zli12321/Bills huggingface dataset:
Cyber Information Sharing Tax Credit Act - Amends the Internal Revenue Code to allow a refundable tax credit for qualified Information Sharing and Analysis Organization costs (defined as the sum of dues for membership in the Organization, personnel participation costs, product and service costs directly related to the sharing of information with the Organization, and other amounts [not including amounts for travel] relating to participation in activities of the Organization).

Date: 2014-07-31
Topic: Technology (Computers)
Subject: Taxation
Online Competition and Consumer Choice Act of 2015

Directs the Federal Communications Commission to promulgate regulations that prohibit broadband providers, in transmitting network traffic over the broadband Internet access service of an end user, from: (1) entering an agreement with an edge provider (a provider of Internet content, applications, services, or access devices) to give preferential treatment or priority to the traffic of such edge provider in exchange for consideration (commonly referred to as "paid prioritization"); and (2) giving preferential treatment or priority to content, applications, services, or devices that are provided or operated by such broadband provider or an affiliate of such broadband provider.

Prohibits this Act from superseding any obligation or authorization of a broadband provider to address the needs of emergency communications, law enforcement, public safety, or national security authorities.

Sets forth enforcement authority under the Communications Act of 1934, with modified forfeiture standards.

Date: 2015-01-07
Topic: Technology (Computers)
Subject: Science, technology, communications
Global Internet Freedom Act of 2015 or the GIF Act of 2015

Prohibits the Assistant Secretary of Commerce for Communications and Information from relinquishing the responsibility of the National Telecommunications and Information Administration with respect to Internet Assigned Numbers Authority functions, including: (1) coordination of the assignment of technical Internet protocol parameters, (2) performance of administrative functions associated with Internet domain name system root zone management, and (3) allocation of Internet numbering resources.

Date: 2015-01-14
Topic: Technology (Computers)
Subject: Science, technology, communications
Secure Data Act of 2015

Prohibits a federal agency from requiring or requesting a manufacturer, developer, or seller of any computer hardware, software, or electronic device made available to the general public to design or alter the security functions in such products to allow the surveillance of any user or the physical search of such product by any agency. Exempts from such prohibition products used by law enforcement agencies for electronic surveillance as authorized under the Communications Assistance for Law Enforcement Act.

Date: 2015-02-04
Topic: Technology (Computers)
Subject: Science, technology, communications
Domain Openness Through Continued Oversight Matters Act of 2015 or the DOTCOM Act of 2015

Prohibits the Assistant Secretary of Commerce for Communications and Information from permitting the National Telecommunications and Information Administration's (NTIA's) role in the performance of the Internet Assigned Numbers Authority (IANA) functions to cease until 30 legislative days after the Assistant Secretary submits to Congress a report that contains: (1) the proposal relating to the transition of the NTIA's stewardship of the IANA functions that was developed in a process convened by the Internet Corporation for Assigned Names and Numbers (ICANN) at the request of the NTIA, and (2) the following required certifications by the Assistant Secretary.

Requires the Assistant Secretary to certify that: (1) such proposal supports and enhances the multistakeholder model of Internet governance, maintains the security, stability, and resiliency of the Internet domain name system, meets the needs of global customers and partners of the IANA services, maintains the openness of the Internet, and does not replace the role of the NTIA with a government-led or intergovernmental organization solution; and (2) the required changes to ICANN's bylaws contained in the final report of ICANN's Cross Community Working Group on Enhancing ICANN Accountability and the changes to ICANN's bylaws required by ICANN's IANA Stewardship Transition Coordination Group have been adopted.

Date: 2015-02-05
Topic: Technology (Computers)
Subject: Science, technology, communications
Global Free Internet Act of 2015

Establishes a Task Force on the Global Internet to be hosted by the Department of Commerce.

Requires the Task Force to develop and implement strategies in response to foreign and domestic government policies that: (1) unjustifiably or unreasonably burden or restrict international trade in Internet-related goods, services, and content; (2) mandate or prefer certain Internet-related technology standards; (3) impede the free flow of information on the Internet; or (4) otherwise threaten the open, global nature of the Internet, the interests of Internet users, and the United States in Internet-related international trade and discourse.

Directs the Task Force to: (1) coordinate federal agencies' implementation of such strategies, and (2) consult and share timely information with the Internet Corporation for Assigned Names and Numbers and civil society policy groups.

Instructs the U.S. Trade Representative to initiate investigations and consider imposing sanctions in accordance with the Trade Act of 1974 for any practices of a foreign government or international body identified as priority concerns.

