Summary:
Title I: Commercial Privacy - Commercial Privacy Bill of Rights Act of 2014 - Directs the Federal Trade Commission (FTC) to initiate a rulemaking to require covered entities to carry out security measures to protect personally identifiable information, unique identifier information, and other information that may be used to identify a specific individual.

Defines "covered entity" as a person (a person, partnership, or corporation over which the FTC has authority under the Federal Trade Commission Act, a common carrier subject to the Communications Act of 1934, or a nonprofit organization) who collects, uses, transfers, or stores such information concerning more than 5,000 individuals during any consecutive 12-month period. Directs the FTC to require covered entities to: (1) notify individuals of their practices regarding the collection, use, transfer, and storage of such information; (2) provide timely notice before implementing a material change in such practices; (3) offer individuals a mechanism to provide opt-in consent for any unauthorized use of such information or a third party's use for behavioral advertising or marketing; and (4) provide access to, and methods to correct, stored information.

Permits covered entities to execute contracts with service providers to collect, use, and store information on behalf of the covered entity.

Restricts covered entities to the collection of only as much information relating to an individual as reasonably necessary to: (1) process or enforce a transaction or deliver a requested service, including inventory management, financial reporting and accounting, planning, product or service improvement, forecasting, and customer support; (2) prevent or detect fraud or provide for a secure environment; (3) investigate a possible crime or comply with a law; (4) market or advertise to such individual if the information used for such marketing or advertising was collected directly by the covered entity; and (5) conduct internal operations and customer research, including the collection of information about Internet website visits and click-through rates to improve website navigation and the customer's experience.

Limits the duration of time that a covered entity is authorized to retain such information to only the period necessary to provide the transaction, deliver the service, or comply with a law. Restricts the use of retained information to the purpose for which it was collected or a reasonably related purpose.

Directs covered entities that contract to transfer information to third parties to prohibit such third parties from combining transferred information that is not personally identifiable with other information in order to identify the individual without the individual's opt-in consent.

Requires covered entities to attempt to establish procedures to ensure the accuracy of personally identifiable information that could be used to deny consumers benefits or cause significant harm.

Sets forth the circumstances under which a covered entity may be required to provide notice of a breach of security to: (1) U.S. citizens or residents whose personally identifiable information is reasonably believed to have been acquired or accessed, (2) the FTC, (3) third parties, (4) service providers, and (5) credit reporting agencies.

Exempts a covered entity from certain notice requirements if:

 the covered entity, following a breach of security, concludes that there is no reasonable risk of identity theft, fraud, or other unlawful conduct; or the covered entity participates in a security program that blocks the use of the personally identifiable information to initiate an unauthorized financial transaction before it is charged to the account of the individual and that notifies affected individuals after a security breach that resulted in attempted fraud or an attempted unauthorized transaction. Requires a covered entity to notify a federal government entity designated by the Secretary of Homeland Security (DHS) if a breach of security involves: (1) the personally identifiable information of more than 10,000 individuals, (2) a database containing the personally identifiable information of more than 1 million individuals, (3) federal government databases, or (4) the personally identifiable information of federal employees or contractors involved in national security or law enforcement.

Directs the designated entity to provide each notice it receives to:

 the U.S. Secret Service; the Federal Bureau of Investigation (FBI); the FTC; the U.S. Postal Inspection Service, if mail fraud is involved; attorneys general of affected states; and appropriate federal agencies for law enforcement, national security, or data security purposes. Sets forth enforcement provisions for the FTC, the Attorney General (DOJ), and states. Establishes civil penalties for state actions against covered entities that recklessly or repeatedly violate specified requirements.

Prohibits this title from being construed to provide a private right of action.

Directs the FTC to initiate a rulemaking to establish requirements for a nongovernmental organization to administer safe harbor programs under which participants are exempted from certain requirements of this title if they implement particular mechanisms that protect against unauthorized information uses and provide consumers a means of opting out of the transfer of specified information to third parties. Title II: Online Privacy of Children - Do Not Track Kids Act of 2014 - Amends the Children's Online Privacy Protection Act of 1998 to apply the prohibitions against collecting personal information from children to online applications and mobile applications directed to children. Establishes additional privacy protections against the collection of personal or geolocation information from children and minors.

Revises the definition of:

 "operator" to include online and mobile applications (currently, only Internet websites and online services) and to make such definition apply specifically to operators and providers of such websites, services, or applications who, for commercial purposes, in interstate or foreign commerce, collect or maintain personal information from or about their users, allow another person to collect such personal information, or allow users of such websites, services, or applications to publicly disclose personal information; and "disclosure" to mean the release of personal information (currently, the release of personal information collected from a child in identifiable form). Requires verifiable parental consent, under specified circumstances, for the collection, use, or disclosure of personal information of a child, including certain online contact information collected in response to a specific request from a child when such information is used to contact a different child.

Prohibits, without verifiable parental consent in the case of a child or without consent of the minor in the case of a minor, an operator of a website, online service, online application, or mobile application directed to children or minors, or an operator having actual knowledge that personal information being collected is from children or minors, from: (1) using, disclosing to third parties, or compiling personal information collected from children or minors for targeted marketing purposes; and (2) collecting geolocation information in a manner that violates the regulations prescribed under this title.

Defines a "minor" as an individual over the age of 12 and under the age of 16.

Prohibits an operator from discontinuing service provided to a child or minor on the basis of a refusal, by the child's parent or the minor, to permit the further use or maintenance in retrievable form, or future collection, of certain personal or geolocation information from such individuals, to the extent that the operator is capable of providing such service without such information.

Requires an operator of a website, online service, online application, or mobile application directed to children or minors to treat all users as children or minors for purposes of this title, except as permitted by regulation.

Prohibits an operator of a website, online service, or such applications directed to minors from collecting personal information from minors unless such operator has adopted, and complies with, a Digital Marketing Bill of Rights for Teens that is consistent with the Fair Information Practices Principles established by this title.

Requires the FTC to promulgate regulations that require operators to implement mechanisms that permit a user to erase content submitted by such user that is publicly available through such websites, services, or applications and that contains or displays personal information of children or minors.

Sets forth enforcement provisions for the FTC, other federal agencies, and states.

title commercial privacy commercial privacy bill rights act directs federal_trade_commission ftc initiate rulemaking require covered entities carry security measures protect personally identifiable information unique identifier information information identify specific individual defines covered entity person person partnership corporation ftc authority federal_trade_commission_act common carrier subject communications act nonprofit organization collects uses transfers stores information concerning individuals consecutive month period directs ftc require covered entities notify individuals practices collection use transfer storage information provide timely notice implementing material change practices offer individuals mechanism provide opt consent unauthorized use information party use behavioral advertising marketing provide access methods correct stored information permits covered entities execute contracts service providers collect use store information behalf covered entity restricts covered entities collection information relating individual reasonably necessary process enforce transaction deliver requested service including inventory management financial reporting accounting planning product service improvement forecasting customer support prevent detect fraud provide secure environment investigate possible crime comply law market advertise individual information marketing advertising collected directly covered entity conduct internal operations customer research including collection information internet website visits rates improve website navigation customer experience limits duration time covered entity authorized retain information period necessary provide transaction deliver service comply law restricts use retained information purpose collected reasonably related purpose directs covered entities contract transfer information parties prohibit parties combining transferred information personally identifiable information order identify individual individual opt consent requires covered entities attempt establish procedures ensure accuracy personally identifiable information deny consumers benefits cause significant harm sets forth circumstances covered entity required provide notice breach security citizens residents personally identifiable information reasonably believed acquired accessed ftc parties service providers credit reporting agencies exempts covered entity certain notice requirements covered entity following breach security concludes reasonable risk identity theft fraud unlawful conduct covered entity participates security program blocks use personally identifiable information initiate unauthorized financial transaction charged account individual notifies affected individuals security breach resulted attempted fraud attempted unauthorized transaction requires covered entity notify federal government entity designated secretary homeland_security dhs breach security involves personally identifiable information individuals database containing personally identifiable information million individuals federal government databases personally identifiable information federal employees contractors involved national security law enforcement directs designated entity provide notice receives federal_bureau_of_investigation fbi ftc mail fraud involved attorneys general affected states appropriate federal agencies law enforcement national security data security purposes sets forth enforcement provisions ftc attorney general doj states establishes civil penalties state actions covered entities recklessly repeatedly violate specified requirements prohibits title construed provide private right action directs ftc initiate rulemaking establish requirements nongovernmental organization administer safe harbor programs participants exempted certain requirements title implement particular mechanisms protect unauthorized information uses provide consumers means opting transfer specified information parties title online privacy children track kids act amends children online privacy protection act apply prohibitions collecting personal information children online applications mobile applications directed children establishes additional privacy protections collection personal geolocation information children minors revises definition operator include online mobile applications currently internet websites online services definition apply specifically operators providers websites services applications commercial purposes interstate foreign commerce collect maintain personal information users allow person collect personal information allow users websites services applications publicly disclose personal information disclosure mean release personal information currently release personal information collected child identifiable form requires verifiable parental consent specified circumstances collection use disclosure personal information child including certain online contact information collected response specific request child information contact different child prohibits verifiable parental consent case child consent minor case minor operator website online service online application mobile application directed children minors operator having actual knowledge personal information collected children minors disclosing parties compiling personal information collected children minors targeted marketing purposes collecting geolocation information manner violates regulations prescribed title defines minor individual age age prohibits operator discontinuing service provided child minor basis refusal child parent minor permit use maintenance retrievable form future collection certain personal geolocation information individuals extent operator capable providing service information requires operator website online service online application mobile application directed children minors treat users children minors purposes title permitted regulation prohibits operator website online service applications directed minors collecting personal information minors operator adopted complies digital_marketing_bill_of_rights_for_teens consistent fair_information_practices_principles established title requires ftc promulgate regulations require operators implement mechanisms permit user erase content submitted user publicly available websites services applications contains displays personal information children minors sets forth enforcement provisions ftc federal agencies states


