In this task, you are given text for US Congressional and California state bills, your task is to generate a summary for this bill.
--------
Question: SECTION 1. INCLUSION OF ADDITIONAL PORTION OF THE LITTLE SANDY RIVER
WATERSHED IN THE BULL RUN WATERSHED MANAGEMENT UNIT,
OREGON.

(a) In General.--Public Law 95-200 (16 U.S.C. 482b note) is amended
by striking section 1 and inserting the following:

''SECTION 1. ESTABLISHMENT OF SPECIAL RESOURCES MANAGEMENT UNIT;
DEFINITION OF SECRETARY.

''(a) Establishment.--
''(1) In general.--There is established, subject to valid
existing rights, a special resources management unit in the
State of Oregon comprising approximately 98,272 acres, as
depicted on a map dated September, 1998, and entitled 'Bull Run
Watershed Management Unit'.
''(2) Map.--The map described in paragraph (1) shall be on
file and available for public inspection in the offices of the
Regional Forester-Pacific Northwest Region, Forest Service,
Department of Agriculture, and in the offices of the State
Director, Bureau of Land Management, Department of the
Interior.
''(3) Boundary adjustments.--Minor adjustments in the
boundaries of the unit may be made from time to time by the
Secretary after consultation with the city and appropriate
public notice and hearings.
''(b) Definition of Secretary.--In this Act, the term 'Secretary'
means--
''(1) with respect to land administered by the Secretary of
Agriculture, the Secretary of Agriculture; and
''(2) with respect to land administered by the Secretary of
the Interior, the Secretary of the Interior.''.
(b) Conforming and Technical Amendments.--
(1) Secretary.--Public Law 95-200 (16 U.S.C. 482b note) is
amended by striking ''Secretary of Agriculture'' each place it
appears (except subsection (b) of section 1, as added by
subsection (a), and except in the amendments made by paragraph
(2)) and inserting ''Secretary''.
(2) Applicable law.--
(A) In general.--Section 2(a) of Public Law 95-200
(16 U.S.C. 482b note) is amended by striking
''applicable to National Forest System lands'' and
inserting ''applicable to National Forest System land
(in the case of land administered by the Secretary of
Agriculture) or applicable to land under the
administrative jurisdiction of the Bureau of Land
Management (in the case of land administered by the
Secretary of the Interior)''.
(B) Management plans.--The first sentence of
section 2(c) of Public Law 95-200 (16 U.S.C. 482b note)
is amended--
(i) by striking ''subsection (a) or (b)''
and inserting ''subsections (a) and (b)''; and
(ii) by striking '', through the
maintenance'' and inserting ''(in the case of
land administered by the Secretary of
Agriculture) or section 202 of the Federal Land
Policy and Management Act of 1976 (43 U.S.C.
1712) (in the case of land administered by the
Secretary of the Interior), through the
maintenance''.

SEC. 2. MANAGEMENT.

(a) Timber Harvesting Restrictions.--Section 2(b) of Public Law 95-
200 (16 U.S.C. 482b note) is amended by striking paragraph (1) and
inserting the following:
''(1) In general.--Subject to paragraph (2), the Secretary
shall prohibit the cutting of trees on Federal land in the
entire unit, as designated in section 1 and depicted on the map
referred to in that section.''.
(b) Repeal of Management Exception.--The Oregon Resource
Conservation Act of 1996 (division B of Public Law 104-208) is amended
by striking section 606 (110 Stat. 3009-543).
(c) Repeal of Duplicative Enactment.--Section 1026 of division I of
the Omnibus Parks and Public Lands Management Act of 1996 (Public Law
104-333; 110 Stat. 4228) and the amendments made by that section are
repealed.
(d) Water Rights.--Nothing in this section strengthens, diminishes,
or has any other effect on water rights held by any person or entity.

SEC. 3. LAND EXCHANGE.

