Summary:
Highlights:

This bill establishes or revises government operations and personnel laws concerning the security of federal information systems, restrictions on access to websites, probationary periods, the senior executive service, employee use of official time, and the maintenance of Internal Revenue Service records.

It also prohibits agencies from proposing or adopting certain rules during a moratorium period after a presidential election before a new President is sworn in.

Full Summary:

Government Reform and Improvement Act of 2016

TITLE I--FEDERAL INFORMATION SYSTEMS SAFEGUARDS

(Sec. 101) This title exempts from federal employee labor-management relations requirements the actions of an executive agency that are necessary to restrict or prohibit access to a website presenting a security weakness or risk to the agency's information technology or information systems under the Federal Information Security Management Act of 2014.

An agency employee may not establish, operate, maintain, or permit the use of information technology that is not certified by the Office of Management and Budget (OMB), the head of the agency, the Department of Homeland Security, or the agency's chief information officer as being in compliance with the established information security policies.

TITLE II--ELIMINATING PORNOGRAPHY FROM AGENCIES

(Sec. 201) This title directs the OMB to issue guidelines that prohibit the access of a pornographic or other explicit website from a federal computer, with an exception for an investigative purpose.

TITLE III--EXTENSION OF PROBATIONARY PERIOD FOR CAREER EMPLOYEES

(Sec. 301) This title requires the probationary period before an appointment in the competitive civil service or an initial appointment as a supervisor or manager becomes final to be: (1) for any position that requires formal training, two years after such training is completed; (2) for any position that requires a license, two years after such license is granted; and (3) for any other position, at least two years. The probationary period for a preference eligible (i.e., a veteran) initially appointed to a position that exists as of 180 days after enactment of this bill shall not be longer than the period that applies on such date. The probationary period for a preference eligible appointed to a position that does not exist on such date shall not be longer than the length of time the President establishes.

Each agency must ensure that: (1) announcements of vacant positions and offers of appointment clearly state the terms and conditions of the probationary period, (2) individuals who are required to complete probationary periods receive timely notice of requirements to successfully complete such period, and (3) certification of such completion is made.

(Sec. 302) The definition of "employee" for purposes of adverse action provisions is revised to mean an individual in the competitive or excepted service who has completed at least two years (currently, one year) of current continuous service in the same or a similar position.

TITLE IV--SENIOR EXECUTIVE SERVICE ACCOUNTABILITY

(Sec. 401) This title revises personnel requirements for employees in the Senior Executive Service (SES) to:

 require each federal agency to include in its biennial report to the Office of Personnel Management (OPM) a justification for certain SES positions and the specific result expected from each position, including the impact of such result on the agency mission; extend the probationary period for SES employees from one year to two years; eliminate the authority for allowing an SES employee removed for a less than fully successful executive performance to retain an SES pay grade level if appointed to a civil service position; require a written description of employee performance requirements to be provided to SES employees by 30 calendar days before each rating period; make SES employees subject to the same 14-day (or less) suspension period, without duties and pay, applicable to other federal employees; expand the grounds for suspension or termination of an SES employee to include such cause as would promote the efficiency of the SES; allow an agency to place an SES employee on mandatory leave for misconduct, neglect of duty, malfeasance, or such cause as would promote the efficiency of the SES; provide for expedited removal of SES employees for performance or misconduct and for an expedited appeals process for removals; and require mandatory reassignments of SES employees at least once every five years. TITLE V--OPM REPORT ON OFFICIAL TIME

(Sec. 501) This title requires the OPM to submit an annual report on the use by federal employees of offical time (time granted to perform representational or consultative functions during which the employee would otherwise be in a duty status). Each such report shall include, for each agency and for all agencies:

 the total amount of official time granted; the average amount of official time expended per bargaining unit employee; the specific types of activities or purposes for which official time was granted and its impact on agency operations; the number of employees tgranted official time and the number of such employees who were not engaged in any activities or purposes except those involving the use of official time; the total amount of compensation (including fringe benefits) afforded to employees in connection with activities or purposes for which they were granted official time; and a description of any room or space designated at the agency where official time activities will be conducted. TITLE VI--MIDNIGHT RULE RELIEF

(Sec. 601) This title prohibits a federal agency (excluding the Federal Election Commission, the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, or the U.S. Postal Service) from proposing or adopting any midnight rule unless the OMB's Office of Information and Regulatory Affairs (OIRA) finds that it will not result in: (1) an annual effect on the economy of $100 million or more; (2) a major increase in costs or prices; (3) significant adverse effects on competition, employment, wages, investment, productivity, innovation, or the ability of U.S.-based enterprises to compete internationally; or (4) a significant economic impact on a substantial number of small businesses.