Summary:
(This measure has not been amended since it was reported to the Senate on November 20, 2014. The summary of that version is repeated here.)

FOIA Improvement Act of 2014 - (Sec. 2) Amends the Freedom of Information Act (FOIA) to:

 require federal agencies to make their disclosable records and documents available for public inspection in an electronic format; require agencies to make available for inspection in an electronic format records that have been requested at least three times (frequently requested records); prohibit an agency from charging a fee for providing records if the agency misses a deadline for complying with an FOIA request unless unusual circumstances apply; prohibit an agency from withholding information requested under FOIA unless the agency reasonably foresees a specific identifiable harm to an interest protected by an FOIA exemption or disclosure is prohibited by law (presumption of openness); require the Office of Government Information Services to offer mediation services to resolve disputes between agencies and FOIA requesters; require the Government Accountability Office (GAO) to conduct audits of agency compliance with FOIA requirements; expand the authority and duties of the Chief FOIA Officer of each agency for promoting compliance with FOIA disclosure requirements; and establish a Chief FOIA Officers Council to develop recommendations for increasing compliance with FOIA requirements. (Sec. 3) Requires the head of each federal agency to: (1) review agency regulations and issue regulations on procedures for disclosure of records in accordance with the amendments to FOIA made by this Act, and (2) include in such regulations procedures for engaging in dispute resolution through the FOIA Public Liaison and the Office of Government Information Services.

(Sec. 4) Expands the program for the efficient management of federal agency records to require agency heads to establish procedures for identifying records of general interest or use to the public that are appropriate for public disclosure and for posting such records in a publicly-accessible electronic format.

(Sec. 5) Prohibits the authorization of additional funds to carry out the requirements of this Act.

measure amended reported senate november summary version repeated sec amends freedom information act foia require federal agencies records documents available public inspection electronic format require agencies available inspection electronic format records requested times frequently requested records prohibit agency charging fee providing records agency deadline complying foia request unusual circumstances apply prohibit agency withholding information requested foia agency reasonably specific identifiable harm interest protected foia exemption disclosure prohibited law presumption openness require office_of_government_information_services offer mediation services resolve disputes agencies foia requesters require government_accountability_office gao conduct audits agency compliance foia requirements expand authority duties chief foia_officer agency promoting compliance foia disclosure requirements establish chief foia officers council develop recommendations increasing compliance foia requirements sec requires head federal agency review agency regulations issue regulations procedures disclosure records accordance amendments foia act include regulations procedures engaging dispute resolution foia_public_liaison office_of_government_information_services sec expands program efficient management federal agency records require agency heads establish procedures identifying records general interest use public appropriate public disclosure posting records publicly accessible electronic format sec prohibits authorization additional funds carry requirements act


Summary:
(This measure has not been amended since it was passed by the Senate on December 8, 2014. The summary of that version is repeated here.)

Federal Information Security Modernization Act of 2014 - Amends the Federal Information Security Management Act of 2002 (FISMA) to: (1) reestablish the oversight authority of the Director of the Office of Management and Budget (OMB) with respect to agency information security policies and practices, and (2) set forth authority for the Secretary of Homeland Security (DHS) to administer the implementation of such policies and practices for information systems.

Requires the Secretary to develop and oversee implementation of operational directives requiring agencies to implement the Director's standards and guidelines for safeguarding federal information and systems from a known or reasonably suspected information security threat, vulnerability, or risk. Authorizes the Director to revise or repeal operational directives that are not in accordance with the Director's policies.

Requires the Secretary (currently, the Director) to ensure the operation of the federal information security incident center (FISIC).

Directs the Secretary to administer procedures to deploy technology, upon request by an agency, to assist the agency to continuously diagnose and mitigate against cyber threats and vulnerabilities.

Requires the Director's annual report to Congress regarding the effectiveness of information security policies to assess agency compliance with OMB data breach notification procedures.

Provides for OMB's information security authorities to be delegated to the Director of National Intelligence (DNI) for certain systems operated by an element of the intelligence community.

Directs the Secretary to consult with and consider guidance developed by the National Institute of Standards and Technology (NIST) to ensure that operational directives do not conflict with NIST information security standards.

Directs agency heads to ensure that: (1) information security management processes are integrated with budgetary planning; (2) senior agency officials, including chief information officers, carry out their information security responsibilities; and (3) all personnel are held accountable for complying with the agency-wide information security program.

Provides for the use of automated tools in agencies' information security programs, including for periodic risk assessments, testing of security procedures, and detecting, reporting, and responding to security incidents.

Requires agencies to include offices of general counsel as recipients of security incident notices. Requires agencies to notify Congress of major security incidents within seven days after there is a reasonable basis to conclude that a major incident has occurred.

Directs agencies to submit an annual report regarding major incidents to OMB, DHS, Congress, and the Comptroller General (GAO). Requires such reports to include: (1) threats and threat actors, vulnerabilities, and impacts; (2) risk assessments of affected systems before, and the status of compliance of the systems at the time of, major incidents; (3) detection, response, and remediation actions; (4) the total number of incidents; and (5) a description of the number of individuals affected by, and the information exposed by, major incidents involving a breach of personally identifiable information.

Authorizes GAO to provide technical assistance to agencies and inspectors general, including by testing information security controls and procedures.

Requires OMB to ensure the development of guidance for: (1) evaluating the effectiveness of information security programs and practices, and (2) determining what constitutes a major incident.

Directs FISIC to provide agencies with intelligence about cyber threats, vulnerabilities, and incidents for risk assessments.

Directs OMB, during the two-year period after enactment of this Act, to include in an annual report to Congress an assessment of the adoption by agencies of continuous diagnostics technologies and other advanced security tools.

Requires OMB to ensure that data breach notification policies require agencies, after discovering an unauthorized acquisition or access, to notify: (1) Congress within 30 days, and (2) affected individuals as expeditiously as practicable. Allows the Attorney General, heads of elements of the intelligence community, or the DHS Secretary to delay notice to affected individuals for purposes of law enforcement investigations, national security, or security remediation actions.

Requires OMB to amend or revise OMB Circular A-130 to eliminate inefficient and wasteful reporting.

