section and such regulations.
''(B) The railroad carrier shall implement a
positive train control system in accordance with such
plan.'';
(3) by striking subsections (c) and (d) and inserting the
following:
''(c) Progress Reports.--Not later than January 1, 2017, and
annually thereafter until full implementation of positive train control
systems has been completed, each railroad carrier or entity required to
revise and transmit a plan under subsection (a) shall submit to the
Secretary a report on the progress of such carrier or entity toward
implementing positive train control systems.
''(d) Reports.--
''(1) Congressional notification.--Not later than April 1,
2018, the Secretary shall transmit to the Committee on
Transportation and Infrastructure of the House of
Representatives and the Committee on Commerce, Science, and
Transportation of the Senate a report on the progress of the
railroad carriers in implementing positive train control
systems.
''(2) Public availability.--The Secretary shall make
available to the public on the Department of Transportation's
Internet Web site each progress report submitted pursuant to
paragraph (1) and subsection (c).''; and
(4) in subsection (h)--
(A) by striking ''The Secretary'' and inserting the
following:
''(1) In general.--The Secretary''; and
(B) by adding at the end the following:
''(2) Provisional operation.--In lieu of the requirements
of paragraph (1), the Secretary may authorize a railroad
carrier or other entity to commence operation in revenue
service of a positive train control system or component to the
extent necessary to enable the safe implementation of positive
train control systems in phases.''.
Example Output:
Positive Train Control Enforcement and Implementation Act of 2015 This bill extends deadlines and modifies requirements for railroad carriers and providers of intercity or commuter rail passenger transportation to implement positive train control (PTC) systems. (A PTC system is a communications and signaling system designed to prevent train-to-train collisions, over-speed derailments, incursions into established work zone limits, and the movement of a train through a switch left in the wrong position. Railroads which carry passengers or have high-volume freight traffic with certain hazardous materials are required to implement a PTC system.) Within 60 days of enactment of this bill, each Class I railroad carrier (the largest operators by revenue) and provider of intercity or commuter rail passenger transportation must submit to the Department of Transportation (DOT) a plan for implementing PTC by December 31, 2018, instead of the December 31, 2015, deadline required under current law. DOT may extend the deadline if specified requirements are met. The revised plan must include a detailed schedule and sequence for fully implementing PTC in a manner that complies with specified regulations, and railroads must implement PTC in accordance with the plan. DOT may authorize a railroad carrier or other entity to begin the provisional operation of a PTC system without the required certification if it is necessary to enable the safe implementation of PTC in phases.