Summary:
Achieving Less Excess in Regulation and Requiring Transparency Act of 2014 or the ALERRT Act of 2014 - Title I: All Economic Regulations Are Transparent Act - All Economic Regulations are Transparent Act of 2014 or the ALERT Act of 2014 - (Sec. 102) Requires the head of each federal agency to submit a monthly report to the Administrator of the Office of Information and Regulatory Affairs of the Office of Management and Budget (OMB) for each rule such agency expects to propose or finalize during the following year. Sets forth the required content of such reports, including: (1) a summary of the nature of the rule, (2) the objectives of and legal basis for issuance of the rule, (3) the stage of the rulemaking as of the date of submission, and (4) whether the rule is subject to periodic review as a rule with a significant economic impact.

Requires each agency head to submit a monthly report for any rule expected to be finalized during the following year for which the agency has issued a general notice of proposed rulemaking. Requires such reports to include an approximate schedule for completing action on the rule and an estimate of its cost and economic effects.

Requires the Administrator to make such monthly reports publicly available on the Internet.

Requires the Administrator to publish, not later than October 1 of each year, in the Federal Register: (1) information that the Administrator receives from each agency under this Act; (2) the number of rules and a list of each such rule that was proposed by each agency and each rule that was finalized by each agency; (3) the number of agency actions that repealed a rule, reduced the scope or cost of a rule, or accelerated the expiration date of a rule; (4) the total cost of all rules proposed or finalized; and (5) the number of rules for which an estimate of the cost of the rule was not available.

Requires the Administrator to make publicly available on the Internet, not later than October 1 of each year: (1) the analysis of the costs or benefits of each proposed or final rule issued by an agency for the previous year, (2) the docket number and regulation identifier number for each such rule, (3) the number of rules reviewed by OMB for the previous year, (4) the number of rules for which a review by the head of an agency was completed, (5) the number of rules submitted to the Comptroller General (GAO), and (6) the number of rules for which a resolution of disapproval was introduced in Congress.

Prohibits a rule from taking effect until the information required by this Act is posted on the Internet for not less than six months, unless the agency proposing the rule seeks an exemption under the Freedom of Information Act (FOIA) or the President determines by executive order that such rule is necessary because of an imminent threat to health or safety or other emergency, for the enforcement of criminal laws, for national security, or to implement an international trade agreement. Makes such requirement effective eight months after enactment of this Act.

Title II: Regulatory Accountability Act - Regulatory Accountability Act of 2014 - (Sec. 202) Defines "major rule" and "major guidance," for purposes of this Act, as a rule or guidance that is likely to impose: (1) an annual cost on the economy of $100 million or more, adjusted annually for inflation; (2) a major increase in costs or prices; (3) significant adverse effects on competition, employment, investment, productivity, innovation, or the ability of U.S. enterprises to compete with foreign-based enterprises; or (4) significant impacts on multiple sectors of the economy. Defines "high-impact rule" as a rule that is likely to have an annual cost on the economy of $1 billion or more, adjusted annually for inflation. Defines "negative-impact on jobs and wages rule" to mean a rule that is likely to reduce employment or wages.

(Sec. 203) Revises procedures for rulemaking under the Administrative Procedure Act (APA) to require a federal agency, in the rulemaking process, to make all preliminary and final factual determinations based on evidence and to consider: (1) the legal authority under which a rule may be proposed, (2) the specific nature and significance of the problem the agency may address with a rule, (3) whether existing rules have created or contributed to the problem the agency may address with a rule and whether such rules may be amended or rescinded, (4) any reasonable alternatives for a new rule, and (5) the potential costs and benefits associated with potential alternative rules.

Revises rulemaking notice requirements to require an agency to: (1) publish in the Federal Register advance notice of proposed rulemaking involving a major rule, a high-impact rule, a negative-impact of jobs and wages rule, or a rule that involves a novel legal or policy issue arising out of statutory mandates; (2) consult with the Administrator of the Office of Information and Regulatory Affairs of OMB before issuing a proposed rule and after the issuance of an advance notice of proposed rulemaking; (3) provide interested persons an opportunity to participate in the rulemaking process; (4) hold a hearing before the adoption of any high-impact rule; (5) expand requirements for the adoption of a final rule, including requiring that the agency adopt a rule only on the basis of the best evidence and at the least cost; and (6) grant any interested person the right to petition for the issuance, amendment, or repeal of a rule. Specifies the minimum amount of information that must be included in an advance notice.

Requires the Administrator to issue guidelines to promote coordination, simplification, and harmonization of agency rules during the rulemaking process

Exempts from such revised procedures rulemaking that concerns monetary policy proposed or implemented by the Board of Governors of the Federal Reserve System or the Federal Open Market Committee.

(Sec. 204) Imposes new requirements for issuing any major guidance or guidance that involves a novel legal or policy issue arising out of statutory mandates. Authorizes the Administrator to issue guidelines for agencies in issuing major guidance or other guidance.

(Sec. 205) Provides for electronic access to transcripts of testimony and exhibits and other papers filed in a rulemaking proceeding.

Requires the record of decision in a rulemaking proceeding to include information from a hearing under the Information Quality Act or on a high-impact rule.

Requires an agency to grant a petition for a hearing in the case of a major rule, unless the agency reasonably determines that a hearing would not advance consideration of the rule or would unreasonably delay completion of the rulemaking. Exempts from this requirement rulemakings that concern monetary policy proposed or implemented by the Board of Governors of the Federal Reserve System or the Federal Open Market Committee.

(Sec. 206) Provides that an agency's denial of an Information Quality Act petition, or a failure to grant or deny such petition within 90 days, is reviewable by a court as a final action. Allows immediate judicial review of interim rules, other than in cases involving national security interests, issued without compliance with the notice requirements of this Act.

(Sec. 207) Revises standards for the scope of judicial review of agency rulemaking to prohibit a court from deferring to an agency's: (1) interpretation of a rule if the agency did not comply with APA requirements, (2) determination of the costs and benefits or other economic or risk assessment if the agency failed to conform to guidelines on such determinations and assessments established by the Administrator, (3) determinations made in the adoption of an interim rule, or (4) guidance.

(Sec. 208) Defines "substantial evidence" for purposes of evaluating agency adjudications and for rulemaking under APA as such relevant evidence as a reasonable mind might accept as adequate to support a conclusion in light of the record considered as a whole, taking into account whatever in the record fairly detracts from the weight of the evidence relied upon by the agency to support its decision.

(Sec. 209) Provides that the amendments made by this Act to specified provisions of federal law shall not apply to any rulemakings pending or completed on the enactment date of this Act.

Title III: Regulatory Flexibility Improvements Act - Regulatory Flexibility Improvements Act of 2014 - (Sec. 302) Amends the Regulatory Flexibility Act of 1980 (RFA) to: (1) revise the definition of "rule" under such Act to exclude a rule pertaining to the protection of the rights of and benefits for veterans or a rule of particular (and not general) applicability relating to rates, wages, and other financial indicators; and (2) define "economic impact" with respect to a proposed or final rule as any direct economic effect on small entities from such rule and any indirect economic effect on small entities that is reasonably foreseeable and that results from such rule. Includes tribal organizations within the definition of "small governmental jurisdictions" for purposes of such Act.

Requires initial and final regulatory flexibility analyses to: (1) describe alternatives to a proposed rule that minimize any adverse significant economic impact or that maximize the beneficial significant economic impact on small entities, and (2) include revisions or amendments to a land management plan developed by the Secretary of Agriculture or the Secretary of the Interior under specified Acts.

Expands the applicability of RFA to interpretive rules involving internal revenue laws that impose a recordkeeping requirement, without regard to whether such requirement is imposed by statute or regulation.