Directs the Information Security and Privacy Advisory Board to advise and provide annual reports to DHS.

measure amended passed senate december summary version repeated amends federal_information_security_management_act reestablish oversight authority director office_of_management_and_budget omb respect agency information security policies practices set forth authority secretary homeland_security dhs administer implementation policies practices information systems requires secretary develop oversee implementation operational directives requiring agencies implement director standards guidelines safeguarding federal information systems known reasonably suspected information security threat vulnerability risk authorizes director revise repeal operational directives accordance director policies requires secretary currently director ensure operation federal information security incident center directs secretary administer procedures deploy technology request agency assist agency continuously diagnose mitigate cyber threats vulnerabilities requires director annual report congress effectiveness information security policies assess agency compliance omb data breach notification procedures provides omb information security authorities delegated director national_intelligence dni certain systems operated element intelligence community directs secretary consult consider guidance developed national_institute_of_standards_and_technology nist ensure operational directives conflict nist information security standards directs agency heads ensure information security management processes integrated budgetary planning senior agency officials including chief information officers carry information security responsibilities personnel held accountable complying agency wide information security program provides use automated tools agencies information security programs including periodic risk assessments testing security procedures detecting reporting responding security incidents requires agencies include offices general counsel recipients security incident notices requires agencies notify congress major security incidents seven days reasonable basis conclude major incident occurred directs agencies submit annual report major incidents omb dhs congress comptroller_general gao requires reports include threats threat actors vulnerabilities impacts risk assessments affected systems status compliance systems time major incidents detection response remediation actions total number incidents description number individuals affected information exposed major incidents involving breach personally identifiable information authorizes gao provide technical assistance agencies inspectors general including testing information security controls procedures requires omb ensure development guidance evaluating effectiveness information security programs practices determining constitutes major incident directs provide agencies intelligence cyber threats vulnerabilities incidents risk assessments directs omb year period enactment act include annual report congress assessment adoption agencies continuous diagnostics technologies advanced security tools requires omb ensure data breach notification policies require agencies discovering unauthorized acquisition access notify congress days affected individuals expeditiously practicable allows attorney general heads elements intelligence community dhs secretary delay notice affected individuals purposes law enforcement investigations national security security remediation actions requires omb amend revise omb circular eliminate inefficient wasteful reporting directs advise provide annual reports dhs


Summary:
Protect Women's Health From Corporate Interference Act of 2014 - Affirms requirements, notwithstanding the Religious Freedom Restoration Act of 1993, that: (1) an employer that establishes or maintains a group health plan for its employees must provide coverage of a specific item or service for the employees or their dependents where the coverage is required under federal provisions or regulations pursuant to those provisions; and (2) group health plans sponsored by an employer or employee organization, and any health insurance coverage, must provide coverage required under the Public Health Service Act, including preventive health services.

 Authorizes the Departments of Labor, Health and Human Services (HHS), and the Treasury to modify regulations concerning coverage of contraceptive services by group health plans of religious employers consistent with the purposes and findings (regarding coverage of birth control services and the Supreme Court decisions in Burwell v. Hobby Lobby Stores, Inc. and Conestoga Wood Specialties Corp. v. Burwell) of this Act.

interference act affirms requirements notwithstanding religious freedom restoration act employer establishes maintains group health plan employees provide coverage specific item service employees dependents coverage required federal provisions regulations pursuant provisions group health plans sponsored employer employee organization health insurance coverage provide coverage required public_health_service_act including preventive health services authorizes departments_of_labor health_and_human_services hhs treasury modify regulations concerning coverage contraceptive services group health plans religious employers consistent purposes findings coverage birth control services supreme_court decisions act


Summary:
Access to Birth Control Act - Amends the Public Health Service Act to require pharmacies to comply with certain rules related to contraceptives, including: (1) providing a customer a contraceptive without delay if it is in stock; (2) immediately informing a customer if the contraceptive is not in stock and either transferring the prescription to a pharmacy that has the contraceptive in stock or expediting the ordering of the contraceptive and notifying the customer when it arrives, based on customer preference, except for pharmacies that do not ordinarily stock contraceptives in the normal course of business; and (3) ensuring that pharmacy employees do not take certain actions relating to a request for contraception, including intimidating, threatening, or harassing customers, interfering with or obstructing the delivery of services, intentionally misrepresenting or deceiving customers about the availability of contraception or its mechanism of action, breaching or threatening to breach medical confidentiality, or refusing to return a valid, lawful prescription.

Provides that a pharmacy is not prohibited from refusing to provide a contraceptive to a customer if: (1) it is unlawful to dispense the contraceptive to the customer without a valid, lawful prescription and no such prescription is presented; (2) the customer is unable to pay for the contraceptive; or (3) the employee of the pharmacy refuses to provide the contraceptive on the basis of a professional clinical judgment.

Provides that this Act does not preempt state law or any professional obligation of a state board that provides greater protections for customers.

Sets forth civil penalties and establishes a a private cause of action for violations of this Act.

access birth control act amends public_health_service_act require pharmacies comply certain rules related contraceptives including providing customer contraceptive delay stock immediately informing customer contraceptive stock transferring prescription pharmacy contraceptive stock expediting ordering contraceptive notifying customer arrives based customer preference pharmacies ordinarily stock contraceptives normal course business ensuring pharmacy employees certain actions relating request contraception including intimidating threatening harassing customers interfering obstructing delivery services intentionally misrepresenting deceiving customers availability contraception mechanism action breaching threatening breach medical confidentiality refusing return valid lawful prescription provides pharmacy prohibited refusing provide contraceptive customer unlawful dispense contraceptive customer valid lawful prescription prescription presented customer unable pay contraceptive employee pharmacy refuses provide contraceptive basis professional clinical judgment provides act preempt state law professional obligation state board provides greater protections customers sets forth civil penalties establishes private cause action violations act


Summary:
Access to Contraception for Women Servicemembers and Dependents Act of 2014 - Expands the TRICARE health care program managed by the Department of Defense (DOD) to entitle additional female beneficiaries and dependents to care related to the prevention of pregnancy. (Currently, such care is limited to certain female members of the uniformed service or a reserve component performing active duty or certain servicewomen performing inactive-duty training.) Prohibits cost-sharing from being imposed or collected for such pregnancy prevention care, including for any method of contraception provided through a facility of the uniformed services, the TRICARE retail pharmacy program, or the national mail-order pharmacy program.

Provides for such pregnancy prevention care to include all methods of contraception approved by the Food and Drug Administration (FDA), sterilization procedures, and patient education and counseling.

Directs the DOD Secretary to: (1) ensure that every military treatment facility has a sufficient stock of a broad range of FDA-approved methods of contraception to dispense to any women members of the Armed Forces and female covered beneficiaries who receive care through such facility; (2) disseminate clinical practice guidelines and decision support tools to DOD-employed health care providers; (3) ensure that women members of the Armed Forces have access to contraception counseling during health care visits; and (4) establish an education program for all members of the Armed Forces, including both men and women members, consisting of a uniform standard curriculum on family planning.

Requires questions regarding family planning services and counseling to be incorporated into DOD health surveys.

Requires every military treatment facility, upon request, to provide emergency contraception, or information about FDA-approved methods of emergency contraception, to any woman who: (1) states to personnel that she is a victim of sexual assault or is accompanied by another individual who states that the woman is a victim of sexual assault, or (2) is reasonably believed to be a survivor of sexual assault.

access contraception women servicemembers dependents act expands tricare health care program managed department_of_defense dod entitle additional female beneficiaries dependents care related prevention pregnancy currently care limited certain female members uniformed service reserve component performing active duty certain servicewomen performing inactive duty training prohibits cost sharing imposed collected pregnancy prevention care including method contraception provided facility uniformed services tricare retail pharmacy program national mail order pharmacy program provides pregnancy prevention care include methods contraception approved food_and_drug_administration fda sterilization procedures patient education counseling directs dod secretary ensure military treatment facility sufficient stock broad range fda approved methods contraception dispense women members armed_forces female covered beneficiaries receive care facility disseminate clinical practice guidelines decision support tools dod employed health care providers ensure women members armed_forces access contraception counseling health care visits establish education program members armed_forces including men women members consisting uniform standard curriculum family planning requires questions family planning services counseling incorporated dod health surveys requires military treatment facility request provide emergency contraception information fda approved methods emergency contraception woman states personnel victim sexual assault accompanied individual states woman victim sexual assault reasonably believed survivor sexual assault


Summary:
Protecting Student Privacy Act of 2014 - Amends the Family Educational Rights and Privacy Act of 1974 to prohibit programs administered by the Department of Education from making funds available to any educational agency or institution that has not implemented information security policies that: (1) protect personally identifiable information (PII) from education records, and (2) require each outside party to whom PII from education records is disclosed to have a comprehensive security program to protect such information.

Defines "outside party" as a person that is not an employee, officer, or volunteer of the educational agency or institution or of a government agency. Includes within such term any contractor or consultant acting as a school official or authorized representative or in any other capacity.

 Prohibits such funds from being made available to any educational agency or institution that has a policy or practice of using, releasing, or providing access to PII to advertise or market a product or service.