Directs the Federal Trade Commission and the Department of Justice to investigate whether U.S. antitrust laws are violated by identified practices or the related actions of nongovernmental entities.

Requires the Task Force to report to Congress and the President regarding the sufficiency of existing multilateral and bilateral trade agreements in advancing a single open, global Internet.

Instructs the Task Force to organize training of foreign and domestic government officials and national standard-setting and conformity assessment bodies, including coordination with nongovernmental international and domestic standards bodies.

Date: 2015-03-04
Topic: Technology (Computers)
Subject: Foreign trade and international finance
Open Internet Act of 2015

Amends the Telecommunications Act of 1996 to authorize the Federal Communications Commission (FCC) to adopt the rules adopted on December 21, 2010, in the Report and Order in the matter of preserving the open Internet and broadband industry practices. Requires the FCC to restore portions of such rules that were vacated by the U.S. Court of Appeals for the D.C. Circuit in Verizon v. Federal Communications Commission (decided on January 14, 2014).

Date: 2015-03-17
Topic: Technology (Computers)
Subject: Science, technology, communications
Executive Cyberspace Coordination Act of 2015

This bill establishes the National Office for Cyberspace within the Executive Office of the President, to be headed by a Director. The Office shall serve as the principal office for coordinating issues relating to cyberspace, including achieving an assured, reliable, secure, and survivable information infrastructure while promoting national economic interests, security, and civil liberties. The bill defines "information infrastructure" as the underlying framework that information systems and assets rely on to process, store, or transmit information electronically.

The bill assigns new duties to the Director, including: (1) reviewing at least annually, and approving or disapproving, agency information security programs; (2) coordinating information security training for federal employees with the Office of Personnel Management; and (3) ensuring the adequacy of protections for privacy and civil liberties. The head of each agency must submit to the Director an annual budget relating to the protection of information infrastructure for the agency, which shall include a review of any threats to information technology for such agency and a plan to secure the information infrastructure for such agency based on threats to information technology.

Date: 2015-04-13
Topic: Technology (Computers)
Subject: Government operations and politics
United States Chief Technology Officer Act

Amends the National Science and Technology Policy, Organization, and Priorities Act of 1976 to authorize the President to appoint a United States Chief Technology Officer whose duties shall include advising the President and the Director of the Office of Science and Technology Policy on federal information systems, technology, data, and innovation policies and initiatives.

Date: 2015-04-14
Topic: Technology (Computers)
Subject: Government operations and politics
Smartphone Theft Prevention Act of 2015

Amends the Communications Act of 1934 to require commercial mobile service providers to make available on smartphones, in coordination with smartphone manufacturers and operating system providers, a function that an account holder may use remotely to: (1) delete or render inaccessible all information on the smartphone relating to the account holder, (2) render the smartphone inoperable on the global networks of such service providers, (3) prevent reactivation or reprogramming without a passcode or similar authorization after the smartphone has been rendered inoperable or has been subject to an unauthorized factory reset, and (4) restore personal information from the smartphone onto a compatible or interoperable device.

Requires service providers to ensure that smartphones: (1) prompt the account holder to enable such functions during the initial setup process, and (2) allow only the account holder to opt out.

Prohibits a smartphone from being manufactured in the United States or imported into the United States for sale or resale to the public, unless the smartphone is configured in such a manner that a service provider may comply with such functionality requirements.

Prohibits service providers from charging a fee for making available such functions, the initial prompt, and the ability to opt out.

Directs the Federal Communications Commission (FCC) to establish a common national framework for smartphone anti-theft measures to protect consumers.

Requires the FCC to determine whether this Act should apply to tablets with commercial mobile services.

Date: 2015-04-23
Topic: Technology (Computers)
Subject: Science, technology, communications
United States Commission on an Open Society with Security Act of 2015

Establishes the United States Commission on an Open Society with Security to study how the government may provide for both security in, and public access to, federal buildings and other federal property and sites.

Directs the Commission to examine: (1) government and private security practices and proposals, building design, public space management, counterterrorism needs, and refurbishment of existing federal facilities; (2) the effect of access to public facilities and spaces on free speech, the right to petition the government, other constitutional rights and civil liberties, economies of affected jurisdictions, architectural aesthetics, traffic and congestion, and employee job performance; (3) technology to augment or replace traditional modes of security; and (4) methods of assessing the risks posed by terrorism, balanced against the needs and values of open access.