 Revises the definition of "small organization" for purposes of RFA.

(Sec. 303) Requires each federal agency to include in its regulatory flexibility agenda a brief description of the sector of the North American Industrial Classification System that is affected by a proposed agency rule that is likely to have a significant economic impact on a substantial number of small entities.

(Sec. 304) Requires a detailed statement in an initial regulatory flexibility analysis to include: (1) an estimate of the additional cumulative economic impact of the proposed rule on small entities, and (2) a description of any disproportionate economic impact on small entities or a specific class of such entities.

Requires an agency, in developing an initial and final regulatory flexibility analysis, to provide: (1) a quantifiable or numerical description of the effects of a proposed or final rule and alternatives to such rule, or (2) a more general descriptive statement and a detailed statement explaining why quantification is not practicable or reliable.

(Sec. 305) Repeals provisions allowing a waiver or delay of the completion of an initial regulatory flexibility analysis. Requires the Chief Counsel for Advocacy of the Small Business Administration (SBA) to issue rules governing federal agency compliance with RFA requirements. Authorizes the Chief Counsel to modify or amend such rules, to intervene in agency adjudication relating to such rules, and to inform an agency of the impact of its rulemaking on small entities.

(Sec. 306) Revises requirements for agency notification of the SBA Chief Counsel for Advocacy prior to the publication of any proposed rule. Requires agencies to provide the Chief Counsel with: (1) all materials prepared or utilized in making the proposed rule, and (2) information on the potential adverse and beneficial economic impacts of the proposed rule on small entities.

(Sec. 307) Modifies requirements for the periodic review of agency rules affecting small entities to require publication of a plan for review and placement of such plan on the agency website not later than 180 days after the enactment of this Act.

(Sec. 308) Provides for judicial review of an agency final rule for compliance with RFA requirements after publication of such rule.

(Sec. 309) Amends the federal judicial code to grant exclusive jurisdiction to the U.S. Courts of Appeals to review all final rules promulgated by the SBA Chief Counsel for Advocacy governing agency compliance with RFA.

(Sec. 310) Amends the Small Business Act to authorize the SBA Chief Counsel for Advocacy to specify detailed definitions or standards by which a business may be determined to be a small business (size standard) for purposes of all enactments other than the Small Business Act or the Small Business Investment Act of 1958 (for which only the Administrator is authorized to specify small business size standards). Allows a party seeking judicial review of a rule which that includes a definition or size standard approved by the Chief Counsel for Advocacy to join the Chief Counsel as a party in an action for such review.

(Sec. 312) Amends the Small Business Regulatory Enforcement Fairness Act of 1996 to require federal agencies, in developing small entity compliance guides, to solicit input from affected small entities or associations of small entities.

(Sec. 313) Requires the Comptroller General, not later than 90 days after the enactment of this Act, to complete and publish a study that examines whether the SBA Chief Counsel for Advocacy has the capacity and resources to carry out the duties of Chief Counsel under this Act.

Title IV: Sunshine for Regulatory Decrees and Settlements Act - Sunshine for Regulatory Decrees and Settlements Act of 2014 - (Sec. 402) Defines a "covered civil action" as a civil action seeking to compel agency action and alleging that an agency is unlawfully withholding or unreasonably delaying an agency action relating to a regulatory action that would affect the rights of: (1) private persons other than the person bringing the action; or (2) a state, local, or tribal government. Defines a "covered consent decree" and a "covered settlement agreement" as: (1) a consent decree or settlement agreement entered into in a covered civil action, and (2) any other consent decree or settlement agreement that requires agency action relating to a regulatory action affecting the rights of private persons other than the person bringing the action or a state, local, or tribal government.

(Sec. 403) Requires an agency against which a covered civil action is brought to publish the notice of intent to sue and the complaint in a readily accessible manner and to provide interested parties an opportunity to intervene and to conduct settlement negotiations through mediation.

Requires an agency seeking to enter a covered consent decree or settlement agreement to publish such decree or agreement in the Federal Register and online not later than 60 days before it is filed with the court. Provides for public comment and public hearings on a proposed decree or agreement.

Requires the Attorney General or an agency head, if an agency is litigating a matter independently, to certify to the court that the Attorney General or the agency head approves of any proposed covered consent decree or settlement agreement.

Requires each federal agency to submit to Congress an annual report that includes: (1) the number, identity, and content of covered civil actions brought against, and covered consent decrees or settlement agreements entered against or into by, the agency; (2) a description of the statutory basis for each such covered consent decree or settlement agreement; and (3) an award of attorney fees or costs in a civil action resolved by a covered consent decree or settlement agreement.

(Sec. 404) Requires a court to grant de novo review to any motion filed by an agency to modify a previously-entered consent decree if the basis of such motion is that the terms of the decree are no longer fully in the public interest due to the agency's obligations to fulfill other duties or due to changed facts and circumstances.

(Sec. 405) Makes the provisions of this title applicable to any covered civil action filed, or any covered consent decree or settlement agreement proposed to a court, on or after the enactment of this title.