Requires state agencies receiving such funds, and each educational agency or institution, to ensure that any outside party with access to such records: (1) provides parents access to any PII it holds about their students; (2) provides a process to challenge, correct, or delete any inaccurate, misleading, or inappropriate data through a hearing by the agency or institution providing the outside party with access; (3) maintains a record of all individuals, agencies, or organizations that have requested or obtained access to the education records of a student; and (4) has information security procedures in place.

Prohibits funds from being made available to any educational agency or institution, or any state educational agency, unless the agency or institution has a practice that: (1) promotes data minimization by meeting requests for student information with non-PII, and (2) requires that PII held by any outside party be destroyed when the information is no longer needed for the specified purpose.

Directs educational agencies and institutions to maintain a record of all outside parties which have requested or obtained access to a student's education records. Requires such record to describe the information shared and to indicate specifically the party's legitimate interest in obtaining this information.

protecting student privacy act amends family educational rights privacy act prohibit programs administered department_of_education making funds available educational agency institution implemented information security policies protect personally identifiable information pii education records require outside party pii education records disclosed comprehensive security program protect information defines outside party person employee officer volunteer educational agency institution government agency includes term contractor consultant acting school official authorized representative capacity prohibits funds available educational agency institution policy practice releasing providing access pii advertise market product service requires state agencies receiving funds educational agency institution ensure outside party access records provides parents access pii holds students provides process challenge correct delete inaccurate misleading inappropriate data hearing agency institution providing outside party access maintains record individuals agencies organizations requested obtained access education records student information security procedures place prohibits funds available educational agency institution state educational agency agency institution practice promotes data minimization meeting requests student information requires pii held outside party destroyed information longer needed specified purpose directs educational agencies institutions maintain record outside parties requested obtained access student education records requires record describe information shared indicate specifically party legitimate interest obtaining information


Summary:
Law Enforcement Access to Data Stored Abroad Act - Amends the federal criminal code to authorize a governmental entity to require the disclosure by a provider of electronic communication service or remote computing service of the contents of a wire or electronic communication that is in electronic storage with or otherwise stored, held, or maintained by the provider only pursuant to a warrant issued by a court of competent jurisdiction.

Authorizes such a warrant to require such disclosure regardless of where such contents may be in electronic storage or otherwise stored, held, or maintained by the provider if the holder of the account the contents of which are sought by the warrant is a U.S. person. Requires a court, on a service provider's motion, to modify or vacate such a warrant upon finding that it would require the provider to violate the laws of a foreign country.

Sets forth requirements for government notification of provider customers or subscribers regarding the receipt of communication contents pursuant to such a warrant.

Directs the Attorney General to: (1) establish a form for use by a foreign government filing a mutual legal assistance treaty (MLAT) request; (2) establish an online docketing system for all MLAT requests; and (3) publish statistics annually on MLAT requests made by the Department of Justice (DOJ) to foreign governments, and by foreign governments to DOJ, to obtain the contents of communications or other information or records from a provider of electronic communications or remote computing services.

Expresses the sense of Congress that: (1) data localization requirements imposed by foreign governments on data providers are incompatible with the borderless nature of the Internet, an impediment to online innovation, and unnecessary to meet the needs of law enforcement; and (2) DOJ, the Department of State, and the U.S. Trade Representative should pursue open data flow policies with foreign nations.

law enforcement access data stored abroad act amends federal criminal code authorize governmental entity require disclosure provider electronic communication service remote computing service contents wire electronic communication electronic storage stored held maintained provider pursuant warrant issued court competent jurisdiction authorizes warrant require disclosure regardless contents electronic storage stored held maintained provider holder account contents sought warrant person requires court service provider motion modify vacate warrant finding require provider violate laws foreign country sets forth requirements government notification provider customers subscribers receipt communication contents pursuant warrant directs attorney general establish form use foreign government filing mutual legal assistance treaty request establish online system requests publish statistics annually requests department_of_justice doj foreign governments foreign governments doj obtain contents communications information records provider electronic communications remote computing services expresses sense congress data requirements imposed foreign governments data providers incompatible nature internet online innovation unnecessary meet needs law enforcement doj department_of_state pursue open data flow policies foreign nations


Summary:
Emergency Contraception Access and Education Act of 2014 - Prohibits payment to a hospital under titles XVIII (Medicare) or XIX (Medicaid) of the Social Security Act unless the hospital promptly provides information about emergency contraception to any woman who arrives at the hospital and is stated to be, or hospital staff have reason to believe is, a victim of sexual assault.

Requires the Director of the Centers for Disease Control and Prevention (CDC) to develop and disseminate information on emergency contraception.

Directs the Administrator of the Health Resources and Services Administration (HRSA) to develop and disseminate to health care providers, including pharmacists, information on emergency contraception, including a recommendation for providers working in emergency rooms to consult with survivors of sexual assault regarding emergency contraception and provide follow-up care and referral services.

emergency contraception access education act prohibits payment hospital titles xviii medicare xix medicaid social security act hospital promptly provides information emergency contraception woman arrives hospital stated hospital staff reason believe victim sexual assault requires director centers_for_disease_control_and_prevention cdc develop disseminate information emergency contraception directs administrator health_resources_and_services_administration hrsa develop disseminate health care providers including pharmacists information emergency contraception including recommendation providers working emergency rooms consult survivors sexual assault emergency contraception provide follow care referral services


Summary:
Strengthening Privacy, Oversight, and Transparency Act or the SPOT Act - Amends the Intelligence Reform and Terrorism Prevention Act of 2004 to expand the functions of the Privacy and Civil Liberties Oversight Board to include reviews of legislation, regulations, policies, and executive branch actions relating to foreign intelligence.

Allows intelligence community employees, contractors, or detailees to submit to the Board a whistleblower complaint or information believed to be related to a privacy or civil liberties concern. Permits the Board to: (1) investigate such complaints, or (2) transmit such complaints to any other executive agency or the congressional intelligence committees.

Authorizes the Board to subpoena persons (other than agencies and elements of the executive branch) to produce documentary or testimonial evidence. (Currently, the Board submits a request for the Attorney General to issue a subpoena.)

Permits the Board, at the direction of the majority of its members, to exercise the authority of the Board chairman to appoint and fix compensation of Board staff when the position of chairman is vacant.

Provides for members of the Board to serve in a full-time capacity. Removes exceptions to the requirement that members continue to serve after the expiration of their term of office until a successor has been appointed and qualified. Revises the compensation of the Board chairman, members, and staff.

Directs the Attorney General to fully inform the Board about government activities under the Foreign Intelligence Surveillance Act of 1978 (FISA), including by providing to the Board copies of: (1) FISA reports submitted to Congress; and (2) FISA court decisions, orders, and opinions that include significant construction or interpretation of FISA.

Civil rights and liberties, minority issues

strengthening privacy oversight transparency_act spot act amends intelligence reform terrorism prevention act expand functions privacy_and_civil_liberties_oversight_board include reviews legislation regulations policies executive branch actions relating foreign intelligence allows intelligence community employees contractors submit board whistleblower complaint information believed related privacy civil liberties concern permits board investigate complaints transmit complaints executive agency congressional intelligence committees authorizes board subpoena persons agencies elements executive branch produce documentary evidence currently board submits request attorney general issue subpoena permits board direction majority members exercise authority board chairman appoint fix compensation board staff position chairman vacant provides members board serve time capacity removes exceptions requirement members continue serve expiration term office successor appointed qualified revises compensation board chairman members staff directs attorney general fully inform board government activities foreign_intelligence_surveillance_act fisa including providing board copies fisa reports submitted congress fisa court decisions orders opinions include significant construction interpretation fisa


Summary:
Amends the federal criminal code to prohibit knowingly using an electronic tracking device to determine the location or movement of an individual with the intent to place the individual under surveillance without such individual's consent, except: (1) by a law enforcement agency if the use is not otherwise prohibited by law, (2) by an individual to track a dependent of the individual, or (3) to reasonably protect the health or safety of the individual being tracked.