A "midnight rule" is an agency rule proposed or adopted during a moratorium period that begins on the day after the Tuesday next after the first Monday in November in every fourth year succeeding a presidential election and extends through January 20 of the following year in which a President is not serving a consecutive term.

(Sec. 602) The OIRA must publish a list of midnight rules that are exempt from the prohibition because they are required by statute, regulation, or judicial order to be proposed or adopted by a deadline that was established before the moratorium and that occurs during the moratorium.

(Sec. 603) Also exempt from the prohibition is any midnight rule that the President determines is necessary: (1) because of a state of emergency, (2) to enforce criminal laws, (3) to protect U.S. national security, or (4) to implement an international trade agreement. The moratorium does not apply to a midnight rule if the OIRA certifies that such rule is limited to repealing an existing rule.

(Sec. 604) Judicial review is available to persons or entities subject to any midnight rule promulgated in violation of this title.

TITLE VII--REQUIREMENT TO MAINTAIN RECORDS

(Sec. 701) This title requires the Internal Revenue Service (IRS) to maintain preserved records for at least three years after obtaining the record. A preserved record is any record maintained by a person other than the federal government pursuant to a rule, guidance, or other directive from the IRS.

bill establishes revises government operations personnel laws concerning security federal information systems restrictions access websites probationary periods senior_executive_service employee use official time maintenance internal_revenue_service records prohibits agencies proposing adopting certain rules moratorium period presidential election new president sworn summary government reform improvement act title federal information systems safeguards sec title exempts federal employee labor management relations requirements actions executive agency necessary restrict prohibit access website presenting security weakness risk agency information technology information systems federal_information_security_management_act agency employee establish operate maintain permit use information technology certified office_of_management_and_budget omb head agency department_of_homeland_security agency chief information officer compliance established information security policies title eliminating pornography agencies sec title directs omb issue guidelines prohibit access pornographic explicit website federal computer exception investigative purpose title iii extension probationary period career employees sec title requires probationary period appointment competitive civil service initial appointment supervisor manager final position requires formal training years training completed position requires license years license granted position years probationary period preference eligible veteran initially appointed position exists days enactment bill shall longer period applies date probationary period preference eligible appointed position exist date shall longer length time president establishes agency ensure announcements vacant positions offers appointment clearly state terms conditions probationary period individuals required complete probationary periods receive timely notice requirements successfully complete period certification completion sec definition employee purposes adverse action provisions revised mean individual competitive excepted service completed years currently year current continuous service similar position title senior_executive_service accountability sec title revises personnel requirements employees senior_executive_service ses require federal agency include biennial report office_of_personnel_management opm justification certain ses positions specific result expected position including impact result agency mission extend probationary period ses employees year years eliminate authority allowing ses employee removed fully successful executive performance retain ses pay grade level appointed civil service position require written description employee performance requirements provided ses employees calendar days rating period ses employees subject day suspension period duties pay applicable federal employees expand grounds suspension termination ses employee include cause promote efficiency ses allow agency place ses employee mandatory leave misconduct neglect duty cause promote efficiency ses provide expedited removal ses employees performance misconduct expedited appeals process removals require mandatory ses employees years title opm report official time sec title requires opm submit annual report use federal employees time time granted perform representational consultative functions employee duty status report shall include agency agencies total official time granted average official time expended bargaining unit employee specific types activities purposes official time granted impact agency operations number employees official time number employees engaged activities purposes involving use official time total compensation including fringe benefits afforded employees connection activities purposes granted official time description room space designated agency official time activities conducted title midnight rule relief sec title prohibits federal agency excluding federal_election_commission board_of_governors federal_reserve_system federal_deposit_insurance_corporation postal_service proposing adopting midnight rule omb office_of_information_and_regulatory_affairs oira finds result annual effect economy million major increase costs prices significant adverse effects competition employment wages investment productivity innovation ability enterprises compete internationally significant economic impact substantial number small businesses midnight rule agency rule proposed adopted moratorium period begins day tuesday monday november fourth year succeeding presidential election extends january following year president serving consecutive term sec oira publish list midnight rules exempt prohibition required statute regulation judicial order proposed adopted deadline established moratorium occurs moratorium sec exempt prohibition midnight rule president determines necessary state emergency enforce criminal laws protect national security implement international_trade agreement moratorium apply midnight rule oira certifies rule limited repealing existing rule sec judicial review available persons entities subject midnight rule promulgated violation title title vii requirement maintain records sec title requires internal_revenue_service irs maintain preserved records years obtaining record preserved record record maintained person federal_government pursuant rule guidance directive irs


Summary:
Application Privacy, Protection, and Security Act of 2016 or the APPS Act of 2016

This bill directs mobile device application developers, before the application collects personal data about the user, to notify the user and obtain the user's consent regarding the terms and conditions governing the collection, use, storage, and sharing of such personal data.