achieving excess regulation requiring transparency act act title economic regulations transparent act economic regulations transparent act alert act sec requires head federal agency submit monthly report administrator office_of_information_and_regulatory_affairs office_of_management_and_budget omb rule agency expects propose finalize following year sets forth required content reports including summary nature rule objectives legal basis issuance rule stage rulemaking date submission rule subject periodic review rule significant economic impact requires agency head submit monthly report rule expected finalized following year agency issued general notice proposed rulemaking requires reports include approximate schedule completing action rule estimate cost economic effects requires administrator monthly reports publicly available internet requires administrator publish later october year federal_register information administrator receives agency act number rules list rule proposed agency rule finalized agency number agency actions repealed rule reduced scope cost rule accelerated expiration date rule total cost rules proposed finalized number rules estimate cost rule available requires administrator publicly available internet later october year analysis costs benefits proposed final rule issued agency previous year docket number regulation identifier number rule number rules reviewed omb previous year number rules review head agency completed number rules submitted comptroller_general gao number rules resolution disapproval introduced congress prohibits rule taking effect information required act posted internet months agency proposing rule seeks exemption freedom information act foia president determines executive order rule necessary imminent threat health safety emergency enforcement criminal laws national security implement international trade agreement makes requirement effective months enactment act title regulatory accountability act regulatory accountability act sec defines major rule major guidance purposes act rule guidance likely impose annual cost economy million adjusted annually inflation major increase costs prices significant adverse effects competition employment investment productivity innovation ability enterprises compete foreign based enterprises significant impacts multiple sectors economy defines high impact rule rule likely annual cost economy billion adjusted annually inflation defines negative impact jobs wages rule mean rule likely reduce employment wages sec revises procedures rulemaking administrative procedure act apa require federal agency rulemaking process preliminary final factual determinations based evidence consider legal authority rule proposed specific nature significance problem agency address rule existing rules created contributed problem agency address rule rules amended rescinded reasonable alternatives new rule potential costs benefits associated potential alternative rules revises rulemaking notice requirements require agency publish federal_register advance notice proposed rulemaking involving major rule high impact rule negative impact jobs wages rule rule involves novel legal policy issue arising statutory mandates consult administrator office_of_information_and_regulatory_affairs omb issuing proposed rule issuance advance notice proposed rulemaking provide interested persons opportunity participate rulemaking process hold hearing adoption high impact rule expand requirements adoption final rule including requiring agency adopt rule basis best evidence cost grant interested person right petition issuance amendment repeal rule specifies minimum information included advance notice requires administrator issue guidelines promote coordination simplification harmonization agency rules rulemaking process exempts revised procedures rulemaking concerns monetary policy proposed implemented board_of_governors federal_reserve_system federal_open_market_committee sec imposes new requirements issuing major guidance guidance involves novel legal policy issue arising statutory mandates authorizes administrator issue guidelines agencies issuing major guidance guidance sec provides electronic access transcripts testimony exhibits papers filed rulemaking proceeding requires record decision rulemaking proceeding include information hearing information quality act high impact rule requires agency grant petition hearing case major rule agency reasonably determines hearing advance consideration rule unreasonably delay completion rulemaking exempts requirement rulemakings concern monetary policy proposed implemented board_of_governors federal_reserve_system federal_open_market_committee sec provides agency denial information quality act petition failure grant deny petition days reviewable court final action allows immediate judicial review interim rules cases involving national security interests issued compliance notice requirements act sec revises standards scope judicial review agency rulemaking prohibit court deferring agency interpretation rule agency comply apa requirements determination costs benefits economic risk assessment agency failed conform guidelines determinations assessments established administrator determinations adoption interim rule guidance sec defines substantial evidence purposes evaluating agency adjudications rulemaking apa relevant evidence reasonable mind accept adequate support conclusion light record considered taking account record fairly weight evidence relied agency support decision sec provides amendments act specified provisions federal law shall apply rulemakings pending completed enactment date act title iii regulatory flexibility improvements act regulatory flexibility improvements act sec amends regulatory flexibility act rfa revise definition rule act exclude rule pertaining protection rights benefits veterans rule particular general applicability relating rates wages financial indicators define economic impact respect proposed final rule direct economic effect small entities rule indirect economic effect small entities reasonably foreseeable results rule includes tribal organizations definition small governmental jurisdictions purposes act requires initial final regulatory flexibility analyses describe alternatives proposed rule minimize adverse significant economic impact maximize beneficial significant economic impact small entities include revisions amendments land management plan developed secretary agriculture secretary interior specified acts expands applicability rfa interpretive rules involving internal revenue laws impose recordkeeping requirement regard requirement imposed statute regulation revises definition small organization purposes rfa sec requires federal agency include regulatory flexibility agenda brief description sector north_american_industrial_classification_system affected proposed agency rule likely significant economic impact substantial number small entities sec requires detailed statement initial regulatory flexibility analysis include estimate additional cumulative economic impact proposed rule small entities description disproportionate economic impact small entities specific class entities requires agency developing initial final regulatory flexibility analysis provide quantifiable numerical description effects proposed final rule alternatives rule general descriptive statement detailed statement explaining quantification practicable reliable sec repeals provisions allowing waiver delay completion initial regulatory flexibility analysis requires chief counsel advocacy small_business_administration sba issue rules governing federal agency compliance rfa requirements authorizes chief counsel modify amend rules intervene agency adjudication relating rules inform agency impact rulemaking small entities sec revises requirements agency notification sba chief counsel advocacy prior publication proposed rule requires agencies provide chief counsel materials prepared utilized making proposed rule information potential adverse beneficial economic impacts proposed rule small entities sec modifies requirements periodic review agency rules affecting small entities require publication plan review placement plan agency website later days enactment act sec provides judicial review agency final rule compliance rfa requirements publication rule sec amends federal judicial code grant exclusive jurisdiction review final rules promulgated sba chief counsel advocacy governing agency compliance rfa sec amends small_business_act authorize sba chief counsel advocacy specify detailed definitions standards business determined small business size standard purposes enactments small business act small_business_investment_act administrator authorized specify small business size standards allows party seeking judicial review rule includes definition size standard approved chief counsel advocacy join chief counsel party action review sec amends small_business_regulatory_enforcement fairness act require federal agencies developing small entity compliance guides solicit input affected small entities associations small entities sec requires comptroller general later days enactment act complete publish study examines sba chief counsel advocacy capacity resources carry duties chief counsel act title sunshine regulatory decrees settlements act sunshine regulatory decrees settlements act sec defines covered civil action civil action seeking compel agency action alleging agency unlawfully withholding unreasonably delaying agency action relating regulatory action affect rights private persons person bringing action state local tribal government defines covered consent decree covered settlement agreement consent decree settlement agreement entered covered civil action consent decree settlement agreement requires agency action relating regulatory action affecting rights private persons person bringing action state local tribal government sec requires agency covered civil action brought publish notice intent sue complaint readily accessible manner provide interested parties opportunity intervene conduct settlement negotiations mediation requires agency seeking enter covered consent decree settlement agreement publish decree agreement federal_register online later days filed court provides public comment public hearings proposed decree agreement requires attorney general agency head agency litigating matter independently certify court attorney general agency head approves proposed covered consent decree settlement agreement requires federal agency submit congress annual report includes number identity content covered civil actions brought covered consent decrees settlement agreements entered agency description statutory basis covered consent decree settlement agreement award attorney fees costs civil action resolved covered consent decree settlement agreement sec requires court grant novo review motion filed agency modify previously entered consent decree basis motion terms decree longer fully public interest agency obligations fulfill duties changed facts circumstances sec makes provisions title applicable covered civil action filed covered consent decree settlement agreement proposed court enactment title


Summary: Schoolchildren's Health Protection Act - Amends the General Education Provisions Act to prohibit the provision of federal education funding to state or local educational agencies that: (1) provide, or permit the provision of, postcoital emergency contraception or prescriptions for such contraception on the premises of elementary or secondary schools; or (2) contract with a school-based health center to provide students with health services, unless the center agrees to deny students postcoital emergency contraception or prescriptions for such contraception pursuant to the contract.

general education provisions act prohibit provision federal education funding state local educational agencies provide permit provision emergency contraception prescriptions contraception premises elementary secondary schools contract school based health center provide students health services center agrees deny students emergency contraception prescriptions contraception pursuant contract


Summary:
Taxpayer Conscience Protection Act of 2013 - Directs each state that makes a Medicaid payment from federal funds during the fiscal year for any items or services furnished by an abortion provider to: (1) report to the Secretary of Health and Human Services (HHS) on all such payments, and (2) publish the report on a public Internet website of the state.

Requires an annual report to specified congressional committees on such reports, which shall also be published on a public Internet HHS website.

taxpayer conscience protection act directs state makes medicaid payment federal funds fiscal year items services furnished abortion provider report secretary health_and_human_services hhs payments publish report public internet website state requires annual report specified congressional committees reports shall published public internet hhs website


Summary: Health Information Privacy Protection Act of 2013 - Prohibits the enrollment of any individual in a qualified health plan offered in a state through an American Health Benefit Exchange under the Patient Protection and Affordable Care Act until the state certifies to the Secretary of Health and Human Services (HHS), and the Secretary certifies to Congress, that the state has in place standards and a process to protect the personal information (including Social Security numbers and financial information) of those being enrolled through the Exchange.

prohibits enrollment individual qualified health plan offered state american_health_benefit_exchange patient_protection affordable care act state certifies secretary health_and_human_services hhs secretary certifies congress state place standards process protect personal information including social_security numbers financial information enrolled exchange


Summary:
Abortion Insurance Full Disclosure Act of 2013 - Amends the Patient Protection and Affordable Care Act, with respect to abortion coverage in qualified plans offered through a Health Benefit Exchange, to modify the notice rules to require that:

 in the case of services regarding abortions both for which public funding is prohibited and allowed, the extent of coverage shall be prominently displayed in any marketing or advertising materials, comparison tools, or summary of benefits and coverage explanation made available by the issuer of the plan, by an Exchange, or by the Secretary of Health and Human Services (HHS), including information made available through an Internet portal or Exchange; and in the case of abortions for which public funding is prohibited and where the premium for the plan is disclosed, the surcharge attributable to such services, consisting of an amount equal to the actuarial value of the coverage, shall be disclosed and identified separately.

abortion insurance disclosure act amends patient protection affordable care act respect abortion coverage qualified plans offered modify notice rules require case services abortions public funding prohibited allowed extent coverage shall prominently displayed marketing advertising materials comparison tools summary benefits coverage explanation available issuer plan exchange secretary health_and_human_services hhs including information available internet portal exchange case abortions public funding prohibited premium plan disclosed surcharge attributable services consisting equal actuarial value coverage shall disclosed identified separately


Summary:
Security Before Access Act of 2013 - Amends the Public Health Service Act, with respect to patient navigator services, to require recipients of grants for the development and operation of demonstration programs to implement procedures developed under this Act to protect the privacy of personally identifiable information (PII).