(a) Land Exchange.--Upon application by the city of Portland,
Oregon (referred to in this section as the ''city''), the Secretary of
Agriculture shall enter into negotiations with the city for the
transfer of National Forest System land underlying the city's Bull Run
water supply facilities to the city in exchange for city-owned land
lying within the boundaries of any unit of the National Forest System
in Oregon or Washington.
(b) Time for Exchange.--Subject to subsection (c), the Secretary
shall expedite the negotiations, if the city applies for a land
exchange under subsection (a), and shall complete such a land exchange
not later than September 30, 2001.
(c) Applicability of Other Laws.--Except as provided in subsection
(d), any land exchange under this section shall be carried out in
accordance with section 206 of the Federal Land Policy and Management
Act of 1976 (43 U.S.C. 1716) and other applicable law.
(d) Exception to Single State Limitation on Exchange.--The
requirement that Federal and non-Federal parcels of land exchanged for
each other must be located within the same State, as specified in the
Act entitled ''An Act to Consolidate National Forest Lands'', approved
March 20, 1922 (16 U.S.C. 485), and the first sentence of section
206(b) of the Federal Land Policy and Management Act of 1976 (43 U.S.C.
1716(b)), shall not apply to the land exchange authorized by this
section.

Answer: Amends Federal law to reestablish and add acreage to the Bull Run Watershed Management Unit in Oregon.
Directs the Secretary of Agriculture or the Interior, as applicable, to prohibit the cutting of trees on Federal land in the entire unit.
Repeals a provision of the: (1) Oregon Resource Conservation Act of 1996 which requires certain Unit lands that are not contained in the Bull Run River Drainage to be managed in accordance with the law establishing the Unit; and (2) Omnibus Parks and Public Lands Management Act of 1996 regarding the Unit.
Requires the Secretary of Agriculture: (1) upon application by the city of Portland, Oregon, to enter into negotiations with the city for the transfer of National Forest System land underlying the city's Bull Run water supply facilities to the city in exchange for city- owned land lying within the boundaries of any unit of the National Forest System in Oregon or Washington; and (2) to expedite the negotiations and complete such land exchange not later than September 30, 2001.

Question: SECTION 1. SHORT TITLE.

This Act may be cited as the ''Medical Device Cybersecurity Act of
2017''.

SEC. 2. CYBERSECURITY FOR MEDICAL DEVICES.

(a) In General.--Chapter V of the Federal Food, Drug, and Cosmetic
Act (21 U.S.C. 351 et seq.) is amended by inserting after section 520
(21 U.S.C. 360j) the following--

''SEC. 520A. CYBERSECURITY FOR DEVICES.