Date: 2015-04-28
Topic: Technology (Computers)
Subject: Government operations and politics
Defending Internet Freedom Act of 2015

Prohibits the Assistant Secretary of Commerce for Communications and Information from relinquishing the responsibilities of the National Telecommunications and Information Administration (NTIA) with respect to Internet domain name functions, including Internet Assigned Numbers Authority (IANA) functions, unless the Assistant Secretary certifies to Congress that a final proposal has been received that ensures:

 control over the management of the Internet domain name system will not be exercised by a governmental or intergovernmental body; standards for freedoms of speech, of the press, of assembly, and of association are at least as protective as the First Amendment to the U.S. Constitution; the Internet Corporation for Assigned Names and Numbers (ICANN) has an external, independent process for reviewing and resolving disputes between ICANN and external parties, including the ability to reverse decisions of the board of directors; ICANN remains subject to U.S. law; ICANN has adopted disclosure procedures that are at least as protective of public access as the Freedom of Information Act; the U.S. government has been granted ownership of the ".gov" and ".mil" top-level domains; and ICANN has adopted additional measures recommended by the multistakeholder community. Requires such certification to ensure amendments to ICANN bylaws to prohibit ICANN from: (1) engaging in activities unrelated to ICANN's core mission of managing the IANA functions and proposing and overseeing policy decisions central to coordinating the global interoperability and uniqueness of Internet domain names; or (2) agreeing to impose on a registrar or registry any condition, such as a regulation of content, that is unrelated to ICANN's core mission.

Requires such a certification to also ensure amendments to bylaws concerning: (1) Governmental Advisory Committee advice and policy proposals, and (2) a required supermajority of the board of directors for votes regarding changes to bylaws.

Directs the Assistant Secretary, if such a certification is not submitted to Congress by a specified deadline, to extend through September 30, 2017, the existing IANA functions contract under which ICANN is required to perform IANA functions.

Date: 2015-05-12
Topic: Technology (Computers)
Subject: Science, technology, communications
(This measure has not been amended since it was reported to the House on March 30, 2016. The summary of that version is repeated here.)

No Rate Regulation of Broadband Internet Access Act

(Sec. 2) This bill prohibits the Federal Communications Commission (FCC) from regulating the rates charged for broadband Internet access service.

(Sec. 3) Nothing in this Act shall be construed to affect the FCC's authority to: (1) condition receipt of universal service support by a provider of broadband Internet access service on the regulation of the rates charged by such provider for the supported service, or (2) enforce regulations relating to truth-in-billing requirements or paid prioritization.

(Sec. 4) Broadband Internet access service shall not be construed to include data roaming or interconnection for purposes of this Act.

Date: 2015-06-04
Topic: Technology (Computers)
Subject: Science, technology, communications
Requires the Director of National Intelligence to carry out a study and report findings to Congress regarding appropriate standards to measure the damage of cyber incidents for purposes of determining the response to such incidents, including a method to quantify damage to affected computers, systems, and devices.

Date: 2015-06-09
Topic: Technology (Computers)
Subject: Armed forces and national security
EINSTEIN Act of 2015

Amends the Homeland Security Act of 2002 to require the Department of Homeland Security (DHS) to deploy, operate, and maintain (to make available for use by any federal agency, with or without reimbursement) capabilities to protect federal agency information and federal civilian information systems, including technologies to continuously diagnose, detect, prevent, and mitigate against cybersecurity risks involving such information or systems.

Authorizes the DHS Secretary to access, and allows federal agency heads to disclose to the Secretary, information traveling to or from or stored on such systems, regardless of from where the Secretary accesses such information, notwithstanding any law that would otherwise restrict or prevent such disclosures.

Authorizes the Secretary to retain, use, and disclose information obtained through such activities only to protect federal agency information and federal civilian information systems from cybersecurity risks or in furtherance of the national cybersecurity and communications integration center's (NCCIC's) authority, or, with DOJ approval and if disclosure of such information is not otherwise prohibited by law, to law enforcement only to investigate, prosecute, disrupt, or otherwise respond to:

 criminal computer fraud; an imminent threat of death or serious bodily harm; a serious threat to a minor, including sexual exploitation or threats to physical safety; or an attempt or conspiracy to commit any of such offenses. Provides liability protections to private entities authorized to assist the Secretary for such purposes.