Excluded from such notice and consent requirements is any "de-identified data" that cannot reasonably be used to identify or infer information about, or otherwise be linked to, a particular individual or mobile device, as determined with a reasonable level of justified confidence based on the available methods and technologies, the nature of the data at issue, and the purposes for which the data will be used.

Developers must: (1) provide users with a method to withdraw such consent and to request that the developer delete personal data or refrain from further data collection or sharing, and (2) take measures to prevent unauthorized access to personal and de-identified data.

Violations are to be treated as unfair or deceptive acts or practices under the Federal Trade Commission Act.

The Federal Trade Commission (FTC) must promulgate regulations to implement and enforce this Act.

States may bring civil actions in federal court on behalf of affected state residents.

Nothing in this Act prohibits a developer from disclosing or preserving personal data or de-identified data as required by other federal laws or, except when superceded by this Act, the laws of a state or political subdivision, including court orders.

A developer may satisfy the requirements of this Act by adopting and following a code of conduct for consumer data privacy that is approved pursuant to FTC regulations.

application privacy protection security act act bill directs mobile device application developers application collects personal data user notify user obtain user consent terms conditions governing collection use storage sharing personal data excluded notice consent requirements identified data reasonably identify information linked particular individual mobile device determined reasonable level justified confidence based available methods technologies nature data issue purposes data developers provide users method withdraw consent request developer delete personal data refrain data collection sharing measures prevent unauthorized access personal identified data violations treated unfair deceptive acts practices federal_trade_commission_act federal_trade_commission ftc promulgate regulations implement enforce act states bring civil actions federal court behalf affected state residents act prohibits developer disclosing preserving personal data identified data required federal laws act laws state political subdivision including court orders developer satisfy requirements act adopting following code conduct consumer data privacy approved pursuant ftc regulations


Summary:
Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2016 or the ENCRYPT Act of 2016

This bill prohibits a state from requiring a manufacturer, developer, seller, or provider of a technology product or service to: (1) alter the security functions of its product or service to allow a government agency to conduct a physical search or user surveillance, or (2) use its product or service to decrypt encrypted information.

A technology product or service includes a commercial computer product, electronic device, or online service that is publicly available.

Additionally, it bars a state from prohibiting the manufacture, sale or lease, or provision of a technology product or service because it uses encryption or similar security functions.

ensuring national constitutional rights private telecommunications act act bill prohibits state requiring manufacturer developer seller provider technology product service alter security functions product service allow government agency conduct physical search user surveillance use product service encrypted information technology product service includes commercial computer product electronic device online service publicly available additionally bars state prohibiting manufacture sale lease provision technology product service uses encryption similar security functions


Summary:
Small Business Broadband and Emerging Information Technology Enhancement Act of 2015

 This bill amends the Small Business Act to direct the Small Business Administration (SBA) Office of Investment and Innovation to designate a senior employee to serve as the broadband and emerging information technology (BEIT) coordinator.

The Office must also provide SBA employees BEIT training to assist small businesses in the use of such technologies.

The SBA Chief Counsel for Advocacy shall evaluate the impact of broadband speed and price on small businesses.

Services provided by a small business development center shall include accessing and using BEIT as an authorized activity of small business development centers.

small business broadband emerging information technology enhancement_act bill amends small_business_act direct small_business_administration sba office investment innovation designate senior employee serve broadband emerging information technology coordinator office provide sba employees training assist small businesses use technologies sba chief counsel advocacy shall evaluate impact broadband speed price small businesses services provided small business development center shall include accessing authorized activity small business development centers


Summary:
(This measure has not been amended since it was reported to the House on March 7, 2016. The summary of that version is repeated here.)