''(a) Definitions.--In this section:
''(1) Cyber device.--The term 'cyber device' means any
device that has network or Internet connectivity (such as near
field communication (NFC), Bluetooth, or WiFi), connects to an
external storage device or external media (such as a universal
serial bus (USB) or a compact disk), or has any other cyber
capability.
''(2) Cybersecurity fix or update.--The term 'cybersecurity
fix or update' means any modification to a cyber device that
addresses a software, firmware, or hardware error or known
vulnerability, or a security update, and does not change the
therapeutic or diagnostic function of the device.
''(b) Transparency of Risk Prior to Marketing.--
''(1) Report card.--
''(A) In general.--The Secretary, in coordination
with the entities described in subparagraph (B), shall
develop a report card for indicating the cybersecurity
functions of cyber devices. The report card shall
contain the contents described in paragraph (2) and be
disclosed in accordance with paragraph (3).
''(B) Coordination.--The entities described in this
subparagraph are the following:
''(i) The National Institute of Standards
and Technology.
''(ii) The Secretary of Homeland Security.
''(iii) The National Coordination Office
supporting the Networking and Information
Technology Research and Development Program.
''(iv) The Federal Trade Commission.
''(v) Any other relevant agency, or
cybersecurity or medical device industry group,
as determined by the Secretary.
''(2) Contents of report card.--Each report card shall
contain each of the following:
''(A) Information pertaining to all essential
elements described in the most recent version of the
Manufacturer Disclosure Statement for Medical Device
Security, as set forth by the Healthcare Information
and Management Systems Society and the National
Electrical Manufacturers Association.
''(B) A traceability matrix, accepted by the
Secretary, that--
''(i) redacts content that is confidential,
as determined by the Secretary; and
''(ii) establishes design components and
traces such components to design compensating
controls.
''(C) A description of any manufacturer
compensating controls that--
''(i) effectively address known common
vulnerabilities and exposures; and
''(ii) provide providers with industry
standard compensating controls for improving
cybersecurity.
''(D) A description of--
''(i) any cybersecurity evaluation
conducted on the device, including any testing,
validation, or verification of the device;
''(ii) who conducted such evaluation; and
''(iii) the results of such evaluation.
''(E) A cybersecurity risk assessment conducted by
the manufacturer, or a third party, explaining the risk
of the device to patient safety and clinical hazards.
''(F) An indication of whether the device is
capable of being remotely accessed. If the device is
capable of being remotely accessed, an indication of
any security measures and access protocols the device
has in place to secure such access.
''(3) Disclosure of report card.--
''(A) Clearance or approval.--The manufacturer of
any cyber device shall include the report card in any
notification to the Secretary under section 510(k) or
any application for premarket approval under section
515(c), as applicable.
''(B) Public accessibility.--
''(i) In general.--The Secretary shall
provide a copy of the report card to any entity
described in clause (ii) that submits a request
for such copy to the Secretary.
''(ii) Entities permitted access.--An
entity described in this clause is--
''(I) any health care industry
entity, consisting of any provider,
device manufacturer, the Federal
Government, health care information
security researchers, and health care
academia; and
''(II) any entity determined by the
Secretary to have a valid interest in
the report card.
''(C) Updated report card.--For as long as the
cyber device receives technical support from the
manufacturer or any other third party authorized by the
manufacturer, the manufacturer shall submit to the
Secretary an annual update to the report card.
''(c) Protecting Remote Access to Managed Solutions.--
''(1) In general.--A manufacturer of a cyber device shall:
''(A) In order to remotely access such device after
selling, or otherwise transferring ownership of, the
device, obtain consent for such access from the
provider owning or operating the device and from any
patient on which the device is used. Such consent may
be in the form of an agreement entered into between the
provider and the manufacturer at the time the device is
sold to the provider, and may be for the manufacturer
to remotely access the device at times specified in
such agreement or by an agreement between the
manufacturer and provider entered into thereafter. In
the case of an agreement described in the previous
sentence, consent of the patient may be obtained
through the provider notifying the patient of such
agreement.
''(B) For any cyber device that the manufacturer
may remotely access in accordance with subparagraph
(A):
''(i) Notify the provider when the
manufacturer accesses the device remotely,
including the name of the person with such
access, the kinds of tasks that can be
performed through such access, and the software
used to access the device. Such notification
can be in the form of an audit log described in
clause (ii) if the audit log is readily
available to the provider.
''(ii) Maintain an audit log for each time
the manufacturer accesses the device remotely
and make such log accessible to the provider.
''(C) Except as provided in paragraph (2), for any
cyber device that has the capability to be accessed
remotely by the manufacturer or any other entity:
''(i) Implement multi-factor authentication
for accessing any cyber capability of the
device.
''(ii) Secure data in motion and data at
rest with data encryption, and other best
practices, approved by the National Institute
of Standards and Technology.
''(iii) Install automated tools to track