Defines "electronic tracking device" to mean a device attached to a vehicle that reveals the location or movement of the device through the transmission of electronic signals.

amends federal criminal code prohibit knowingly electronic tracking device determine location movement individual intent place individual surveillance individual consent law enforcement agency use prohibited law individual track dependent individual reasonably protect health safety individual tracked defines electronic tracking device mean device attached vehicle reveals location movement device transmission electronic signals


Summary:
Medical Electronic Data Technology Enhancement for Consumers’ Health Act or the MEDTECH Act - Amends the Federal Food, Drug, and Cosmetic Act to exclude from regulation as a medical device:

 administrative, operational, or financial records software used in health care settings; products intended for health maintenance outside of medical treatment; electronic patient records, excluding diagnostic image data, provided that related software is validated prior to marketing, consistent with the standards for devices; software for clinical laboratory test reports; and software that provides medical recommendations and the basis for those recommendations to health care professionals, with exceptions for products related to regulated devices.

act amends federal food drug cosmetic act exclude regulation medical device administrative operational financial records software health care settings products intended health maintenance outside medical treatment electronic patient records excluding diagnostic image data provided related software validated prior marketing consistent standards devices software clinical laboratory test reports software provides medical recommendations basis recommendations health care professionals exceptions products related regulated devices


Summary:
Civil Liberties Protection Act - Amends the Foreign Intelligence Surveillance Act of 1978 (FISA) to modify the purposes for which the Federal Bureau of Investigation (FBI) is authorized to apply to a FISA court for an order requiring the production of tangible things (commonly referred to as "business records"). Authorizes the FBI to apply for such a production order for an investigation to protect against international terrorism, clandestine intelligence activities, or the proliferation of weapons of mass destruction (thus removes the FBI's authority to apply for such an order for an investigation to obtain foreign intelligence information not concerning a U.S. person and adds authority with respect to the proliferation of weapons of mass destruction).

Authorizes such production order applications for certain related preparation activities.

Requires applications for such production orders to include specific and articulable facts showing that there are reasonable grounds to believe that the tangible things sought are relevant to an authorized investigation of a specific individual. (Currently, a general statement of facts must only show that the tangible things are relevant to an authorized investigation without specifying whether the investigation is limited to a specific individual.)

Directs the National Security Agency (NSA) to report to Congress regarding its plans for: (1) purging the NSA telephony metadata database of information that does not comply with such revised FISA production order standards, and (2) retaining information relating to ongoing lawsuits.

Prohibits tangible things received by the FBI in response to a production order, or any database of such tangible things, from being stored by a private entity or transferred to a private entity for storage.

Prohibits officers or employees of the United States from issuing a national security letter (a request to access certain communication service provider records or to obtain specified information from financial institutions or consumer reports) unless the FISA court, a U.S. district court, or a U.S. magistrate judge issues an order approving an application for such a letter with a finding of specific and articulable facts that the information sought is relevant and material to an authorized investigation to protect against international terrorism or clandestine intelligence activities.

Sets forth an exception under which the requirement to obtain an order approving an application for a national security letter (as a prerequisite to the issuance of such a letter) is inapplicable if the Attorney General (DOJ): (1) reasonably determines that the factual basis exists for the issuance of the letter, (2) reasonably determines that an emergency situation exists with respect to the issuance of the letter before an order approving an application for such letter can be obtained with due diligence, (3) informs the court or judge of the decision to issue the letter at the time such decision is made, and (4) makes an application to the court or judge for approval of the issuance within seven days after the Attorney General's decision to issue such letter.

Revises minimization procedures and nondisclosure requirements with respect to orders approving the production of tangible things and the issuance of national security letters. Limits the period of time during which certain orders and related requirements may remain in effect.

act amends foreign intelligence surveillance act fisa modify purposes federal_bureau_of_investigation fbi authorized apply fisa court order requiring production tangible things commonly referred business records authorizes fbi apply production order investigation protect international terrorism clandestine intelligence activities proliferation weapons mass destruction removes fbi authority apply order investigation obtain foreign intelligence information concerning person adds authority respect proliferation weapons mass destruction authorizes production order applications certain related preparation activities requires applications production orders include specific articulable facts showing reasonable grounds believe tangible things sought relevant authorized investigation specific individual currently general statement facts tangible things relevant authorized investigation specifying investigation limited specific individual directs national_security_agency nsa report congress plans nsa telephony metadata database information comply revised fisa production order standards retaining information relating ongoing lawsuits prohibits tangible things received fbi response production order database tangible things stored private entity transferred private entity storage prohibits officers employees united_states issuing national security letter request access certain communication service provider records obtain specified information financial institutions consumer reports fisa court district court magistrate judge issues order approving application letter finding specific articulable facts information sought relevant material authorized investigation protect international terrorism clandestine intelligence activities sets forth exception requirement obtain order approving application national security letter prerequisite issuance letter inapplicable attorney general doj reasonably determines factual basis exists issuance letter reasonably determines emergency situation exists respect issuance letter order approving application letter obtained diligence informs court judge decision issue letter time decision makes application court judge approval issuance seven days attorney general decision issue letter revises minimization procedures nondisclosure requirements respect orders approving production tangible things issuance national security letters limits period time certain orders related requirements remain effect


Summary:
American Digital Security and Commerce Act of 2014 - Requires the Director of the Office of Management and Budget (OMB), in coordinating standards and guidelines under the National Institute of Standards and Technology Act with agencies and offices operating or exercising control of national security systems (including the National Security Agency [NSA]), to assure that such agencies or offices do not intentionally weaken, circumvent, undermine, or create any mechanism through which a federal agency may bypass the privacy, security, or encryption protections included in any standard or guideline.

Prohibits agencies and offices that consult with the National Institute of Standards and Technology (NIST) on information security policies from undermining such protective mechanisms.

Prohibits federal agencies from intercepting shipments of computer or electronic products for the purpose of intentionally introducing into the products a mechanism or device that would allow a federal agency to circumvent a product's privacy, security, or encryption protections.

Bars elements of the intelligence community from requiring, or contracting with, a manufacturer or developer of such products to place such a mechanism or device into its products.

Exempts from such mechanism placement prohibitions certain lawful surveillance activities pursuant to a court order under specified provisions of the federal criminal code or the Foreign Intelligence Surveillance Act of 1978 (except with respect to procedures for targeting persons outside the United States other than U.S. persons).

Permits persons (including certain associations and corporations, but excluding foreign powers) who suffer an injury relating to a mechanism placed into product to bring a civil action against the United States to recover money damages.

commerce act requires director office_of_management_and_budget omb coordinating standards guidelines national_institute_of_standards_and_technology_act agencies offices operating exercising control national security systems including national_security_agency nsa assure agencies offices intentionally weaken circumvent undermine create mechanism federal agency bypass privacy security encryption protections included standard guideline prohibits agencies offices consult national_institute_of_standards_and_technology nist information security policies undermining protective mechanisms prohibits federal agencies intercepting shipments computer electronic products purpose intentionally introducing products mechanism device allow federal agency circumvent product privacy security encryption protections bars elements intelligence community requiring contracting manufacturer developer products place mechanism device products exempts mechanism placement prohibitions certain lawful surveillance activities pursuant court order specified provisions federal criminal code foreign_intelligence_surveillance_act respect procedures targeting persons outside united_states persons permits persons including certain associations corporations excluding foreign powers suffer injury relating mechanism placed product bring civil action united_states recover money damages


Summary:
(This measure has not been amended since it was introduced. The summary has been expanded because action occurred on the measure.)

No Taxpayer Funding for Abortion and Abortion Insurance Full Disclosure Act of 2015

TITLE I--PROHIBITING FEDERALLY FUNDED ABORTIONS

(Sec. 101) This bill prohibits federal funds, including funds in the budget of the District of Columbia, from being expended for abortion or health coverage that includes coverage of abortion. Abortions are eligible for federal funding only in cases of rape or incest, or where a physical condition endangers a woman's life unless an abortion is performed. Currently, federal funding of abortion and health coverage that includes abortion is prohibited, with the same exceptions.

Health care provided in a federal health care facility or by a federal employee may not include abortions that are ineligible for federal funding.

TITLE II--APPLICATION UNDER THE AFFORDABLE CARE ACT

(Sec. 201) This bill amends the Internal Revenue Code to disallow premium assistance tax credits or health insurance tax credits for qualified health plans that cover abortions ineligible for federal funding.

This bill amends the Patient Protection and Affordable Care Act to require the Office of Personnel Management to ensure that multi-state qualified health plans offered on health insurance exchanges do not cover abortions ineligible for federal funding.