Small Business Broadband Deployment Act

(Sec. 2) This bill exempts for five years any small business broadband Internet access service provider with no more than 250,000 subscribers from the enhancements to the transparency rule of the Federal Communications Commission (FCC) under which any person engaged in the provision of broadband Internet access service must disclose publicly accurate information regarding the network management practices, performance, and commercial terms of its broadband Internet access services sufficient for:

 consumers to make informed choices regarding their use; and content, application, service, and device providers to develop, market, and maintain Internet offerings. The FCC shall report to specified congressional committees, within 180 days after enactment of this Act, its recommendations (together with supporting data) on whether:

 this exception should be made permanent, and the definition of "small business" for these purposes should be modified.

measure amended reported house march summary version repeated small business broadband deployment act sec bill exempts years small business broadband internet access service provider subscribers enhancements transparency rule federal_communications_commission fcc person engaged provision broadband internet access service disclose publicly accurate information network management practices performance commercial terms broadband internet access services sufficient consumers informed choices use content application service device providers develop market maintain internet offerings fcc shall report specified congressional committees days enactment act recommendations supporting data exception permanent definition small business purposes modified


Summary:
Digital Security Commission Act of 2016

This bill establishes in the legislative branch the National Commission on Security and Technology Challenges to assess, and make recommendations for policy and practice concerning, the issue of multiple security interests in the digital world, including public safety, privacy, national security, and communications and data protection, both now and throughout the next 10 years.

Members of the Commission shall be appointed by the Speaker of the House and Senate majority leader (eight members), the minority leaders in the House and the Senate (eight members), and the President (one member) from among U.S. citizens with significant knowledge and primary experience in:

 cryptography, global commerce and economics, federal law enforcement, state and local law enforcement, the consumer-facing technology sector, the enterprise technology sector, the intelligence community, and the privacy and civil liberties community.

digital security commission act bill establishes legislative branch national_commission security technology challenges assess recommendations policy practice concerning issue multiple security interests digital world including public safety privacy national security communications data protection years members commission shall appointed speaker house senate majority leader members minority leaders house senate members president member citizens significant knowledge primary experience global commerce economics federal law enforcement state local law enforcement consumer facing technology sector enterprise technology sector intelligence_community privacy civil liberties community


Summary:
No Taxpayer Support for Apple Act

This bill prohibits any federal agency or other entity of the federal government from purchasing any product manufactured by, licensed by, or otherwise sold under the trademark of Apple, Inc., until a federal court certifies that Apple has provided the federal government with technical support necessary to access encrypted information sought by a judicial warrant that may be materially relevant to the investigation of terrorist acts.

taxpayer support apple act bill prohibits federal agency entity federal_government purchasing product manufactured licensed sold trademark apple federal court certifies apple provided federal_government technical support necessary access encrypted information sought judicial warrant materially relevant investigation terrorist acts


Summary:
Unsubscribe From All Act of 2016

This bill amends the CAN-SPAM Act of 2003 to require commercial email messages to contain an "unsubscribe from all" option that recipients may select, with not more than one additional action required by the recipient, to send a reply requesting not to receive future emails from the sender.

A commercial email message must remain capable of receiving such unsubscribe replies for at least 30 days after the transmission of the original message.

act bill amends spam act require commercial email messages contain option recipients select additional action required recipient send reply requesting receive future sender commercial email message remain capable receiving days transmission original message


Summary:
National Cybersecurity Preparedness Consortium Act of 2016

(Sec. 2) This bill authorizes the Department of Homeland Security (DHS) to work with a consortium, including the National Cybersecurity Preparedness Consortium, to support efforts to address cybersecurity risks and incidents, including threats or acts of terrorism.

Such a consortium must be composed primarily of nonprofit entities, including academic institutions, that develop, update, and deliver cybersecurity training in support of homeland security.

DHS may work with such a consortium to assist its national cybersecurity and communications integration center to:

 provide training to state and local first responders and officials, develop curriculums, and provide technical assistance; conduct cross-sector cybersecurity training and simulation exercises, including for state and local governments, critical infrastructure owners and operators, and private industry; help states and communities develop cybersecurity information sharing programs; and help incorporate cybersecurity risk and incident prevention and response into existing state and local emergency plans and continuity of operations plans. In selecting a consortium, DHS must consider: (1) any prior experience conducting cybersecurity training and exercises for state and local entities, and (2) the geographic diversity of its members to cover different regions across the United States.

DHS must conduct outreach to universities and colleges regarding opportunities to support efforts to address cybersecurity risks and incidents.