access, or identify attempts at unauthorized
access, to any cyber capability of the device.
''(iv) Adopt whitelisting approaches and
changeable passwords for accessing any cyber
capability of the device.
''(v) Comply with the remote access
provisions recommended by the National
Institute of Standards and Technology, in the
document entitled 'Security for Telecommuting
and Broadband Communications (NIST Special
Publication 800-46)', published in August 2002.
''(2) Exceptions.--A manufacturer may submit a petition to
the Secretary to exempt a cyber device from any requirement
under paragraph (1)(C). The Secretary may grant such an
exemption if it determines that the manufacturer can prove the
exemption would pose not more than a minimal risk to patient
health, minimal risk to privacy, and minimal risk of a cyber
vulnerability.
''(d) Cybersecurity Fixes or Updates.--
''(1) Re-clearance or reapproval.--Unless at the request of
the Secretary due to a unique and extenuating circumstance, any
cybersecurity fix or update shall not require a new
notification under section 510(k) or application for premarket
approval under section 515(c).
''(2) Free cybersecurity fixes or updates.--A manufacturer
of a cyber device shall provide any cybersecurity fix or update
to the device free of charge until--
''(A) the date on which any agreement to provide
such fixes or updates, entered into between the
manufacturer (or a third party authorized by the
manufacturer) and a provider, expires; or
''(B) if no agreement described in subparagraph (A)
is in effect, the date that is 10 years after the date
on which the manufacturer discontinues marketing the
device.
''(e) End-of-Life Device.--Not later than 90 days after a
manufacturer declares that it will no longer sell a cyber device, the
manufacturer of such device shall--
''(1) shall provide any provider owning or operating the
device with the report card, as most recently updated under
subsection (b)(3)(C);
''(2) to the extent practicable, inform any provider owning
or operating the device that the manufacturer will no longer be
manufacturing such device;
''(3) provide notice to any provider owning or operating
the device of the date on which the last cybersecurity fix or
update will be provided by the manufacturer;
''(4) notify the Secretary of such declaration; and
''(5) provide any provider owning or operating the device
with the following information related to the device:
''(A) Compensating controls on how to securely
configure the cyber device if the device stays in
operation past the date on which the manufacturer stops
providing cybsecurity fixes or updates under subsection
(d)(2).
''(B) Documentation on secure preparation for
recycling and disposal of the device.
''(C) Specific guidance regarding supporting
infrastructure architecture, including network
segmentation and device isolation requirements.
''(D) Instructions on how to delete any personally
identifiable information, protected health information,
or other site-specific sensitive data such as
configuration files.
''(f) Applicability.--This section shall not apply with respect to
any cyber device for which, prior to the enactment of the Medical
Device Cybersecurity Act of 2017, a notification was submitted under
section 510(k), or for which an application for premarket approval was
submitted under section 515(c).''.
(b) Enforcement.--Section 301 of the Federal Food, Drug, and
Cosmetic Act (21 U.S.C. 331) is amended by adding at the end the
following:
''(eee) The failure to comply with subsection (b), (c), (d), or (e)
of section 520A.''.
(c) Expansion of ICS-CERT Responsibilities.--
(1) Definitions.--In this subsection:
(A) Cyber device.--The term ''cyber device'' has
the meaning given the term in section 520A of the
Federal Food, Drug, and Cosmetic Act, as added by
subsection (a).
(B) ICS-CERT.--The term ''ICS-CERT'' means the
Industrial Control Systems Cyber Emergency Response
Team of the National Cybersecurity and Communications
Integration Center established under section 227 of the
Homeland Security Act of 2002 (6 U.S.C. 148).
(C) Under secretary.--The term ''Under Secretary''
means the Under Secretary appointed under section
103(a)(1)(H) of the Homeland Security Act of 2002 (6
U.S.C. 113(a)(1)(H)).
(2) Expansion.--Not later than 180 days after the date of
enactment of this Act, the Under Secretary shall expand the
duties and mission of ICS-CERT to include--
(A) investigating cybersecurity vulnerabilities of
cyber devices that may cause harm to human life or
significant misuse of personal health information, as
determined necessary by ICS-CERT or at the request of
the Under Secretary; and
(B) coordinating device-specific responses to
cybersecurity incidents and vulnerabilities with
respect to cyber devices.
(3) Consultation.--In carrying out paragraph (2), the Under
Secretary shall consult with relevant agencies within the Food
and Drug Administration, the Department of Health and Human
Services, the National Institute of Standards and Technology,
the National Coordination Office for Networking and Information
Technology Research and Development, the Federal Trade
Commission, and experts in the cybersecurity and medical device
industries.
(4) Coordinated disclosure.--Not later than 6 months after
the date of enactment of this Act, the Secretary of Homeland
Security shall issue rules relating to the coordinated
disclosure of controlled and uncontrolled cybersecurity
vulnerabilities of cyber devices, which shall--
(A) outline the roles and responsibilities of ICS-
CERT and manufacturers and providers of cyber devices;
(B) provide timelines for all required actions; and
(C) provide for the enforcement of cooperation
between ICS-CERT and manufacturers and providers of
cyber devices.
(5) Report.--Not later than 1 year after the date of
enactment of this Act, the Under Secretary shall submit to
Congress a report detailing the expanded duties and mission of
ICS-CERT under paragraph (2).