(Sec. 202) A qualified health plan's coverage of abortion must be disclosed to enrollees at the time of enrollment and must be prominently displayed in marketing materials, comparison tools, or any summary of benefits and coverage made available by the plan issuer, a health insurance exchange, or the Department of Health and Human Services. The amount of a plan's premium that is attributable to coverage of abortions ineligible for federal funding must be disclosed in material where the premium is disclosed.

measure amended introduced summary expanded action occurred measure taxpayer funding disclosure act title prohibiting federally funded abortions sec bill prohibits federal funds including funds budget district_of_columbia expended abortion health coverage includes coverage abortion abortions eligible federal funding cases rape incest physical condition endangers woman life abortion performed currently federal funding abortion health coverage includes abortion prohibited exceptions health care provided federal health care facility federal employee include abortions ineligible federal funding title application affordable care act sec bill amends internal_revenue_code disallow premium assistance tax credits health insurance tax credits qualified health plans cover abortions ineligible federal funding bill amends patient_protection affordable care act require office_of_personnel_management ensure multi state qualified health plans offered health insurance exchanges cover abortions ineligible federal funding sec qualified health plan coverage abortion disclosed enrollees time enrollment prominently displayed marketing materials comparison tools summary benefits coverage available plan issuer health insurance exchange department_of_health_and_human_services plan premium attributable coverage abortions ineligible federal funding disclosed material premium disclosed


Summary:
Pain-Capable Unborn Child Protection Act

 Amends the federal criminal code to prohibit any person from performing or attempting to perform an abortion except in conformity with this Act's requirements.

Requires the physician to first determine the probable post-fertilization age of the unborn child, or reasonably rely upon such a determination made by another physician, by making inquiries of the pregnant woman and performing such medical examinations and tests as a reasonably prudent physician would consider necessary.

Prohibits an abortion from being performed if the probable post-fertilization age of the unborn child is 20 weeks or greater, except: (1) where necessary to save the life of a pregnant woman whose life is endangered by a physical disorder, illness, or injury, excluding psychological or emotional conditions; (2) where the pregnancy is the result of rape against an adult woman and, at least 48 hours prior to the abortion, such woman has obtained counseling for the rape or medical treatment for the rape or an injury related to the rape; or (3) where the pregnancy is the result of rape or incest against a minor and the rape or incest has been reported prior to the abortion to a law enforcement agency or a government agency legally authorized to act on reports of child abuse. Requires the physician, prior to performing such an abortion, to place appropriate documentation in the patient's medical file of the receipt of such medical treatment or counseling or of the reporting of such rape or incest.

Permits a physician to terminate a pregnancy under such an exception only in the manner that provides the best opportunity for the unborn child to survive. Requires a physician performing an abortion under an exception provided by this Act, if (in reasonable medical judgement) the pain-capable unborn child has the potential to survive outside the womb, to ensure that a second physician trained in neonatal resuscitation is present and prepared to provide care to the child. Makes such requirements and the requirement to obtain an informed consent form inapplicable if compliance, in reasonable medical judgment, would pose a greater risk of: (1) the death of the pregnant woman; or (2) the substantial and irreversible physical impairment of a major bodily function, excluding psychological or emotional conditions, of the pregnant woman.

Requires, when a physician performs or attempts an abortion in accordance with this Act and the child is born alive, that:

 any health care practitioner present at the time humanely exercise the same professional skill, care, and diligence to preserve the life and health of the child as would be exercised for a child born alive at the same gestational age in the course of a natural birth; the child born alive be immediately transported and admitted to a hospital; and a health care practitioner or any employee of a hospital, a physician's office, or an abortion clinic who has knowledge of a failure to comply with these requirements immediately report the failure to an appropriate state or federal law enforcement agency. Requires the physician who intends to perform an abortion under one of this Act's exceptions to first obtain a signed informed consent authorization form, which shall be presented in person by the physician and which shall consist of:

 a statement by the physician indicating the probable post-fertilization age of the pain-capable unborn child; a statement that federal law allows an abortion after 20 weeks fetal age only if the mother's life is endangered by a physical disorder, illness, or injury when the pregnancy was the result of rape or incest against a minor; a statement that the abortion must be performed by the method most likely to allow the child to be born alive unless this would cause significant risk to the mother; a statement that in any case in which an abortion procedure results in a child born alive, federal law requires that child to be given every form of medical assistance that is provided to children spontaneously born prematurely, including transportation and admittance to a hospital; a statement that these requirements are binding upon the physician and all other medical personnel who are subject to criminal and civil penalties and that a woman on whom an abortion has been performed may take civil action if these requirements are not followed; and affirmation that each signer has filled out the informed consent form to the best of their knowledge and understands the information contained in the form. Requires the form to be: (1) signed in person by the woman seeking the abortion, the physician performing the abortion, and a witness; and (2) retained in the patient's medical file for six years from the later of the date of its creation or the date when it last was in effect.

Makes this Act's requirement for the exception, where the pregnancy is the result of rape against an adult woman, that the woman has obtained counseling or medical treatment for the rape at least 48 hours prior to the abortion inapplicable if the rape has been reported prior to the abortion to a law enforcement agency or Department of Defense victim assistance personnel.

Requires a physician who performs an abortion under an exception provided by this Act to comply with: (1) such applicable state laws regarding reporting requirements in cases of rape or incest that are in effect as the state's Attorney General may designate, and (2) any applicable state laws requiring parental involvement in a minor's decision to have an abortion.

Bars prosecution of a woman upon whom an abortion is performed in violation of this Act for violating or conspiring to violate this Act.

Authorizes: (1) a woman upon whom an abortion has been performed or attempted in violation of this Act to obtain appropriate relief in a civil action against any person who committed the violation, and (2) a parent of a minor upon whom an abortion has been performed or attempted under an exception and that was performed in violation of this Act to obtain such relief unless the pregnancy resulted from the plaintiff's criminal conduct. Defines "appropriate relief" in a civil action to include: (1) objectively verifiable money damages for all injuries, psychological and physical, occasioned by the violation; (2) statutory damages equal to three times the cost of the abortion; and (3) punitive damages. Directs the court to award a reasonable attorney's fee: (1) as part of the costs to a prevailing plaintiff in a civil action under this Act, and (2) in favor of the defendant if a defendant in a civil action prevails and the court finds that the plaintiff's suit was frivolous. Prohibits assessing damages, attorney fees, or other monetary relief against the woman upon whom the abortion was performed or attempted, except in the case of attorney fees for the defendant where the plaintiff's suit was frivolous.

Requires any physician who performs an abortion under this Act's exceptions to annually submit a summary of all such abortions to the National Center for Health Statistics. Directs the Center to annually issue a public report providing statistics by state for the previous year compiled from all of the summaries submitted to the Center.

Defines "abortion" to mean the use or prescription of any instrument, medicine, drug, or any other substance or device: (1) to intentionally kill an unborn child of a woman known to be pregnant; or (2) to intentionally terminate a pregnancy, with an intention other than to produce a live birth and preserve the life and health of the child after viability or to remove a dead unborn child.

pain capable unborn child protection act amends federal criminal code prohibit person performing attempting perform abortion conformity act requirements requires physician determine probable post fertilization age unborn child reasonably rely determination physician making inquiries pregnant woman performing medical examinations tests reasonably prudent physician consider necessary prohibits abortion performed probable post fertilization age unborn child weeks greater necessary save life pregnant woman life endangered physical disorder illness injury excluding psychological emotional conditions pregnancy result rape adult woman hours prior abortion woman obtained counseling rape medical treatment rape injury related rape pregnancy result rape incest minor rape incest reported prior abortion law enforcement agency government agency legally authorized act reports child abuse requires physician prior performing abortion place appropriate documentation patient medical file receipt medical treatment counseling reporting rape incest permits physician terminate pregnancy exception manner provides best opportunity unborn child survive requires physician performing abortion exception provided act reasonable medical pain capable unborn child potential survive outside ensure second physician trained neonatal resuscitation present prepared provide care child makes requirements requirement obtain informed consent form inapplicable compliance reasonable medical judgment pose greater risk death pregnant woman substantial irreversible physical impairment major bodily function excluding psychological emotional conditions pregnant woman requires physician performs attempts abortion accordance act child born alive health care practitioner present time humanely exercise professional skill care diligence preserve life health child exercised child born alive gestational age course natural birth child born alive immediately transported admitted hospital health care practitioner employee hospital physician office abortion clinic knowledge failure comply requirements immediately report failure appropriate state federal law enforcement agency requires physician intends perform abortion act exceptions obtain signed informed consent authorization form shall presented person physician shall consist statement physician indicating probable post fertilization age pain capable unborn child statement federal law allows abortion weeks fetal age mother life endangered physical disorder illness injury pregnancy result rape incest minor statement abortion performed method likely allow child born alive cause significant risk mother statement case abortion procedure results child born alive federal law requires child given form medical assistance provided children born prematurely including transportation admittance hospital statement requirements binding physician medical personnel subject criminal civil penalties woman abortion performed civil action requirements followed affirmation filled informed consent form best knowledge information contained form requires form signed person woman seeking abortion physician performing abortion witness retained patient medical file years later date creation date effect makes act requirement exception pregnancy result rape adult woman woman obtained counseling medical treatment rape hours prior abortion inapplicable rape reported prior abortion law enforcement agency department_of_defense victim assistance personnel requires physician performs abortion exception provided act comply applicable state laws reporting requirements cases rape incest effect state attorney general designate applicable state laws requiring parental involvement minor decision abortion bars prosecution woman abortion performed violation act violating conspiring violate act authorizes woman abortion performed attempted violation act obtain appropriate relief civil action person committed violation parent minor abortion performed attempted exception performed violation act obtain relief pregnancy resulted plaintiff criminal conduct defines appropriate relief civil action include objectively verifiable money damages injuries psychological physical violation statutory damages equal times cost abortion punitive damages directs court award reasonable attorney fee costs prevailing plaintiff civil action act favor defendant defendant civil action prevails court finds plaintiff suit frivolous prohibits assessing damages attorney fees monetary relief woman abortion performed attempted case attorney fees defendant plaintiff suit frivolous requires physician performs abortion act exceptions annually submit summary abortions national_center_for_health_statistics directs center annually issue public report providing statistics state previous year compiled summaries submitted center defines abortion mean use prescription instrument medicine drug substance device intentionally kill unborn child woman known pregnant intentionally terminate pregnancy intention produce live birth preserve life health child viability remove dead unborn child