DHS's authority to carry out this bill terminates five years after its enactment.

national cybersecurity preparedness consortium act sec bill authorizes department_of_homeland_security dhs work consortium including national cybersecurity preparedness consortium support efforts address cybersecurity risks incidents including threats acts terrorism consortium composed primarily nonprofit entities including academic institutions develop update deliver cybersecurity training support homeland_security dhs work consortium assist national cybersecurity communications integration center provide training state local responders officials develop provide technical assistance conduct cross sector cybersecurity training simulation exercises including state local governments critical infrastructure owners operators private industry help states communities develop cybersecurity information sharing programs help incorporate cybersecurity risk incident prevention response existing state local emergency plans continuity operations plans selecting consortium dhs consider prior experience conducting cybersecurity training exercises state local entities geographic diversity members cover different regions united_states dhs conduct outreach universities colleges opportunities support efforts address cybersecurity risks incidents dhs authority carry bill terminates years enactment


Summary:
Cybersecurity Systems and Risks Reporting Act

This bill amends the Sarbanes-Oxley Act of 2002 to apply to cybersecurity systems and cybersecurity systems officers the same requirements regarding corporate responsibility for financial reports and managements assessments of internal control structures and procedures for financial reporting as apply to public companies subject to oversight by the Securities and Exchange Commission (SEC). The SEC shall issue rules to define cybersecurity expert and require each issuer of securities to disclose whether or not (and if not, the reasons why) the issuer's audit committee has at least one member who is a cybersecurity expert. The SEC shall review an issuer's information systems and cybersecurity systems statements. In scheduling the such reviews the SEC shall consider, among other things, issuers that have issued cybersecurity risks disclosures.

cybersecurity systems risks reporting act bill amends sarbanes-oxley_act apply cybersecurity systems cybersecurity systems officers requirements corporate responsibility financial reports assessments internal control structures procedures financial reporting apply public companies subject oversight securities_and_exchange_commission sec sec shall issue rules define cybersecurity expert require issuer securities disclose reasons issuer audit committee member cybersecurity expert sec shall review issuer information systems cybersecurity systems statements scheduling reviews sec shall consider things issuers issued cybersecurity risks disclosures


Summary:
Developing Innovation and Growing the Internet of Things Act or the DIGIT Act

This bill requires the Department of Commerce to convene a working group of federal stakeholders to provide recommendations and a report to Congress regarding the Internet of Things (IoT) for the growing number of connected and interconnected devices. The bill establishes a steering committee to be composed of stakeholders outside the federal government to advise the working group.

 The bill expresses the sense of Congress that IoT policies should maximize the potential and development of the IoT to benefit all stakeholders, including businesses, governments, and consumers.

The working group must: (1) identify federal laws and regulations, grant practices, budgetary or jurisdictional challenges, and other sector-specific policies that inhibit IoT development; (2) consider policies or programs that encourage and improve coordination among federal agencies with IoT jurisdiction; (3) implement recommendations from the steering committee; and (4) examine how federal agencies can benefit from, use, and prepare for the IoT.

The working group must consult with nongovernmental stakeholders. The steering committee must advise the working group about spectrum needs, individual privacy, security, and any international proceedings or negotiations affecting the IoT.

Within 18 months after enactment of this bill, the working group must report its findings and recommendations, its reasons for inaction on steering committee recommendations, and an accounting of any progress by federal agencies to implement recommendations.

The Federal Communications Commission must seek public comment on the IoT's spectrum needs and submit a summary of those comments to Congress.

developing innovation growing internet things act digit act bill requires department_of_commerce convene working_group federal stakeholders provide recommendations report congress internet things growing number connected interconnected devices bill establishes steering committee composed stakeholders outside federal_government advise working_group bill expresses sense congress policies maximize potential development benefit stakeholders including businesses governments consumers working_group identify federal laws regulations grant practices budgetary jurisdictional challenges sector specific policies inhibit development consider policies programs encourage improve coordination federal agencies jurisdiction implement recommendations steering committee examine federal agencies benefit use prepare working_group consult nongovernmental stakeholders steering committee advise working_group spectrum needs individual privacy security international proceedings negotiations affecting months enactment bill working_group report findings recommendations reasons inaction steering committee recommendations accounting progress federal agencies implement recommendations federal_communications_commission seek public comment spectrum needs submit summary comments congress


Summary:
Networking and Information Technology Research and Development Modernization Act of 2016

 (Sec. 5) This bill amends the High-Performance Computing Act of 1991 to rename the National High-Performance Computing program as the Networking and Information Technology Research and Development Program.