Answer: Medical Device Cybersecurity Act of 2017 This bill amends the Federal Food, Drug, and Cosmetic Act to require the Food and Drug Administration (FDA), in coordination with others,to create a cybersecurity report card for devices that have network or Internet connectivity, connect to an external drive or external media, or have any other cyber capability. Report cards must contain specified information, including: (1) information pertaining to the essential elements described in the most recent version of the Manufacturer Disclosure Statement for Medical Device Security, (2) a cybersecurity risk assessment conducted by the manufacturer or third party, and (3) whether the device is capable of being accessed remotely. A cyber device manufacturer must includea report card in any premarket notification or application for premarket approval. TheFDA shall provide a copy of a device's report cardif requestedby a health care industry entity or an entity with a valid interest in the report card. The bill establishes procedures, including notifications toproviders and patients,for manufacturerswhen cyber devices areremotely accessed or no longer going to be sold. Fixes and updates to cyber devices must be free of charge for specified time periods. The bill expands the responsibilities of the Department of Homeland Security'sIndustrial Control Systems Cyber Emergency Response Team to include investigating cybersecurity vulnerabilities of cyber devices that may cause harm to human life or the significant misuse of personal health information, and coordinating device-specific responses.

Question: SECTION 1. SHORT TITLE.

This Act may be cited as the ''Professional Sports Integrity Act of
2005''.

SEC. 2. PURPOSE.

The purpose of this Act is to protect the integrity of professional
sports and strengthen the health and safety standards for Major League
Baseball, the National Basketball Association, the National Football
League, and the National Hockey League, through the establishment of
minimum standards and procedures for testing for prohibited substances
and methods.

SEC. 3. DEFINITIONS.

As used in this Act--
(1) the term ''professional baseball, basketball, football,
or hockey game'' means any baseball, basketball, football, or
hockey game held in the United States between any professional
teams of a major professional league in which players compete
for financial compensation;
(2) the term ''major professional league'' means Major
League Baseball, the National Basketball Association, the
National Football League, and the National Hockey League; and
(3) the term ''professional athlete'' means an individual
who competes in a professional baseball, basketball, football,
or hockey game.

SEC. 4. TESTING OF BANNED SUBSTANCES FOR CERTAIN PROFESSIONAL ATHLETES.

(a) Conduct Prohibited.--It is unlawful for a major professional
league to organize or produce, or for any person to compete in, a
professional baseball, basketball, football, or hockey game without
meeting the requirements in subsection (b).
(b) Minimum Testing Requirements.--Each major professional league
shall implement policies and procedures for the testing of the use of
prohibited substances and methods by professional athletes who compete
in each respective major professional league. Such policies and
procedures shall, at minimum, include the following:
(1) Timing and frequency of testing.--Each professional
athlete shall be tested a minimum of 4 times each year that
such athlete is competing in games organized by the major
professional league. Each athlete shall be tested--
(A) at least twice, at random intervals, during
each season of play; and
(B) at least twice, at random intervals, during the
off-season.
Each major professional league shall also provide for
additional tests to be administered when the league has
reasonable cause to believe that a particular athlete or team
may be in violation of such league's policies regarding
prohibited substances and methods. An athlete shall not be
notified of any test in advance.
(2) Method of testing.--Each test shall consist of each
athlete providing a blood or urine sample. The party
administering the test shall observe the provision of each
sample. Each major professional league shall consult with the
United States Anti-Doping Agency regarding method of testing,
including selection, notification, collection, processing, and
chain of custody issues.
(3) Applicable substances.--Each professional athlete shall
be tested for the substances and methods determined by the
World Anti-Doping Agency to be prohibited at the time of each
test. A major professional league may make exceptions for any
substance that has been prescribed by a team physician for a
documented medical condition.
(4) Analysis of sample.--Each sample provided shall be
analyzed by a laboratory accredited or otherwise approved by
the World Anti-Doping Agency.
(5) Positive tests.--A positive test shall consist of the
presence in the sample of a substance prohibited pursuant to
paragraph (3), or its metabolites or markers. A refusal by a
professional athlete to submit to a test shall also be
considered a positive test.
(6) Penalties.--A positive test shall result in the
following penalties:
(A) A professional athlete who tests positive for
the first time shall be immediately suspended for a
minimum of 2 years.
(B) A professional athlete who tests positive for a
second time shall be permanently barred from
participation in the activities of that major
professional league.
All suspensions shall include a loss of pay for the period of
the suspension.
(7) Disclosure.--A positive test result by any professional
athlete, including the name of such athlete and substance,
shall be disclosed to the public.
(8) Appeals procedure.--A professional athlete who tests
positive shall be provided an opportunity for a hearing and a
right to appeal any penalty imposed. Each major professional
league shall consult with the United States Anti-Doping Agency
in the development of procedures for adjudication and appeals.