Redefines for purposes of the NCCIC's cybersecurity functions: (1) "cybersecurity risk" to exclude actions that solely involve a violation of a consumer term of service or a consumer licensing agreement; and (2) "incident" to include an occurrence that actually or imminently jeopardizes, without lawful authority, an information system, thereby replacing a standard that includes occurrences that constitute a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

Date: 2015-07-29
Topic: Technology (Computers)
Subject: Government operations and politics
Strengthening State and Local Cyber Crime Fighting Act

(Sec. 2) This bill amends the Homeland Security Act of 2002 to establish in the Department of Homeland Security (DHS) a National Computer Forensics Institute to be operated by the U.S. Secret Service to: (1)  disseminate homeland security information related to the investigation and prevention of cyber and electronic crimes and related threats; and (2) educate, train, and provide equipment to state, local, tribal, and territorial law enforcement officers, prosecutors, and judges to carry out investigations, prosecutions, and court proceeding relating to such crimes and threats.

The institute:

 must provide education and training on investigation methods, computer and mobile device forensic examinations, network intrusion incidents, and methods to obtain, process, store, and admit digital evidence in court; must ensure that timely, actionable, and relevant expertise and homeland security information related to cyber and electronic crimes and threats is shared with such officers, prosecutors, and judges; and may provide officers, prosecutors, and judges with computer equipment and tools for such investigations and examinations. The Secret Service's network of Electronic Crime Task Forces is to be expanded through the addition of task force officers, prosecutors, and judges educated and trained at the institute, in addition to academia and private sector stakeholders.

The institute must seek opportunities to coordinate with the Federal Law Enforcement Training Center within DHS to help enhance the center's training for such cyber and electronic crimes and threats.

Date: 2015-09-11
Topic: Technology (Computers)
Subject: Crime and law enforcement
State and Local Cyber Protection Act of 2015

(Sec. 2) This bill amends the Homeland Security Act of 2002 to require the Department of Homeland Security's (DHS's) national cybersecurity and communications integration center (NCCIC) to assist state and local governments with cybersecurity by:

 upon request, identifying system vulnerabilities and information security protections to address unauthorized access, use, disclosure, disruption, modification, or destruction of information collected or maintained by, or information systems used or operated by, state or local governments or other organizations or contractors on their behalf; providing via a web portal updated resources and guidelines related to information security; coordinating through national associations to implement information security tools and policies to ensure the resiliency of state and local information systems; providing training on cybersecurity, privacy, and civil liberties; providing requested technical assistance to deploy technology that continuously diagnoses and mitigates cyber threats and to conduct threat and vulnerability assessments; coordinating vulnerability disclosures under standards developed by the National Institute of Standards and Technology; and ensuring that state and local governments are aware of DHS resources and other federal tools to ensure the security and resiliency of federal civilian information systems. The NCCIC's privacy and civil liberties training must include: (1) reasonable limits on the receipt, retention, use, and disclosure of information associated with specific persons that is not necessary for cybersecurity purposes; (2) data integrity standards requiring the prompt removal and destruction of obsolete or erroneous names and personal information that is unrelated to the risk or incident information; and (3) safeguards and confidentiality protections for cyber threat indicators and defensive measures, including information that is proprietary or business-sensitive that may be used to identify specific persons from unauthorized access or acquisition.

The NCCIC must seek feedback from state and local governments on the effectiveness of such activities and provide such information to Congress.

Date: 2015-11-02
Topic: Technology (Computers)
Subject: Government operations and politics
International Cyber Policy Oversight Act of 2015

This bill directs the Department of State to: (1) produce a comprehensive strategy, with a classified annex if necessary, relating to U.S. international cyberspace policy; and (2) publicly release such strategy and brief Congress upon its release, including any accompanying classified annex.

Date: 2015-11-02
Topic: Technology (Computers)
Subject: International affairs
Security and Privacy in Your Car Study Act of 2015 or the SPY Car Study Act of 2015

This bill requires the National Highway Traffic Safety Administration to conduct a study to determine and recommend standards for the regulation of the cybersecurity of motor vehicles manufactured or imported for sale in the United States. The study shall identify:

 isolation measures that are necessary to separate critical software systems that can affect the driver's control of the movement of the vehicle from other software systems; measures that are necessary to detect and prevent or minimize anomalous codes, in vehicle software systems, associated with malicious behavior; techniques that are necessary to detect and prevent, discourage, or mitigate intrusions into vehicle software systems and other cybersecurity risks in motor vehicles; and best practices to secure driving data about a vehicle's status or about the owner, lessee, driver, or passenger of a vehicle that is collected by the electronic systems of motor vehicles.

Date: 2015-11-05
Topic: Technology (Computers)
Subject: Transportation and public works
Application Privacy, Protection, and Security Act of 2016 or the APPS Act of 2016

This bill directs mobile device application developers, before the application collects personal data about the user, to notify the user and obtain the user's consent regarding the terms and conditions governing the collection, use, storage, and sharing of such personal data.