The program, in addition to its current requirements, shall:

 promote increased understanding of the scientific principles of cyber-physical systems and improve methods available for the design, development, and operation of those that are characterized by high reliability, safety, and security; conduct or arrange for research and development on human-computer interactions, visualization, and big data, as well as the enhancement of cybersecurity; and create a research framework to leverage cyber-physical systems, high capacity and high speed communication networks, and large-scale data analytics to integrate city-scale information technology and physical infrastructures. The Office of Science and Technology Policy shall encourage and monitor the efforts of agencies participating in the program to allocate the resources and management attention necessary to ensure that the strategic plan is executed effectively and that program objectives are met.

 Annual reports on the implementation of the program shall, among other things, furnish:

 a list of the senior steering groups and strategic plans that address research areas of emerging importance, and a description of the workshops and other activities conducted. Each chair of the advisory committee on networking and information technology (currently on high-performance computing) shall meet membership qualifications, and may be a member of the President's Council of Advisors on Science and Technology.

Participating federal agencies, working through the National Science and Technology Council and with the assistance of the National Coordination Office (established by this bill), shall develop, and update every five years, a strategic plan for the program.

 The plan shall specify near-term and long-term objectives and how the program will accomplish other specified objectives, including by:

 fostering the transfer of research and development (R&D) results into new technologies and applications for the benefit of society, encouraging and supporting mechanisms for interdisciplinary R&D in networking and information technology, and promote cyberinfrastructure needs across federally funded large-scale research facilities that produce or will produce large amounts of data that will need to be stored, curated, and made available to the public. (Sec. 6) The bill replaces the National Research and Education Network with a National Coordination Office, which the Office of Science and Technology Policy shall maintain, and which shall give technical and administrative support to participating federal agencies and, as appropriate, the advisory committee.

 The National Coordination Office shall:

 serve as the primary point of contact on federal networking and information technology activities; through at least one workshop solicit recommendations from stakeholders during the development of each strategic plan; conduct outreach to relevant organizations and the public in order to increase awareness of the program and its benefits, and potential opportunities for collaboration between the participating agencies and the private sector; and promote access to and early application of the technologies, innovations, and expertise derived from program activities to agency missions and systems across the federal government and to U.S. industry. The operation of the National Coordination Office shall be supported by funds from participating agencies.

(Sec. 7) The bill repeals the authorization for a Next Generation Internet program.

(Sec. 8) The program shall encourage participating agencies to support large-scale, long-term, interdisciplinary R&D activities in networking and information technology designed to advance the development of fundamental discoveries, and directed toward agency grand challenge mission areas with the potential for significant contributions to national economic competitiveness and other significant societal benefits.

Such R&D activities shall:

 include projects based on applications selected through a competitive, merit-based process; involve collaborations among researchers in institutions of higher education and industry, and may involve nonprofit research institutions and federal laboratories; leverage federal investments through collaboration with related state and private sector initiatives; and include a plan for fostering the transfer of research discoveries and the results of technology demonstration activities to industry for commercial development. Participating agencies may give special consideration to projects that include cost-sharing from nonfederal sources.

R&D activities may be supported through existing or new interdisciplinary research centers organized to investigate basic research questions and carry out technology demonstration activities.

(Sec. 9) The National Coordination Office may conduct workshops and other activities on research areas of emerging importance, which may include grand challenge areas, to help guide program investments and strategic planning in those areas.

Workshop participants shall:

 develop options for models for R&D partnerships among institutions of higher education, federal laboratories, and industry; develop R&D options for specific issues addressed through those partnerships; and propose guidelines for assigning intellectual property rights and for transferring research results to the private sector. The National Coordination Office shall:

 ensure that workshop participants have knowledge and expertise in the specific issue areas and represent a broad mix of relevant stakeholders; and establish senior steering groups and develop focused strategic plans to coordinate and guide activities under the identified research areas. (Sec. 10) The National Science Foundation, the National Aeronautics and Space Administration (NASA), the Department of Energy, the National Institute of Standards and Technology, the Environmental Protection Agency, and the Department of Education shall each engage in specified research and development activities in conjunction with the program.