SEC. 5. ENFORCEMENT BY THE FEDERAL TRADE COMMISSION.

(a) Unfair and Deceptive Act or Practice.--A violation of section 4
shall be treated as a violation of a rule defining an unfair or
deceptive act or practice prescribed under section 18(a)(1)(B) of the
Federal Trade Commission Act (15 U.S.C. 57a(a)(1)(B)).
(b) Enforcement Authority.--Notwithstanding section 5(n) of the
Federal Trade Commission Act (15 U.S.C. 45(n)), the Federal Trade
Commission shall enforce this Act in the same manner, by the same
means, and with the same jurisdiction, powers, and duties as though all
applicable terms and provisions of the Federal Trade Commission Act (15
U.S.C. 41 et seq.) were incorporated into and made a part of this Act.
(c) Rulemaking Authority.--The Federal Trade Commission may, by
rule pursuant to section 18(a)(1)(B) of the Federal Trade Commission
Act (15 U.S.C. 57a(a)(1)(B)), extend the requirements of section 4 to
other professional sports leagues operating in interstate commerce
(other than those described in section 3(2)) and to the National
Collegiate Athletic Association.

SEC. 6. REPORTING REQUIREMENT.

Not later than 1 year after the date of enactment of this Act, and
every 2 years thereafter, each major professional league shall transmit
to the Federal Trade Commission, the Committee on Energy and Commerce
of the House of Representatives, and the Committee on Commerce,
Science, and Transportation of the Senate, a report on its testing
policies and procedures. The reports shall include--
(1) a comparison of the league's policies and procedures to
the policies and procedures required by this Act; and
(2) aggregate data concerning the number of tests
administered each year and the outcomes of such tests,
including the prohibited substances found, but shall not
include the names of any professional athletes who have tested
positive.

SEC. 7. SENSE OF CONGRESS.

It is the sense of Congress that other professional sports leagues
and associations not covered by this Act should adopt policies and
procedures for the testing of steroids and other illicit substances
that are substantially similar to those required by this Act.

Answer:
Professional Sports Integrity Act of 2005 - Prohibits Major League Baseball, the National Basketball Association, the National Football League, or the National Hockey League from organizing or producing, or any person from competing in, a professional baseball, basketball, football, or hockey game without meeting the testing requirements established by this Act. Requires each such league to implement testing for the use of prohibited substances by professional athletes who compete in that league, including: (1) testing each athlete at least four times a year, twice during both the season and the off-season; (2) additional testing with reasonable cause; and (3) testing for all substances prohibited by the World Anti-Doping Agency.

Requires for each athlete who tests positive: (1) a suspension for a minimum of two years for the first positive test result; (2) a permanent ban for any subsequent positive test result; (3) public disclosure of both the athlete's name and the prohibited substance; and (4) an opportunity to appeal.

Deems a violation of this Act to be an unfair or deceptive act or practice. Authorizes the Federal Trade Commission (FTC) to enforce this Act.

Requires biennial reports for each league.

Expresses the sense of Congress that other professional sports leagues should adopt policies and procedures for the testing of steroids and other illicit substances that are substantially similar to those required by this Act.