Requires procedures specified by the Secretary of Health and Human Services (HHS) to include at least those that:

 require for access to PII relating to an individual the express written consent of that individual; condition access by a certified application counselor, health insurance navigator, or non-navigator assistance personnel upon a criminal background and fingerprint check; and require the meeting of educational and licensure requirements that are identical or comparable to those currently applicable to health insurance agents and brokers within the state in which they seek to assist consumers. Prohibits a grant recipient from collecting PII until the Comptroller General (GAO) certifies to Congress that HHS and any other relevant federal agencies have implemented all appropriate and necessary actions to safeguard the information of individuals seeking enrollment in a health plan through a health insurance Exchange and to protect them from fraud and abuse.

Provides procedures for development of guidance concerning liability, determinations of liable parties, and determinations of whether entities described in this Act are required to obtain professional liability coverage.

Imposes criminal penalties for unauthorized access, including under the Internal Revenue Code in cases involving consumer tax return information. Requires the Secretary to permanently disqualify an individual with a criminal background or otherwise in violation of this Act from any further involvement in consumer assistance activities required under the patient navigator provisions or the Patient Protection and Affordable Care Act (PPACA). Allows the disqualification and rescission of federal and Exchange-generated funds from the entity that employs or contracts with such an individual. Relieves consumers from responsibility for failure to meet a requirement under PPACA for obtaining qualified health insurance coverage through an Exchange unless the Secretary has demonstrated with reasonable certainty that effective and comprehensive PII protection is in place prior to any consumer disclosure for health insurance enrollment purposes.

security access act amends public_health_service_act respect patient navigator services require recipients grants development operation demonstration programs implement procedures developed act protect privacy personally identifiable information pii requires procedures specified secretary health_and_human_services hhs include require access pii relating individual express written consent individual condition access certified application counselor health insurance navigator non navigator assistance personnel criminal background fingerprint check require meeting educational licensure requirements identical comparable currently applicable health insurance agents brokers state seek assist consumers prohibits grant recipient collecting pii comptroller_general gao certifies congress hhs relevant federal agencies implemented appropriate necessary actions safeguard information individuals seeking enrollment health plan health insurance exchange protect fraud abuse provides procedures development guidance concerning liability determinations liable parties determinations entities described act required obtain professional liability coverage imposes criminal penalties unauthorized access including internal revenue code cases involving consumer tax return information requires secretary permanently disqualify individual criminal background violation act involvement consumer assistance activities required patient navigator provisions patient_protection affordable care act ppaca allows disqualification rescission federal exchange generated funds entity employs contracts individual relieves consumers responsibility failure meet requirement ppaca obtaining qualified health insurance coverage exchange secretary demonstrated reasonable certainty effective comprehensive pii protection place prior consumer disclosure health insurance enrollment purposes


Summary:
State Secrets Protection Act - Declares that in any civil action brought in federal or state court, the government has a privilege to refuse to give information and to prevent any person from giving information only if the government shows that public disclosure of the information that the government seeks to protect would be reasonably likely to cause significant harm to the national defense or the diplomatic relations of the United States.

Requires the court to take steps, which may include in camera and ex parte hearings and other security procedures, to protect sensitive information that comes before it.

Sets forth the court's authority regarding the participation of counsel, appointment of a guardian ad litem to represent an absent litigant's interests, and the disclosure of information when it presents a risk of harm. Provides for court-ordered presentation of adequate or nonprivileged substitutes (redacted copies, summary of information, stipulation of facts) for privileged information.

Allows the government to: (1) assert the privilege in connection with any claim in a civil action to which it is a party, or (2) intervene in a civil action to which it is not a party in order to do so.

Provides that once the government has asserted the privilege, and before the court makes any determinations, the court shall: (1) undertake a preliminary review of the information in question, and (2) provide the government an opportunity to seek protective measures under this Act.

Establishes procedures and a standard for assessing the privilege claim.

Requires the court, if it determines that the privilege is not validly asserted, to issue appropriate orders regarding the disclosure of the information to a nongovernmental party and its admission at trial, with the right to an interlocutory appeal for any such orders. Prohibits such disclosure or admission if the privilege is determined valid.

Grants the courts of appeal jurisdiction of an appeal from a decision or order of a district court determining that the state secrets privilege is not validly asserted, sanctioning a refusal to provide an adequate or nonprivileged substitute, or refusing protective steps sought by the government pending the resolution of the claim of state secrets privilege.

state secrets protection act declares civil action brought federal state court government privilege refuse information prevent person giving information government shows public disclosure information government seeks protect reasonably likely cause significant harm national defense diplomatic relations united_states requires court steps include camera parte hearings security procedures protect sensitive information comes sets forth court authority participation counsel appointment guardian litem represent absent interests disclosure information presents risk harm provides court ordered presentation adequate substitutes redacted copies summary information stipulation facts privileged information allows government assert privilege connection claim civil action party intervene civil action party order provides government asserted privilege court makes determinations court shall undertake preliminary review information question provide government opportunity seek protective measures act establishes procedures standard assessing privilege claim requires court determines privilege validly asserted issue appropriate orders disclosure information nongovernmental party admission trial right interlocutory appeal orders prohibits disclosure admission privilege determined valid grants courts appeal jurisdiction appeal decision order district court determining state secrets privilege validly asserted sanctioning refusal provide adequate substitute refusing protective steps sought government pending resolution claim state secrets privilege


Summary:
Directs the Secretary of Health and Human Services (HHS) to require an entity designated by or awarded funds by a health care exchange for the operation of a Navigator program under the Patient Protection and Affordable Care Act, to facilitate enrollment in health plans, or to advocate for enrolling certain populations to certify (and periodically recertify) that it has in place appropriate policies and safeguards: (1) to protect any personally identifiable information and financial information, and (2) prohibiting employment of individuals who have been convicted of identity fraud or theft offenses or a dishonesty or breach of trust felony involving insurance.

 Requires the Secretary to disqualify an entity in violation of such policies from eligibility for designation and receipt of funds under the exchange assistance provisions and to certify compliance with this Act to Congress annually.

directs secretary health_and_human_services hhs require entity designated awarded funds health care exchange operation navigator program patient_protection affordable care act facilitate enrollment health plans advocate enrolling certain populations certify periodically recertify place appropriate policies safeguards protect personally identifiable information financial information prohibiting employment individuals convicted identity fraud theft offenses breach trust felony involving insurance requires secretary disqualify entity violation policies eligibility designation receipt funds exchange assistance provisions certify compliance act congress annually


Summary:
Do Not Track Kids Act of 2013 - Amends the Children's Online Privacy Protection Act of 1998 to apply the prohibitions against collecting personal information from children to online applications and mobile applications directed to children. Establishes additional privacy protections against the collection of personal or geolocation information from children and minors.