Summary:
Cyber Privacy Fortification Act of 2015

Amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices of a security breach involving sensitive personally identifiable information.  Defines "sensitive personally identifiable information" as specified electronic or digital information.

Defines "security breach" as a compromise of the security, confidentiality, or integrity of computerized data that there is reason to believe has resulted in improper access to sensitive personally identifiable information.

Requires a person who owns or possesses data in electronic form containing a means of identification and who has knowledge of a major security breach of the system containing such data maintained by such person to provide prompt notice to the U.S. Secret Service or the Federal Bureau of Investigation.

Defines "major security breach" as any security breach that involves: (1) a means of identification pertaining to at least 10,000 individuals that is reasonably believed to have been acquired, (2) databases owned by the federal government, or (3) a means of identification of federal employees or contractors involved in national security matters or law enforcement.

Authorizes the Attorney General and any state attorney general to bring civil actions and obtain injunctive relief for violations of federal laws relating to data security.

Requires federal agencies as part of their rulemaking process to prepare and make available to the public privacy impact assessments that describe the impact of certain proposed and final agency rules on the privacy of individuals.

Sets forth authority for agencies to waive or delay certain privacy impact assessment requirements for emergencies and national security reasons.

Directs federal agencies to periodically review promulgated rules that have a significant privacy impact on individuals or a privacy impact on a substantial number of individuals. Requires agencies to consider whether each such rule can be amended or rescinded in a manner that minimizes any such impact while remaining in accordance with applicable statutes.

Provides access to judicial review to individuals adversely affected or aggrieved by final agency action on any such rule.

cyber privacy fortification act amends federal criminal code provide criminal penalties intentional failures provide required notices security breach involving sensitive personally identifiable information defines sensitive personally identifiable information specified electronic digital information defines security breach compromise security confidentiality integrity computerized data reason believe resulted improper access sensitive personally identifiable information requires person owns possesses data electronic form containing means identification knowledge major security breach system containing data maintained person provide prompt notice federal_bureau_of_investigation defines major security breach security breach involves means identification pertaining individuals reasonably believed acquired databases owned federal government means identification federal employees contractors involved national security matters law enforcement authorizes attorney general state attorney general bring civil actions obtain injunctive relief violations federal laws relating data security requires federal agencies rulemaking process prepare available public privacy impact assessments describe impact certain proposed final agency rules privacy individuals sets forth authority agencies waive delay certain privacy impact assessment requirements emergencies national security reasons directs federal agencies periodically review promulgated rules significant privacy impact individuals privacy impact substantial number individuals requires agencies consider rule amended rescinded manner minimizes impact remaining accordance applicable statutes provides access judicial review individuals adversely affected aggrieved final agency action rule


Summary:
Title X Abortion Provider Prohibition Act

Amends the Public Health Service Act to prohibit the Department of Health and Human Service (HHS) from providing federal family planning assistance to an entity unless the entity certifies that, during the period of assistance, the entity will not perform, and will not provide funds to any other entity that performs, an abortion. Excludes an abortion where: (1) the pregnancy is the result of rape or incest; or (2) a physician certifies that the woman suffered from a physical disorder, injury, or illness that would place the woman in danger of death unless an abortion is performed, including a condition caused by or arising from the pregnancy. Excludes hospitals that do not provide funds to non-hospital entities that perform abortions.

Requires HHS to provide Congress annually: (1) information on grantees who performed abortions under the exceptions, and (2) a list of entities to which grant funds are made available.

prohibit department_of_health_and_human_service hhs providing federal family planning assistance entity entity certifies period assistance entity perform provide funds entity performs abortion excludes abortion pregnancy result rape incest physician certifies woman suffered physical disorder injury illness place woman danger death abortion performed including condition caused arising pregnancy excludes hospitals provide funds non hospital entities perform abortions requires hhs provide congress annually information grantees performed abortions exceptions list entities grant funds available


Summary:
Every Child is a Blessing Act of 2014 [sic]

Prohibits recovery of damages in certain civil actions based on a claim that, but for the conduct of the defendant, a child, once conceived, would not or should not have been born.

Makes such prohibition applicable to claims based on a child's disability, defect, abnormality, race, sex, or other inborn characteristic.

Bars such prohibition from being construed to: (1) provide a defense against charges of intentional misrepresentation in state proceedings regulating the professional practices of health care providers and practitioners, (2) provide a defense in any criminal action, including cases of rape or incest, or (3) limit damages in cases where the conduct of the defendant caused personal injury or death to the child or gestational mother.

child act sic prohibits recovery damages certain civil actions based claim conduct defendant child conceived born makes prohibition applicable claims based child disability defect race sex inborn characteristic bars prohibition construed provide defense charges intentional misrepresentation state proceedings regulating professional practices health care providers practitioners provide defense criminal action including cases rape incest limit damages cases conduct defendant caused personal injury death child gestational mother


Summary:
Electronic Communications Privacy Act Amendments Act of 2015

Amends the federal criminal code to prohibit a provider of remote computing service or electronic communication service to the public from knowingly divulging to a governmental entity the contents of any communication that is in electronic storage or otherwise maintained by the provider, subject to exceptions.

Revises provisions under which the government may require a provider to disclose the contents of such communications. Eliminates the different requirements applicable under current law depending on whether such communications were: (1) stored for fewer than, or more than, 180 days by an electronic communication service; or (2) held by an electronic communication service as opposed to a remote computing service.

Requires the government to obtain a warrant from a court before requiring providers to disclose the content of such communications regardless of how long the communication has been held in electronic storage by an electronic communication service or whether the information is sought from an electronic communication service or a remote computing service.

Requires a law enforcement agency, within 10 days after receiving the contents of a customer's communication, or a governmental entity, within 3 days, to provide a customer whose communications were disclosed by the provider a copy of the warrant and a notice that such information was requested by, and supplied to, the government entity. Allows the government to request delays of such notifications.

Prohibits disclosure requirements that apply to providers from being construed to limit the government's authority to use an administrative or civil discovery subpoena to require: (1) an originator or recipient of an electronic communication to disclose the contents of such communication, or (2) an entity that provides electronic communication services to its employees or agents to disclose the contents of an electronic communication to or from such employee or agent if the communication is on an electronic communications system owned or operated by the entity.

Allows the government to apply for an order directing a provider, for a specified period, to refrain from notifying any other person that the provider has been required to disclose communications or records.