networking information technology research development modernization act sec bill amends high performance computing act rename national high performance computing program networking_and_information_technology_research_and_development_program program addition current requirements shall promote increased understanding scientific principles cyber physical systems improve methods available design development operation characterized high reliability safety security conduct arrange research development human computer interactions big data enhancement cybersecurity create research framework leverage cyber physical systems high capacity high speed communication networks large scale data analytics integrate city scale information technology physical infrastructures office_of_science_and_technology_policy shall encourage monitor efforts agencies participating program allocate resources management attention necessary ensure strategic plan executed effectively program objectives met annual reports implementation program shall things furnish list senior steering groups strategic plans address research areas emerging importance description workshops activities conducted chair advisory_committee networking information technology currently high performance computing shall meet membership qualifications member president council advisors science_and_technology participating federal agencies working national_science_and_technology_council assistance national coordination office established bill shall develop update years strategic plan program plan shall specify near term long term objectives program accomplish specified objectives including fostering transfer research development results new technologies applications benefit society encouraging supporting mechanisms interdisciplinary networking information technology promote needs federally funded large scale research facilities produce produce large amounts data need stored available public sec bill replaces national research education network national coordination office office_of_science_and_technology_policy shall maintain shall technical administrative support participating federal agencies appropriate advisory_committee national coordination office shall serve primary point contact federal networking information technology activities workshop solicit recommendations stakeholders development strategic plan conduct outreach relevant organizations public order increase awareness program benefits potential opportunities collaboration participating agencies private sector promote access early application technologies innovations expertise derived program activities agency missions systems federal_government industry operation national coordination office shall supported funds participating agencies sec bill repeals authorization generation internet program sec program shall encourage participating agencies support large scale long term interdisciplinary activities networking information technology designed advance development fundamental discoveries directed agency grand challenge mission areas potential significant contributions national economic competitiveness significant societal benefits activities shall include projects based applications selected competitive merit based process involve collaborations researchers institutions higher education industry involve nonprofit research institutions federal laboratories leverage federal investments collaboration related state private sector initiatives include plan fostering transfer research discoveries results technology demonstration activities industry commercial development participating agencies special consideration projects include cost sharing nonfederal sources activities supported existing new interdisciplinary research centers organized investigate basic research questions carry technology demonstration activities sec national coordination office conduct workshops activities research areas emerging importance include grand challenge areas help guide program investments strategic planning areas workshop participants shall develop options models partnerships institutions higher education federal laboratories industry develop options specific issues addressed partnerships propose guidelines assigning intellectual property rights transferring research results private sector national coordination office shall ensure workshop participants knowledge expertise specific issue areas represent broad mix relevant stakeholders establish senior steering groups develop focused strategic plans coordinate guide activities identified research areas sec national_science_foundation national_aeronautics_and_space_administration nasa department_of_energy national_institute_of_standards_and_technology environmental_protection_agency department_of_education shall engage specified research development activities conjunction program


Summary:
United States Digital Service Act

This bill directs the President to continue to operate, for FY2017-FY2026, the United States Digital Service as such program operated using funds made available under the Information Technology Oversight and Reform account in division E of the Financial Services and General Government Appropriations Act, 2016.

united_states digital service act bill directs president continue operate fy2017 fy2026 united_states digital service program operated funds available information technology oversight reform account division financial_services general government appropriations act


Summary:
Data Breach Insurance Act

This bill amends the Internal Revenue Code to allow a business tax credit for the purchase of qualified data breach insurance. The credit applies for five years and is equal to 15% of the annual premiums paid or incurred for the insurance in the ordinary course of the taxpayer's trade or business.

Qualified data breach insurance is coverage provided by an insurance company for expenses or losses in connection with the theft, loss, disclosure, inaccessibility, or manipulation of data.

Insurance does not qualify for the credit unless the taxpayer has adopted and is in compliance with: (1) the Framework for Improving Critical Infrastructure Cybersecurity published by the National Institute of Standards and Technology, or (2) any similar standard specified by the Internal Revenue Service.

data breach insurance act bill amends_the_internal_revenue_code allow business tax credit purchase qualified data breach insurance credit applies years equal annual premiums paid incurred insurance ordinary course taxpayer trade business qualified data breach insurance coverage provided insurance company expenses losses connection theft loss disclosure inaccessibility manipulation data insurance qualify credit taxpayer adopted compliance framework improving critical infrastructure cybersecurity published national_institute_of_standards_and_technology similar standard specified internal_revenue_service


Summary:
This bill expresses the sense of Congress that information security is critical to U.S. economic security and should be protected to promote economic growth.

The National Telecommunications and Information Administration must report on the costs to the U.S. economy of protecting information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction to provide information integrity, confidentiality, timely and reliable access, and authentication through digital credentials.