Excluded from such notice and consent requirements is any "de-identified data" that cannot reasonably be used to identify or infer information about, or otherwise be linked to, a particular individual or mobile device, as determined with a reasonable level of justified confidence based on the available methods and technologies, the nature of the data at issue, and the purposes for which the data will be used.

Developers must: (1) provide users with a method to withdraw such consent and to request that the developer delete personal data or refrain from further data collection or sharing, and (2) take measures to prevent unauthorized access to personal and de-identified data.

Violations are to be treated as unfair or deceptive acts or practices under the Federal Trade Commission Act.

The Federal Trade Commission (FTC) must promulgate regulations to implement and enforce this Act.

States may bring civil actions in federal court on behalf of affected state residents.

Nothing in this Act prohibits a developer from disclosing or preserving personal data or de-identified data as required by other federal laws or, except when superceded by this Act, the laws of a state or political subdivision, including court orders.

A developer may satisfy the requirements of this Act by adopting and following a code of conduct for consumer data privacy that is approved pursuant to FTC regulations.

Date: 2016-02-10
Topic: Technology (Computers)
Subject: Science, technology, communications
Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2016 or the ENCRYPT Act of 2016

This bill prohibits a state from requiring a manufacturer, developer, seller, or provider of a technology product or service to: (1) alter the security functions of its product or service to allow a government agency to conduct a physical search or user surveillance, or (2) use its product or service to decrypt encrypted information.

A technology product or service includes a commercial computer product, electronic device, or online service that is publicly available.

Additionally, it bars a state from prohibiting the manufacture, sale or lease, or provision of a technology product or service because it uses encryption or similar security functions.

Date: 2016-02-10
Topic: Technology (Computers)
Subject: Crime and law enforcement
Small Business Broadband and Emerging Information Technology Enhancement Act of 2015

 This bill amends the Small Business Act to direct the Small Business Administration (SBA) Office of Investment and Innovation to designate a senior employee to serve as the broadband and emerging information technology (BEIT) coordinator.

The Office must also provide SBA employees BEIT training to assist small businesses in the use of such technologies.

The SBA Chief Counsel for Advocacy shall evaluate the impact of broadband speed and price on small businesses.

Services provided by a small business development center shall include accessing and using BEIT as an authorized activity of small business development centers.

Date: 2016-02-23
Topic: Technology (Computers)
Subject: Commerce
(This measure has not been amended since it was reported to the House on March 7, 2016. The summary of that version is repeated here.)

Small Business Broadband Deployment Act

(Sec. 2) This bill exempts for five years any small business broadband Internet access service provider with no more than 250,000 subscribers from the enhancements to the transparency rule of the Federal Communications Commission (FCC) under which any person engaged in the provision of broadband Internet access service must disclose publicly accurate information regarding the network management practices, performance, and commercial terms of its broadband Internet access services sufficient for:

 consumers to make informed choices regarding their use; and content, application, service, and device providers to develop, market, and maintain Internet offerings. The FCC shall report to specified congressional committees, within 180 days after enactment of this Act, its recommendations (together with supporting data) on whether:

 this exception should be made permanent, and the definition of "small business" for these purposes should be modified.

Date: 2016-02-24
Topic: Technology (Computers)
Subject: Science, technology, communications
Digital Security Commission Act of 2016

This bill establishes in the legislative branch the National Commission on Security and Technology Challenges to assess, and make recommendations for policy and practice concerning, the issue of multiple security interests in the digital world, including public safety, privacy, national security, and communications and data protection, both now and throughout the next 10 years.

Members of the Commission shall be appointed by the Speaker of the House and Senate majority leader (eight members), the minority leaders in the House and the Senate (eight members), and the President (one member) from among U.S. citizens with significant knowledge and primary experience in:

 cryptography, global commerce and economics, federal law enforcement, state and local law enforcement, the consumer-facing technology sector, the enterprise technology sector, the intelligence community, and the privacy and civil liberties community.

Date: 2016-02-29
Topic: Technology (Computers)
Subject: Congress
No Taxpayer Support for Apple Act

This bill prohibits any federal agency or other entity of the federal government from purchasing any product manufactured by, licensed by, or otherwise sold under the trademark of Apple, Inc., until a federal court certifies that Apple has provided the federal government with technical support necessary to access encrypted information sought by a judicial warrant that may be materially relevant to the investigation of terrorist acts.

Date: 2016-03-02
Topic: Technology (Computers)
Subject: Government operations and politics
Unsubscribe From All Act of 2016

This bill amends the CAN-SPAM Act of 2003 to require commercial email messages to contain an "unsubscribe from all" option that recipients may select, with not more than one additional action required by the recipient, to send a reply requesting not to receive future emails from the sender.