Requires a Government Accountability Office report regarding disclosures of customer communications and records under provisions: (1) as in effect before the enactment of this bill, and (2) as amended by this bill.

electronic communications privacy act amendments act amends federal criminal code prohibit provider remote computing service electronic communication service public knowingly divulging governmental entity contents communication electronic storage maintained provider subject exceptions revises provisions government require provider disclose contents communications eliminates different requirements applicable current law depending communications stored fewer days electronic communication service held electronic communication service opposed remote computing service requires government obtain warrant court requiring providers disclose content communications regardless long communication held electronic storage electronic communication service information sought electronic communication service remote computing service requires law enforcement agency days receiving contents customer communication governmental entity days provide customer communications disclosed provider copy warrant notice information requested supplied government entity allows government request delays notifications prohibits disclosure requirements apply providers construed limit government authority use administrative civil discovery subpoena require originator recipient electronic communication disclose contents communication entity provides electronic communication services employees agents disclose contents electronic communication employee agent communication electronic communications system owned operated entity allows government apply order directing provider specified period refrain notifying person provider required disclose communications records requires government accountability office report disclosures customer communications records provisions effect enactment bill amended bill


Summary:
Medicare Identity Theft Prevention Act of 2015

Amends title II (Old Age, Survivors and Disability Insurance) (OASDI) of the Social Security Act (SSA) to direct the Secretary of Health and Human Services to establish cost-effective procedures to ensure that: (1) a Social Security account number (or any derivative) is not displayed, coded, or embedded on the Medicare card issued to an individual entitled to benefits under part A (Hospital Insurance) of SSA title XVIII (Medicare) or enrolled under Medicare part B (Supplementary Medical Insurance); and (2) any other identifier displayed on such card is not identifiable as a Social Security account number (or any derivative).

amends title old age survivors disability insurance oasdi social security act ssa direct secretary health_and_human_services establish cost effective procedures ensure social_security account number derivative displayed coded embedded medicare card issued individual entitled benefits ssa title xviii medicare enrolled medicare supplementary_medical_insurance identifier displayed card identifiable social_security account number derivative


Summary:
Sanctity of Human Life Act

This bill declares that: (1) the right to life guaranteed by the Constitution is vested in each human and is the person's paramount and most fundamental right; (2) each human life begins with fertilization, cloning, or its functional equivalent, at which time every human has all legal and constitutional attributes and privileges of personhood; and (3) Congress, each state, the District of Columbia, and all U.S. territories have the authority to protect all human lives.

sanctity human life act bill declares right life guaranteed constitution vested human person paramount fundamental right human life begins fertilization cloning functional equivalent time human legal constitutional attributes privileges congress state district_of_columbia territories authority protect human lives


Summary:
Women's Health Protection Act of 2015

This bill prohibits any government from imposing on abortion services:

 a requirement that a medical professional perform specific tests or medical procedures; a requirement that the same clinician who performs a patient's abortion also perform additional tests, services or procedures; a limitation on an abortion provider's ability to prescribe or dispense drugs or provide services via telemedicine; a requirement or limitation concerning the physical plant, equipment, staffing, or hospital transfer arrangements of facilities where abortions are performed, or the credentials, hospital privileges, or status of personnel at those facilities; a requirement that, prior to obtaining an abortion, a patient make medically unnecessary in-person visits to any individual or entity; a limitation on medical training for abortion procedures; a prohibition prior to fetal viability; a prohibition after fetal viability when continuation of the pregnancy would pose a risk to the woman's life or health; a restriction on a woman's ability to obtain an immediate abortion when a delay would pose a risk to the woman's health; or a restriction on obtaining an abortion prior to fetal viability based on a woman's reasons or perceived reasons or that requires her to state her reasons before obtaining an abortion. A measure or action that is similar to a requirement or limitation listed above is prohibited if it singles out abortion services or makes abortion services more difficult to access and does not significantly advance women's health or the safety of abortion services.

bill prohibits government imposing abortion services requirement medical professional perform specific tests medical procedures requirement performs patient abortion perform additional tests services procedures limitation abortion provider ability prescribe dispense drugs provide services telemedicine requirement limitation concerning physical plant equipment staffing hospital transfer arrangements facilities abortions performed credentials hospital privileges status personnel facilities requirement prior obtaining abortion patient medically unnecessary person visits individual entity limitation medical training abortion procedures prohibition prior fetal viability prohibition fetal viability continuation pregnancy pose risk woman life health restriction woman ability obtain immediate abortion delay pose risk woman health restriction obtaining abortion prior fetal viability based woman reasons perceived reasons requires state reasons obtaining abortion measure action similar requirement limitation listed prohibited abortion services makes abortion services difficult access significantly advance women health safety abortion services


Summary:
Safe and Secure Federal Websites Act of 2015

This bill establishes security and privacy requirements for new federal websites that collect personally identifiable information (PII) (i.e., information that can be used to distinguish or trace the identity of an individual or that is linked or linkable to an individual).

(Sec. 2) A federal agency may not deploy or make available to the public a new federal PII website until the agency's chief information officer (CIO) certifies to Congress that the website is fully functional and secure. The CIO must make such certification within 90 days after enactment of this Act. After such 90-day period, any new federal PII website that has not been certified must be rendered inaccessible until certification is submitted.

The prohibition does not apply to a website that is: (1) operated entirely by an entity that is independent of the federal government, or (2) in a development or testing phase (beta website). The exemption for beta websites applies only if: (1) a member of the public may access PII-related portions of the website only after executing an agreement that acknowledges the risks involved; and (2) no agency compelled, enjoined, or otherwise provided incentives for a member of the public to access such website.

The bill defines a "new federal PII website" as a website that: (1) is operated by (or under contract with) an agency; (2) elicits, collects, stores, or maintains PII and is accessible to the public; and (3) is first made accessible to the public and collects or stores PII on or after October 1, 2012. The bill also sets forth requirements that must be met to deem a new federal PII website as "secure."

(Sec. 3) The Director of the Office of Management and Budget (OMB) must establish and oversee policies and procedures for federal agencies to follow in the event of a breach of information security involving the disclosure of PII, including: (1) notice, not later than 72 hours after discovery of a breach or possible breach, to individuals whose PII could be compromised; and (2) timely reporting to a federal cybersecurity center designated by the OMB and defined in this Act.

Agency heads must ensure that agency actions taken in response to a breach of information security involving the disclosure of PII comply with OMB policies and procedures established by this Act. The OMB must report to Congress, not later than March 1 of each year, on agency compliance with such policies and procedures.

A "federal cybersecurity center" is defined to include: (1) the Department of Defense Cyber Crime Center, (2) the Intelligence Community Incident Response Center, (3) the U.S. Cyber Command Joint Operations Center, (4) the National Cyber Investigative Task Force, (5) the Central Security Service Threat Operations Center of the National Security Agency, (6) the U.S. Computer Emergency Readiness Team, and (7) any center that the OMB determines is appropriate to carry out privacy breach notice and reporting requirements.

safe secure federal websites act bill establishes security privacy requirements new federal websites collect personally identifiable information pii information distinguish trace identity individual linked individual sec federal agency deploy available public new federal pii website agency chief information officer cio certifies congress website fully functional secure cio certification days enactment act day period new federal pii website certified rendered inaccessible certification submitted prohibition apply website operated entirely entity independent federal government development testing phase beta website exemption beta websites applies member public access pii related portions website executing agreement acknowledges risks involved agency compelled provided incentives member public access website bill defines new federal pii website website operated contract agency collects stores maintains pii accessible public accessible public collects stores pii october bill sets forth requirements met deem new federal pii website secure sec director office_of_management_and_budget omb establish oversee policies procedures federal agencies follow event breach information security involving disclosure pii including notice later hours discovery breach possible breach individuals pii compromised timely reporting federal cybersecurity center designated omb defined act agency heads ensure agency actions taken response breach information security involving disclosure pii comply omb policies procedures established act omb report congress later march year agency compliance policies procedures federal cybersecurity center defined include national cyber investigative task force national_security_agency center omb determines appropriate carry privacy breach notice reporting requirements


Summary:
Protecting Life in Funding Education Act or the PRO-LIFE Act

Amends the General Education Provisions Act to prohibit the provision of federal education funding to state or local educational agencies that make health services available to students through school-based health centers, unless those centers certify that they will not provide students with abortions, abortion-related materials or referrals, or directions to abortion services.

pro life act amends general_education_provisions_act prohibit provision federal education funding state local educational agencies health services available students school based health centers centers certify provide students abortions abortion related materials referrals directions abortion services


Summary:
Taxpayer Conscience Protection Act of 2015

 Directs each state that makes a Medicaid payment from federal funds during the fiscal year for any items or services furnished by an abortion provider to: (1) report to the Secretary of Health and Human Services (HHS) on all such payments, and (2) publish the report on a public Internet website of the state.

Requires an annual report to specified congressional committees on such reports, which shall also be published on a public HHS website.

taxpayer conscience protection act directs state makes medicaid payment federal funds fiscal year items services furnished abortion provider report secretary health_and_human_services hhs payments publish report public internet website state requires annual report specified congressional committees reports shall published public hhs website