Revises the definition of:

 "operator" to include online and mobile applications (currently, only Internet websites and online services) and to make such definition apply specifically to operators and providers of such websites, services, or applications who, for commercial purposes, in interstate or foreign commerce: (1) collect or maintain, directly or through a service provider, personal information from or about their users; (2) allow another person to collect such personal information; or (3) allow users of such websites, services, or applications to publicly disclose personal information; and "disclosure" as the release of personal information (currently, the release of personal information collected from a child in identifiable form). Requires verifiable parental consent, under specified circumstances, for the collection, use, or disclosure of personal information of a child, including certain online contact information collected in response to a specific request from a child when such information is used to contact a different child.

Prohibits, without verifiable parental consent in the case of a child or without consent of the minor in the case of a minor, an operator of a website, online service, online application, or mobile application directed to children or minors, or an operator having actual knowledge that personal information being collected is from children or minors, from: (1) using, disclosing to third parties, or compiling personal information collected from children or minors for targeted marketing purposes; and (2) collecting geolocation information in a manner that violates the regulations prescribed under this Act.

Defines a "minor" as an individual over the age of 12 and under the age of 16.

Prohibits an operator from discontinuing service provided to a child or minor on the basis of a refusal, by the child's parent or the minor, to permit the further use or maintenance in retrievable form, or future collection, of certain personal or geolocation information from such individuals, to the extent that the operator is capable of providing such service without such information.

Requires an operator of a website, online service, online application, or mobile application directed to children or minors to treat all users as children or minors for purposes of this Act, except as permitted by regulation. Prohibits an operator of a website, online service, or such applications directed to minors from collecting personal information from minors unless such operator has adopted, and complies with, a Digital Marketing Bill of Rights for Teens that is consistent with the Fair Information Practices Principles established by this Act. Requires the Federal Trade Commission (FTC) to promulgate regulations that require operators to implement mechanisms that permit a user to erase content submitted by such user that is publicly available through such websites, services, or applications and that contains or displays personal information of children or minors.

Sets forth enforcement provisions.

track kids act amends children online privacy protection act apply prohibitions collecting personal information children online applications mobile applications directed children establishes additional privacy protections collection personal geolocation information children minors revises definition operator include online mobile applications currently internet websites online services definition apply specifically operators providers websites services applications commercial purposes interstate foreign commerce collect maintain directly service provider personal information users allow person collect personal information allow users websites services applications publicly disclose personal information disclosure release personal information currently release personal information collected child identifiable form requires verifiable parental consent specified circumstances collection use disclosure personal information child including certain online contact information collected response specific request child information contact different child prohibits verifiable parental consent case child consent minor case minor operator website online service online application mobile application directed children minors operator having actual knowledge personal information collected children minors disclosing parties compiling personal information collected children minors targeted marketing purposes collecting geolocation information manner violates regulations prescribed act defines minor individual age age prohibits operator discontinuing service provided child minor basis refusal child parent minor permit use maintenance retrievable form future collection certain personal geolocation information individuals extent operator capable providing service information requires operator website online service online application mobile application directed children minors treat users children minors purposes act permitted regulation prohibits operator website online service applications directed minors collecting personal information minors operator adopted complies digital_marketing_bill_of_rights_for_teens consistent fair_information_practices_principles established act requires federal_trade_commission ftc promulgate regulations require operators implement mechanisms permit user erase content submitted user publicly available websites services applications contains displays personal information children minors sets forth enforcement provisions


Summary:
Reasonable Expectation of American Privacy Act of 2013 or the REAP Act of 2013 - Amends the Electronic Communications Privacy Act of 1986 to prohibit a provider of electronic communication service or remote computing service to the public from knowingly divulging subscriber or customer password information to any person or entity.

Provides exceptions from such prohibition to authorize such providers to disclose password information if it is:

 required by the government pursuant to a warrant; divulged with the customer's consent; incident to the rendition of the service or to the protection of the rights or property of the service provider; provided to the National Center for Missing and Exploited Children; or divulged to the government if the provider believes that an emergency involving danger of death or serious physical injury requires disclosure without delay of password information relating to the emergency. Revises procedures under which the government may require such providers to disclose the contents of wire or electronic communications. Eliminates the different requirements applicable under current law depending on whether such communications were: (1) stored for fewer than, or more than, 180 days by an electronic communication service; or (2) held by an electronic communication service or a remote computing service.

 Requires the government to obtain a warrant from a court to require such providers to disclose the content of such communications with the same standards applying regardless of how long the communication has been held in electronic storage by an electronic communication service or whether the information is sought from an electronic communication service or a remote computing service. (Currently, when such communications have been stored for more than 180 days by an electronic communication service, or for any period of time by a remote computing service, the government may obtain the contents without required notice to the customer or subscriber when using a warrant; with prior notice or delayed notice using an administative, grand jury, or trial subpoena; or with prior notice or delayed notice under a court order when there are reasonable grounds to believe the contents are relevant and material to an ongoing criminal investigation.)

Permits the government to require the disclosure of customer or subscriber password information under similar warrant procedures.

Prohibits password information from being included in a request by the Federal Bureau of Investigation (FBI) for subscriber information, toll billing information, or electronic communication transactional records for counterintelligence purposes.

Amends the Foreign Intelligence Surveillance Act of 1978 (FISA) to exclude password information from the categories of tangible things (commonly referred to as business records) that the FBI may request in an application to a FISA court for a production order in an investigation to obtain foreign intelligence information not concerning a U.S. person or to protect against international terrorism or clandestine intelligence activities.

reasonable expectation american privacy act reap act amends electronic communications privacy act prohibit provider electronic communication service remote computing service public knowingly divulging subscriber customer password information person entity provides exceptions prohibition authorize providers disclose password information required government pursuant warrant customer consent incident service protection rights property service provider provided national_center_for_missing exploited_children government provider believes emergency involving danger death physical injury requires disclosure delay password information relating emergency revises procedures government require providers disclose contents wire electronic communications eliminates different requirements applicable current law depending communications stored fewer days electronic communication service held electronic communication service remote computing service requires government obtain warrant court require providers disclose content communications standards applying regardless long communication held electronic storage electronic communication service information sought electronic communication service remote computing service currently communications stored days electronic communication service period time remote computing service government obtain contents required notice customer subscriber warrant prior notice delayed notice grand jury trial subpoena prior notice delayed notice court order reasonable grounds believe contents relevant material ongoing criminal investigation permits government require disclosure customer subscriber password information similar warrant procedures prohibits password information included request federal_bureau_of_investigation fbi subscriber information toll billing information electronic communication transactional records counterintelligence purposes amends foreign intelligence surveillance act fisa exclude password information categories tangible things commonly referred business records fbi request application fisa court production order investigation obtain foreign intelligence information concerning person protect international terrorism clandestine intelligence activities


Summary:
Parental Notification and Intervention Act of 2013 - Prohibits any person or organization in or affecting interstate or foreign commerce, or who solicits or accepts federal funds, from performing, permitting facilities to be used to perform, or assisting in the performance of an abortion on an unemancipated minor unless: (1) written notification is provided to the parents of the minor informing them that an abortion has been requested, unless there is clear and convincing evidence of physical abuse of the minor by such parent; (2) there is compliance with a 96-hour waiting period after any required notice has been received by the parents; and (3) there is compliance with any injunction granted by a federal district court if a notified parent initiates a judicial intervention process to enjoin the abortion. Prescribes penalties of not more than a $100,000 fine and/or imprisonment for not more than one year for each willful violation.