The report must estimate the cost of: (1) security for computers, networks, software, storage systems, data transmission, equipment, and support services; (2) measures to mitigate and hedge against compromises of information systems; and (3) economic loss or harm caused by such compromises.

bill expresses sense congress information security critical economic security protected promote economic growth national_telecommunications_and_information_administration report costs economy protecting information systems unauthorized access use disclosure disruption modification destruction provide information integrity confidentiality timely reliable access authentication digital credentials report estimate cost security computers networks software storage systems data transmission equipment support services measures mitigate hedge compromises information systems economic loss harm caused compromises


Summary:
Secure Data Act of 2015

 Prohibits a federal agency from requiring a manufacturer, developer, or seller of any computer hardware, software, or electronic device made available to the general public to design or alter the security functions in such products to allow the surveillance of any user or the physical search of such product by any agency. Exempts from such prohibition products used by law enforcement agencies for electronic surveillance as authorized under the Communications Assistance for Law Enforcement Act.

secure data act prohibits federal agency requiring manufacturer developer seller computer hardware software electronic device available general public design alter security functions products allow surveillance user physical search product agency exempts prohibition products law enforcement agencies electronic surveillance authorized communications assistance law enforcement act


Summary:
Cyber Threat Sharing Act of 2015

Amends the Homeland Security Act of 2002 to permit private entities to: (1) disclose lawfully obtained cyber threat indicators to a private information sharing and analysis organization and the national cybersecurity and communications integration center (NCCIC); and (2) receive indicators disclosed by private entities, the federal government, or state or local governments.

Permits any entity to disclose lawfully obtained indicators to a federal entity for investigative purposes consistent with the lawful authorities of the federal entity.

Restricts private entities' use, retention, or further disclosure of cyber threat indicators to purposes relating to information system protection, cyber threat identification or mitigation, or crime reporting.

Directs the Department of Homeland Security (DHS) to select through a competitive process a private entity to identify best practices for private information sharing and analysis organizations.

Provides liability protections to entities that voluntarily share lawfully obtained indicators with: (1) the NCCIC, or (2) a private information sharing and analysis organization if the organization self-certifies that it has adopted the best practices identified by the DHS-selected private entity.

Directs DHS to: (1) designate the NCCIC to receive and disclose threat indicators to federal and nonfederal entities in as close to real time as practicable, and (2) develop a program to support implementation of automated mechanisms for real time sharing.

Prohibits a federal entity from using a disclosed indicator as evidence in a regulatory enforcement action against the entity that disclosed the indicator, but allows a federal entity to use disclosed indicators for regulatory enforcement if the information is received by other lawful means.

Requires DHS to develop policies for federal entities to:

 anonymize and destroy information in a timely manner to limit the acquisition, interception, retention, use, and disclosure of indicators that are likely to identify specific persons; limit reception, use, and retention only to protect information systems or to investigate, prosecute, or otherwise respond to computer crimes, threats of death or serious bodily harm, serious threats to a minor, or attempts or conspiracies to commit such offenses; preserve confidentiality of proprietary information; and penalize federal employees who violate these policies. Repeals threat indicator sharing procedures established by this Act five years after enactment of this Act.

Expresses the sense of Congress that the statement issued by the Department of Justice and the Federal Trade Commission on April 10, 2014, entitled "Antitrust Policy Statement On Sharing Of Cybersecurity Information" provides protections against antitrust concerns for the legitimate sharing of cyber threat indicators.

cyber threat sharing act amends homeland_security act permit private entities disclose lawfully obtained cyber threat indicators private information sharing analysis organization national cybersecurity communications integration center receive indicators disclosed private entities federal_government state local governments permits entity disclose lawfully obtained indicators federal entity investigative purposes consistent lawful authorities federal entity restricts private entities use retention disclosure cyber threat indicators purposes relating information system protection cyber threat identification mitigation crime reporting directs department_of_homeland_security dhs select competitive process private entity identify best practices private information sharing analysis organizations provides liability protections entities voluntarily share lawfully obtained indicators private information sharing analysis organization organization self certifies adopted best practices identified dhs selected private entity directs dhs designate receive disclose threat indicators federal nonfederal entities close real time practicable develop program support implementation automated mechanisms real time sharing prohibits federal entity disclosed indicator evidence regulatory enforcement action entity disclosed indicator allows federal entity use disclosed indicators regulatory enforcement information received lawful means requires dhs develop policies federal entities destroy information timely manner limit acquisition interception retention use disclosure indicators likely identify specific persons limit reception use retention protect information systems investigate prosecute respond computer crimes threats death bodily harm threats minor attempts conspiracies commit offenses preserve confidentiality proprietary information penalize federal employees violate policies repeals threat indicator sharing procedures established act years enactment act expresses sense congress statement issued department_of_justice federal_trade_commission april entitled antitrust policy statement sharing cybersecurity information provides protections antitrust concerns legitimate sharing cyber threat indicators