A commercial email message must remain capable of receiving such unsubscribe replies for at least 30 days after the transmission of the original message.

Date: 2016-03-03
Topic: Technology (Computers)
Subject: Science, technology, communications
National Cybersecurity Preparedness Consortium Act of 2016

(Sec. 2) This bill authorizes the Department of Homeland Security (DHS) to work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents, including threats or acts of terrorism.

Such a consortium must be composed primarily of nonprofit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.

DHS may work with such a consortium to assist its national cybersecurity and communications integration center to:

 provide training to state and local first responders and officials, develop curriculums, and provide technical assistance; conduct cross-sector cybersecurity training and simulation exercises, including for state and local governments, critical infrastructure owners and operators, and private industry; help states and communities develop cybersecurity information sharing programs; and help incorporate cybersecurity risk and incident prevention and response into existing state and local emergency plans and continuity of operations plans. In selecting a consortium, DHS must consider: (1) any prior experience conducting cybersecurity training and exercises for state and local entities, and (2) the geographic diversity of its members to cover different regions across the United States.

DHS must conduct outreach to universities and colleges regarding opportunities to support efforts to address cybersecurity risks and incidents.

DHS's authority to carry out this bill terminates five years after its enactment.

Date: 2016-03-15
Topic: Technology (Computers)
Subject: Science, technology, communications
Cybersecurity Systems and Risks Reporting Act

This bill amends the Sarbanes-Oxley Act of 2002 to apply to cybersecurity systems and cybersecurity systems officers the same requirements regarding corporate responsibility for financial reports and managements assessments of internal control structures and procedures for financial reporting as apply to public companies subject to oversight by the Securities and Exchange Commission (SEC). The SEC shall issue rules to define cybersecurity expert and require each issuer of securities to disclose whether or not (and if not, the reasons why) the issuer's audit committee has at least one member who is a cybersecurity expert. The SEC shall review an issuer's information systems and cybersecurity systems statements. In scheduling the such reviews the SEC shall consider, among other things, issuers that have issued cybersecurity risks disclosures.

Date: 2016-04-26
Topic: Technology (Computers)
Subject: Finance and financial sector
Developing Innovation and Growing the Internet of Things Act or the DIGIT Act

This bill requires the Department of Commerce to convene a working group of federal stakeholders to provide recommendations and a report to Congress regarding the Internet of Things (IoT) for the growing number of connected and interconnected devices. The bill establishes a steering committee to be composed of stakeholders outside the federal government to advise the working group.

 The bill expresses the sense of Congress that IoT policies should maximize the potential and development of the IoT to benefit all stakeholders, including businesses, governments, and consumers.

The working group must: (1) identify federal laws and regulations, grant practices, budgetary or jurisdictional challenges, and other sector-specific policies that inhibit IoT development; (2) consider policies or programs that encourage and improve coordination among federal agencies with IoT jurisdiction; (3) implement recommendations from the steering committee; and (4) examine how federal agencies can benefit from, use, and prepare for the IoT.

The working group must consult with nongovernmental stakeholders. The steering committee must advise the working group about spectrum needs, individual privacy, security, and any international proceedings or negotiations affecting the IoT.

Within 18 months after enactment of this bill, the working group must report its findings and recommendations, its reasons for inaction on steering committee recommendations, and an accounting of any progress by federal agencies to implement recommendations.

The Federal Communications Commission must seek public comment on the IoT's spectrum needs and submit a summary of those comments to Congress.

Date: 2016-04-28
Topic: Technology (Computers)
Subject: Science, technology, communications
United States Digital Service Act

This bill directs the President to continue to operate, for FY2017-FY2026, the United States Digital Service as such program operated using funds made available under the Information Technology Oversight and Reform account in division E of the Financial Services and General Government Appropriations Act, 2016.

Date: 2016-05-27
Topic: Technology (Computers)
Subject: Government operations and politics
Data Breach Insurance Act 

This bill amends the Internal Revenue Code to allow a business tax credit for the purchase of qualified data breach insurance. The credit applies for five years and is equal to 15% of the annual premiums paid or incurred for the insurance in the ordinary course of the taxpayer's trade or business.

Qualified data breach insurance is coverage provided by an insurance company for expenses or losses in connection with the theft, loss, disclosure, inaccessibility, or manipulation of data.