Provides for an exception from such parental notification requirements if a physician (other than the physician with principal responsibility for making the decision to perform the abortion) determines that: (1) a medical emergency exists that would result in the minor's death if her condition were not immediately treated, even though the treatment may result in the death of her unborn child; (2) parental notification is not possible as a result of the emergency; and (3) certifications regarding compliance with such rules and the reasons upon which such determinations are based have been entered in the minor's medical records. Requires parental notification through certified mail or personal delivery. Defines "parent" to include any legal guardian of an unemancipated minor. Authorizes a notified parent to bring an action in federal court which shall enjoin the abortion: (1) until the court's judgment is final, or (2) permanently unless the court determines that granting such relief would be unlawful. Prohibits this Act from being construed to preempt any state law that establishes, implements, or continues in effect greater parental notification requirements or intervention rights regarding abortion.

Civil rights and liberties, minority issues

parental notification intervention act prohibits person organization affecting interstate foreign commerce solicits accepts federal funds performing permitting facilities perform assisting performance abortion unemancipated minor written notification provided parents minor informing abortion requested clear convincing evidence physical abuse minor parent compliance hour waiting period required notice received parents compliance injunction granted federal district court notified parent initiates judicial intervention process enjoin abortion prescribes penalties fine imprisonment year willful violation provides exception parental notification requirements physician physician principal responsibility making decision perform abortion determines medical emergency exists result minor death condition immediately treated treatment result death unborn child parental notification possible result emergency certifications compliance rules reasons determinations based entered minor medical records requires parental notification certified mail personal delivery defines parent include legal guardian unemancipated minor authorizes notified parent bring action federal court shall enjoin abortion court judgment final permanently court determines granting relief unlawful prohibits act construed preempt state law establishes implements continues effect greater parental notification requirements intervention rights abortion


Summary:
Protecting Education Privacy Act - Amends provisions of the Family Educational Rights and Privacy Act of 1974 that prohibit the Department of Education from funding educational agencies or institutions that release student educational records (or personally identifiable information other than certain directory information) to any individual, agency, or organization without written parental consent.

Expands the list of individuals exempt from such prohibitions (thereby permitting the educational agencies or institutions participating in a Department of Education program to release records or identifiable information to such individuals without parental consent) to include authorized representatives of local educational authorities.

Defines "authorized representative," for purposes of determining the individuals authorized to access student records in specified circumstances, as an individual who is: (1) designated by the Comptroller General (GAO), Secretary of Education, or state or local educational authorities; and (2) under the direct control, as a contractor or employee, of such officials.

Prohibits students' educational records or personally identifiable information from being: (1) released by an authorized representative to any individual, agency, or organization, other than the official who has direct control over such representative; or (2) shared, without the written parental consent, for the development of commercial products or services.

Repeals Department of Education regulations that define "authorized representative," "early childhood education program," and "education program." Prohibits the Secretary from promulgating or enforcing any regulation that defines such programs.

provisions family_educational_rights_and_privacy_act prohibit department_of_education funding educational agencies institutions release student educational records personally identifiable information certain directory information individual agency organization written parental consent expands list individuals exempt prohibitions permitting educational agencies institutions participating department_of_education program release records identifiable information individuals parental consent include authorized representatives local educational authorities defines authorized representative purposes determining individuals authorized access student records specified circumstances individual designated comptroller_general gao secretary education state local educational authorities direct control contractor employee officials prohibits students educational records personally identifiable information released authorized representative individual agency organization official direct control representative shared written parental consent development commercial products services repeals department education regulations define authorized representative early childhood education program education program prohibits secretary promulgating enforcing regulation defines programs


Summary:
Safe and Secure Federal Websites Act of 2014 - (Sec. 2) Prohibits a federal agency from deploying or making available to the public a new federal personally identifiable information website (new Federal PII Website) until the chief information officer of the agency submits a certification to Congress that the website is fully functional and secure, as those terms are defined by this Act. Defines "new Federal PII website" as a website that: (1) is operated by (or under contract with) an agency; (2) elicits, collects, stores, or maintains personally identifiable information (i.e., information that can be used to identify an individual, such as a social security number, a date and place of birth, a mother's maiden name, biometric records, or other information linked to an individual); and (3) is first made accessible to the public and collects or stores personally identifiable information on or after October 1, 2012.

Exempts beta websites designed for testing and development if users execute an agreement acknowledging the risks involved.

(Sec. 3) Directs the Director of the Office of Management and Budget (OMB) to establish and oversee policies and procedures for federal agencies to follow in the event of a breach of information security involving the disclosure of personally identifiable information, including: (1) notice, not later than 72 hours after discovery of a breach or possible breach, to individuals whose personally identifiable information could be compromised as a result of such breach; (2) timely reporting to a federal cyber security center designated by this Act; and (3) any additional actions that the Director finds necessary and appropriate.

Requires: (1) agency heads to ensure that agency actions taken in response to a breach comply with OMB policies and procedures established by this Act; and (2) the OMB Director to report to Congress, not later than March 1 of each year, on agency compliance with such policies and procedures.

safe secure federal websites act sec prohibits federal agency deploying making available public new federal personally identifiable information website new federal pii website chief information officer agency submits certification congress website fully functional secure terms defined act defines new website website operated contract agency collects stores maintains personally identifiable information information identify individual social security number date place birth mother maiden biometric records information linked individual accessible public collects stores personally identifiable information october exempts beta websites designed testing development users execute agreement acknowledging risks involved sec directs director office_of_management_and_budget omb establish oversee policies procedures federal agencies follow event breach information security involving disclosure personally identifiable information including notice later hours discovery breach possible breach individuals personally identifiable information compromised result breach timely reporting federal cyber security center designated act additional actions director finds necessary appropriate requires agency heads ensure agency actions taken response breach comply omb policies procedures established act omb director report congress later march year agency compliance policies procedures


Summary:
Personal Health Information Protection Act - Makes it unlawful for any officer or employee of the federal government to: (1) willfully make an unauthorized disclosure of personally identifiable protected health information, or (2) conspire to make such an unauthorized disclosure.

Makes any person who violates this Act or who willfully aids, abets, counsels, induces, or procures such a violation liable to any person whose personally identifiable covered information has been disclosed.

personal health information protection act makes unlawful officer employee federal government willfully unauthorized disclosure personally identifiable protected health information conspire unauthorized disclosure makes person violates act willfully aids abets induces violation liable person personally identifiable covered information disclosed


Summary:
Personal Financial Information Protection Act - Makes it unlawful for any officer or employee of the federal government to: (1) willfully make an unauthorized disclosure of personally identifiable covered information, or (2) conspire to make such an unauthorized disclosure. Defines "personally identifiable covered information" as any information contained in a financial record if such information includes the name, social security number, street address, telephone number, or electronic mail address of, or other personally identifiable information concerning, a consumer.

Makes any person who violates this Act or who willfully aids, abets, counsels, induces, or procures such a violation liable to any person whose personally identifiable covered information has been disclosed.

personal financial information protection act makes unlawful officer employee federal government willfully unauthorized disclosure personally identifiable covered information conspire unauthorized disclosure defines personally identifiable covered information information contained financial record information includes social security number street address telephone number electronic mail address personally identifiable information concerning consumer makes person violates act willfully aids abets induces violation liable person personally identifiable covered information disclosed


Summary:
One Hour Notification Act of 2013 or the OH No Act of 2013 - Directs the Secretary of Health and Human Services (HHS), following the discovery of a breach of the personally identifiable information of an individual that is maintained, submitted to, or submitted by a system maintained by an American Health Benefit Exchange under the Patient Protection and Affordable Care Act, to notify: (1) such individual within one hour after the Secretary is notified of such breach, and (2) specified congressional committees about such breach in a timely manner.

Requires the Secretary to report to Congress annually on: (1) all such breaches that occurred within the past year; and (2) the security rules, standards, and risk mitigation strategies implemented by the Secretary to prevent such breaches.

hour notification act act directs secretary health_and_human_services hhs following discovery breach personally identifiable information individual maintained submitted submitted system maintained american_health_benefit_exchange patient_protection affordable care act notify individual hour secretary notified breach specified congressional committees breach timely manner requires secretary report congress annually breaches occurred past year security rules standards risk mitigation strategies implemented secretary prevent breaches


Summary:
(This measure has not been amended since it was introduced. The summary of that version is repeated here.)

Health Exchange Security and Transparency Act of 2014 - Requires the Secretary of Health and Human Services (HHS) to notify an individual within two business days after discovery of any breach of security of any system maintained by a health care exchange established under the Patient Protection and Affordable Care Act which is known to have resulted in the theft of or unlawful access to the individual's personally identifiable information.

measure amended introduced summary version repeated transparency_act requires secretary health_and_human_services hhs notify individual business days discovery breach security system maintained health care exchange established patient_protection affordable care act known resulted theft unlawful access individual personally identifiable information


Summary: Before Registering for Obamacare, Window Shop Exchanges Act of 2014 or the BROWSE Act of 2014 - Prohibits an American Health Benefit Exchange established pursuant to the Patient Protection and Affordable Care Act from: (1) requesting personal information of an individual through a website maintained by such Exchange unless such information is necessary to calculate an estimated premium for such individual and such individual has access to compare health care plans offered through such Exchange; or (2) providing to an individual, through such a website, an estimated premium if such premium is calculated prior to the submission by the individual of personal information through the website. Requires such an Exchange to require that any employee who has access to personal information: (1) passes a criminal background check, (2) has not been convicted of a crime, and (3) enters into an agreement not to disclose any such personal information to anyone not authorized to access it.

registering obamacare window shop exchanges act act prohibits american_health_benefit_exchange established pursuant patient_protection affordable care act requesting personal information individual website maintained exchange information necessary calculate estimated premium individual individual access compare health care plans offered exchange providing individual website estimated premium premium calculated prior submission individual personal information website requires exchange require employee access personal information passes criminal background check convicted crime enters agreement disclose personal information authorized access


Summary:
No Taxpayer Funding for Abortion and Abortion Insurance Full Disclosure Act of 2014 - Prohibits the expenditure of funds authorized or appropriated by federal law or funds in any trust fund to which funds are authorized or appropriated by federal law (federal funds) for any abortion. (Currently, federal funds cannot be used for abortion services, except in cases involving rape, incest, or life endangerment.)

Prohibits federal funds from being used for any health benefits coverage that includes coverage of abortion (thus making permanent existing federal policies).

Prohibits the inclusion of abortion in any health care service furnished by a federal or District of Columbia health care facility or by any physician or other individual employed by the federal government or the District.

Excludes an abortion from such prohibitions if: (1) the pregnancy is the result of rape or incest; or (2) the woman suffers from a physical disorder, injury, or illness, including a life-endangering physical condition caused by or arising from the pregnancy itself, that would place her in danger of death unless an abortion is performed, as certified by a physician.

Applies such prohibitions to District of Columbia funds.

Amends the Internal Revenue Code to exclude from the definition of "qualified health plan" after December 31, 2014, for purposes of the refundable tax credit for premium assistance for such plans, any plan that includes coverage for abortion.

Excludes from the definition of "qualified health plan," for purposes of the tax credit for small employer health insurance expenses, any health plan that includes coverage for abortions.

Exempts from the application of such tax provisions: (1) abortions for pregnancies resulting from rape or incest or in cases where a woman suffers from a physical disorder, injury, or illness that would, as certified by a physician, endanger her life if an abortion were not performed; and (2) the treatment of any infection, injury, disease, or disorder that was caused by or exacerbated by the performance of an abortion.

 Requires the Director of the Office of Personnel Management (OPM), when entering into contracts for health insurance, to ensure that no multi-state qualified health plan offered in a state health care exchange provides health benefits coverage for which the expenditure of federal funds is prohibited under this Act.

 Amends the Patient Protection and Affordable Care Act, with respect to notice provided to health plan enrollees, to require:

 disclosure at the time of enrollment of the extent of coverage of abortion services for which the expenditure of public funds is either prohibited or allowed; prominent display in marketing or advertising materials, comparison tools, or summary of benefits and coverage explanation made available by the issuer of the plan, by an exchange, or by the Secretary of Health and Human Services (HHS), including information made available through an Internet portal or an exchange; and separate disclosure and identification, in the case of a health plan that includes coverage of abortion services for which public funding is prohibited, and where the premium is disclosed, of the separate payment collected by the plan issuer equal to the actuarial value of such coverage.

taxpayer funding disclosure act prohibits expenditure funds authorized appropriated federal law funds trust fund funds authorized appropriated federal law federal funds abortion currently federal funds abortion services cases involving rape incest life endangerment prohibits federal funds health benefits coverage includes coverage abortion making permanent existing federal policies prohibits inclusion abortion health care service furnished federal district_of_columbia health care facility physician individual employed federal government district excludes abortion prohibitions pregnancy result rape incest woman suffers physical disorder injury illness including life endangering physical condition caused arising pregnancy place danger death abortion performed certified physician applies prohibitions district_of_columbia funds amends internal revenue code exclude definition qualified health plan december purposes refundable tax credit premium assistance plans plan includes coverage abortion excludes definition qualified health plan purposes tax credit small employer health insurance expenses health plan includes coverage abortions exempts application tax provisions abortions pregnancies resulting rape incest cases woman suffers physical disorder injury illness certified physician endanger life abortion performed treatment infection injury disease disorder caused exacerbated performance abortion requires director entering contracts health insurance ensure multi state qualified health plan offered state health care exchange provides health benefits coverage expenditure federal funds prohibited act amends patient_protection affordable care act respect notice provided health plan enrollees require disclosure time enrollment extent coverage abortion services expenditure public funds prohibited allowed prominent display marketing advertising materials comparison tools summary benefits coverage explanation available issuer plan exchange secretary health_and_human_services hhs including information available internet portal exchange separate disclosure identification case health plan includes coverage abortion services public funding prohibited premium disclosed separate payment collected plan issuer equal actuarial value coverage


Summary:
Personal Data Privacy and Security Act of 2014 - Defines "sensitive personally identifiable information" to include: (1) specified combinations of data elements in electronic or digital form, such as an individual's name, home address or telephone number, mother's maiden name, and date of birth; (2) a non-truncated social security number, driver's license number, passport number, or government-issued unique identification number; (3) unique biometric data; (4) a unique account identifier; and (5) any security code, access code, password, or secure code that could be used to generate such codes or passwords.

Title I: Enhancing Punishment for Identity Theft and Other Violations of Data Privacy and Security - Amends the federal criminal code to make fraud in connection with the unauthorized access of personally identifiable information (in electronic or digital form) a predicate for instituting a prosecution for racketeering.

Imposes a prison term of up to five years and/or a fine on any individual who has knowledge of and intentionally and willfully conceals a security breach and such breach results in economic harm of $1,000 or more to any individual. Grants the Secret Service and the Federal Bureau of Investigation (FBI) authority to investigate criminal concealments of security breaches.

Increases penalties for fraud and related activity, and imposes criminal penalties for attempts and conspiracies to commit fraud and related activity, in connection with computers.

Expands the prohibition against trafficking in passwords to include trafficking through any means by which a protected computer may be accessed without authorization.

Modifies criminal and civil forfeiture provisions, including requiring certain civil forfeiture seizures and forfeitures to be performed by persons designated for that purpose by the Secretary of Homeland Security (DHS) or the Attorney General (DOJ).