Insurance does not qualify for the credit unless the taxpayer has adopted and is in compliance with: (1) the Framework for Improving Critical Infrastructure Cybersecurity published by the National Institute of Standards and Technology, or (2) any similar standard specified by the Internal Revenue Service.

Date: 2016-09-14
Topic: Technology (Computers)
Subject: Taxation
This bill expresses the sense of Congress that information security is critical to U.S. economic security and should be protected to promote economic growth.

The National Telecommunications and Information Administration must report on the costs to the U.S. economy of protecting information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction to provide information integrity, confidentiality, timely and reliable access, and authentication through digital credentials.

The report must estimate the cost of: (1) security for computers, networks, software, storage systems, data transmission, equipment, and support services; (2) measures to mitigate and hedge against compromises of information systems; and (3) economic loss or harm caused by such compromises.

Date: 2016-12-07
Topic: Technology (Computers)
Subject: Science, technology, communications
Secure Data Act of 2015

 Prohibits a federal agency from requiring a manufacturer, developer, or seller of any computer hardware, software, or electronic device made available to the general public to design or alter the security functions in such products to allow the surveillance of any user or the physical search of such product by any agency. Exempts from such prohibition products used by law enforcement agencies for electronic surveillance as authorized under the Communications Assistance for Law Enforcement Act.

Date: 2015-01-08
Topic: Technology (Computers)
Subject: Science, technology, communications
Cyber Threat Sharing Act of 2015

Amends the Homeland Security Act of 2002 to permit private entities to: (1) disclose lawfully obtained cyber threat indicators to a private information sharing and analysis organization and the national cybersecurity and communications integration center (NCCIC); and (2) receive indicators disclosed by private entities, the federal government, or state or local governments.

Permits any entity to disclose lawfully obtained indicators to a federal entity for investigative purposes consistent with the lawful authorities of the federal entity.

Restricts private entities' use, retention, or further disclosure of cyber threat indicators to purposes relating to information system protection, cyber threat identification or mitigation, or crime reporting.

Directs the Department of Homeland Security (DHS) to select through a competitive process a private entity to identify best practices for private information sharing and analysis organizations.

Provides liability protections to entities that voluntarily share lawfully obtained indicators with: (1) the NCCIC, or (2) a private information sharing and analysis organization if the organization self-certifies that it has adopted the best practices identified by the DHS-selected private entity.

Directs DHS to: (1) designate the NCCIC to receive and disclose threat indicators to federal and nonfederal entities in as close to real time as practicable, and (2) develop a program to support implementation of automated mechanisms for real time sharing.

Prohibits a federal entity from using a disclosed indicator as evidence in a regulatory enforcement action against the entity that disclosed the indicator, but allows a federal entity to use disclosed indicators for regulatory enforcement if the information is received by other lawful means.

Requires DHS to develop policies for federal entities to:

 anonymize and destroy information in a timely manner to limit the acquisition, interception, retention, use, and disclosure of indicators that are likely to identify specific persons; limit reception, use, and retention only to protect information systems or to investigate, prosecute, or otherwise respond to computer crimes, threats of death or serious bodily harm, serious threats to a minor, or attempts or conspiracies to commit such offenses; preserve confidentiality of proprietary information; and penalize federal employees who violate these policies. Repeals threat indicator sharing procedures established by this Act five years after enactment of this Act.

Expresses the sense of Congress that the statement issued by the Department of Justice and the Federal Trade Commission on April 10, 2014, entitled "Antitrust Policy Statement On Sharing Of Cybersecurity Information" provides protections against antitrust concerns for the legitimate sharing of cyber threat indicators.

Date: 2015-02-11
Topic: Technology (Computers)
Subject: Science, technology, communications
This bill amends the Federal Power Act to authorize the Secretary of Energy to require an entity that owns, controls, or operates a bulk-power system facility to take whatever actions the Secretary determines will best avert or mitigate a cyber security threat pursuant to a written notice from the President that immediate action is necessary to protect the bulk-power system from such threat.

The Secretary is encouraged to coordinate with Canadian and Mexican officials responsible for the protection of cyber security of the interconnected North American electricity grid.

The Secretary, before exercising this authority, shall consult about the cyber security threat with: (1) the entities indicated, (2) the Electric Reliability Organization, (3) the Electricity Sub-sector Coordinating Council, and (4) other appropriate federal officials.

The Federal Energy Regulatory Commission shall establish a mechanism that permits owners, operators, or users of the bulk-power system to seek recovery of prudently incurred costs required to implement actions ordered by the Secretary.

Rates or charges approved under this mechanism must be just and reasonable, and neither unduly discriminatory nor preferential.

Emergency orders under the bill are limited to a 30-day period unless the Secretary: (1) provides interested persons an opportunity to submit written data, recommendations, and arguments; and (2) affirms, amends (for up to 90 days), or repeals the order.

Date: 2015-04-23
Topic: Technology (Computers)
Subject: Energy
Department of Defense Cyber Support to Civil Authorities Act of 2015

Directs the Department of Defense (DOD) to develop a comprehensive plan for the U.S. Cyber Command to support civil authorities in responding to cyber attacks by foreign powers against the United States or a U.S. person.

Requires the plan to include: (1) a plan for internal DOD collective training activities to be integrated with exercises conducted with other federal agencies and state and local governments; (2) any historical frameworks used in the formulation of the plan; (3) descriptions of the roles, responsibilities, and expectations of federal, state, and local authorities, as well as the active and reserve components of the Armed Forces; and (4) any legislative and administrative actions necessary to carry out the plan.

Directs the Government Accountability Office to review such plan.

Date: 2015-06-02
Topic: Technology (Computers)
Subject: Armed forces and national security
Domain Openness Through Continued Oversight Matters Act of 2015 or the DOTCOM Act of 2015

(Sec. 2) This bill prohibits the Assistant Secretary of Commerce for Communications and Information from permitting the National Telecommunications and Information Administration's (NTIA's) role in the performance of the Internet Assigned Numbers Authority (IANA) functions to cease until 30 legislative days after the Assistant Secretary submits to Congress a report that contains: (1) the proposal relating to the transition of the NTIA's stewardship of the IANA functions that was developed in a process convened by the Internet Corporation for Assigned Names and Numbers (ICANN) at the request of the NTIA, and (2) the following required certifications by the Assistant Secretary.

The bill requires the Assistant Secretary to certify that: (1) such proposal supports and enhances the multistakeholder model of Internet governance, maintains the security, stability, and resiliency of the Internet domain name system, meets the needs of global customers and partners of the IANA services, maintains the openness of the Internet, and does not replace the role of the NTIA with a government-led or intergovernmental organization solution; and (2) the required changes to ICANN's bylaws contained in the final report of ICANN's Cross Community Working Group on Enhancing ICANN Accountability and the changes to ICANN's bylaws required by ICANN's IANA Stewardship Transition Coordination Group have been adopted.

Date: 2015-06-11
Topic: Technology (Computers)
Subject: Science, technology, communications
Mobile Device Theft Deterrence Act of 2015

Amends the federal criminal code to prohibit knowingly: (1) removing, obliterating, tampering with, or altering a mobile device identification number; or (2) using, producing, trafficking in, having control or custody of, or possessing hardware or software, knowing it has been configured to engage in such conduct.

Exempts the manufacturer of a mobile device, a person that engineers, tests, repairs, or refurbishes a mobile device, or a person that implements technologies for the purpose of protecting the security and privacy of mobile device end users while allowing the transmission of the mobile device identification number to service providers, unless such manufacturer or person knows that the mobile device or part involved is stolen.

Date: 2015-08-05
Topic: Technology (Computers)
Subject: Crime and law enforcement
Federal Cybersecurity Workforce Assessment ActThis bill requires federal agencies to: (1) identify all personnel positions that require the performance of information technology, cybersecurity, or other cyber-related functions; and (2) assign a corresponding employment code to such positions using a coding structure that the National Institute of Standards and Technology must include in the National Initiative for Cybersecurity Education's National Cybersecurity Workforce Framework.To implement the coding structure: (1) the Office of Personnel Management (OPM) must coordinate with the Director of National Intelligence to establish procedures to identify such federal civilian positions, and (2) the Department of Defense must establish procedures to identify such federal noncivilian positions. Federal agencies must submit to Congress a report identifying: (1) the percentage of personnel with such job functions who currently hold industry-recognized certifications, (2) the preparedness of other civilian and noncivilian cyber personnel without existing credentials to pass certification exams, and (3) a strategy for mitigating any identified gaps with training and certification for existing personnel. The agencies must establish procedures to identify all encumbered and vacant positions with such functions and assign the appropriate employment code to each position.Annually through 2022, the agencies must submit a report to the OPM that identifies cyber-related roles designated as critical needs in the agency's workforce. The OPM must provide agencies with guidance for identifying roles with acute and emerging skill shortages. The OPM, within two years after enactment of this Act, must identify critical needs for the cyber workforce across all federal agencies and report to Congress regarding the implementation of this Act.

Date: 2015-08-06
Topic: Technology (Computers)
Subject: Government operations and politics