Prohibits civil actions involving unauthorized use of a protected computer if a violation of a contractual obligation or agreement constitutes the sole basis for determining that access to the computer is unauthorized.

Directs the Attorney General to report the number of criminal cases that involve: (1) unauthorized access to a nongovernmental computer, and (2) conduct in which the sole basis for such a determination was that the defendant violated a contractual obligation or agreement with a service provider or employer.

Prohibits, during and in relation to a felony violation of provisions regarding fraud and related activity in connection with computers, intentionally causing or attempting to cause damage to a critical infrastructure computer if such damage results or would have resulted in the substantial impairment of the operation of that computer or associated critical infrastructure.

Excludes from the definition of "exceeds authorized access" for purposes of the prohibition against fraudulent use of computers, access in violation of a contractual obligation or agreement with an Internet service provider, Internet website, or nongovernment employer, if such violation constitutes the sole basis for determining that access to a protected computer is unauthorized.

Title II: Privacy and Security of Personally Identifiable Information - Subjects a business entity engaging in interstate commerce that involves collecting, accessing, transmitting, using, storing, or disposing of sensitive information in electronic or digital form on 10,000 or more U.S. persons to the requirements for the data privacy and security program established by this title. Excepts: (1) financial institutions subject to the data security requirements and standards under the Gramm-Leach-Bliley Act; (2) specified entities subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA); (3) service providers for any electronic communication by a third-party to the extent that such provider is exclusively engaged in the transmission, routing, or temporary, intermediate, or transient storage of that communication; and (4) public records not otherwise subject to a confidentiality or nondisclosure requirement.

Deems a business entity to be in compliance with such requirements if the entity complies with or provides protection equal to industry standards or standards widely accepted as an effective industry practice that are applicable to the type of sensitive information involved in the ordinary course of business.

Requires a business entity subject to this title to: (1) comply with specified safeguards identified by the FTC in a rulemaking process for the protection of sensitive personally identifiable information; and (2) implement a comprehensive personal data privacy and security program that includes administrative, technical, and physical safeguards appropriate to the size and complexity of the entity and the nature and scope of its activities. Requires such program to be designed to: (1) ensure the privacy, security, and confidentiality of sensitive information; (2) protect against any anticipated vulnerabilities; and (3) protect against unauthorized access to use of such information that could create a significant risk of harm or fraud to any individual.

Requires such a business entity to: (1) identify reasonably foreseeable vulnerabilities that could result in unauthorized access, disclosure, use, or alteration of sensitive information or systems containing such information; (2) assess the likelihood of and potential damage from unauthorized access to, or disclosure, use, or alteration of, sensitive information; (3) assess the sufficiency of its policies, technologies, and safeguards to control and minimize risks from unauthorized access, disclosure, use, or alteration of sensitive information; (4) assess the vulnerability of sensitive information during destruction and disposal of such information; (5) design its personal data privacy and security program to control risks; (6) adopt measures commensurate with the sensitivity of the data as well as the size, complexity, and scope of activities of the entity that control access to systems and facilities containing sensitive information; (7) establish a plan and procedures for minimizing the amount of sensitive information maintained; and (8) take steps to ensure appropriate employee training and regular testing of key controls, systems, and procedures of the entity's personal data privacy and security program.

Prescribes penalties for violations of such requirements. Allows an injunction against a business entity to stop continuing violations of the requirements of this subtitle.

Grants authority to the FTC to enforce such requirements. Authorizes state attorneys general and law enforcement agencies to bring civil actions to protect state residents against business entities that are violating such requirements. Preempts state laws relating to administrative, technical, and physical safeguards for the protection of personal information.

Requires any agency or business entity engaged in interstate commerce that uses, accesses, transmits, stores, disposes of, or collects sensitive personally identifiable information to notify any U.S. resident whose information has been accessed or acquired without unreasonable delay after the discovery of a security breach.

 Excepts: (1) financial institutions subject to the data security requirements and standards under the Gramm-Leach-Bliley Act, and (2) specified entities subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Allows exemptions if: (1) the Secret Service or the FBI determines that notification of the security breach could be expected to reveal sensitive sources and methods or similarly impede the government's ability to conduct law enforcement investigations, or (2) the FBI determines that notification of the breach could be expected to damage national security.

Provides that an agency or business entity shall be exempt from notice requirements if: (1) a risk assessment concludes that there is no significant risk that a security breach has resulted in, or will result in, identity theft, economic loss or harm, or physical harm to the individuals whose sensitive information was subject to the breach; (2) without unreasonable delay but not later than 45 days after the discovery of the breach, the agency or entity notifies the FTC of the results of the risk assessment and its decision to invoke the exemption; and (3) the FTC does not indicate, within 10 business days from receipt of the decision, that notice should be given.

Provides that a business entity will be exempt from notice requirements if it utilizes or participates in a security program that: (1) effectively blocks the use of the sensitive information to initiate unauthorized financial transactions before they are charged to the individual's account, and (2) provides for notice to affected individuals after a security breach that has resulted in fraud or unauthorized transactions.

Provides for individual notice by mail, telephone, and e-mail of a security breach and for notice to major media outlets serving a state or jurisdiction if a security breach involves more than 5,000 individuals. Specifies the required content of a security breach  notification. Requires an agency or business entity that is required to provide notification of a breach involving more than 5,000 individuals to also provide notification to credit reporting agencies.

Directs the DHS Secretary to designate a federal entity to receive the notices. Requires business entities and federal agencies to report data security breaches to the designated entity if the breach involves: (1) more than 5,000 individuals, (2) a database that contains information about more than 500,000 individuals, (3) a federal government database, or (4) individuals known to be federal employees or contractors involved in national security or law enforcement. Requires the designated agency to report information it receives about security breaches to the Secret Service, FBI, and FTC for civil law enforcement purposes as promptly as possible, but either 72 hours before notice of a breach is required to be provided to an individual or not later than 10 days after the breach is discovered, whichever occurs first.

Authorizes the Attorney General and the FTC to bring civil and administrative actions against business entities for violations of this subtitle and to seek injunctive relief or civil penalties.

Authorizes state attorneys general or state or local law enforcement agencies to bring a civil action on behalf of state residents who have been threatened or adversely affected by a business entity violating provisions of this title and to obtain injunctive relief or civil penalties. Requires a state attorney general bringing a civil action to provide written notice to the Attorney General who may then move to stay the action, move to consolidate all pending actions, intervene, and file petitions for appeal.

Directs the FTC to report on the number and nature of the security breaches described in notices filed by business entities invoking the risk assessment exemption and their response to such notices.

Directs the Secret Service and FBI to report on the number and nature of security breaches subject to the national security and law enforcement exemptions.

Title III: Compliance with Statutory Pay-As-You-Go Act - Provides that the budgetary effects of this Act, for the purpose of complying with the Statutory Pay-As-You-Go Act of 2010, shall be determined by reference to the latest statement titled "Budgetary Effects of PAYGO Legislation" for this Act, provided that such statement has been submitted prior to the vote on passage.

defines sensitive personally identifiable information include specified combinations data elements electronic digital form individual home address telephone number mother maiden date birth non truncated social security number driver license number passport number government issued unique identification number unique biometric data unique account identifier security code access code password secure code generate codes passwords title enhancing punishment identity theft violations data privacy security amends federal criminal code fraud connection unauthorized access personally identifiable information electronic digital form predicate instituting prosecution racketeering imposes prison term years fine individual knowledge intentionally willfully conceals security breach breach results economic harm individual federal_bureau_of_investigation fbi authority investigate criminal security breaches increases penalties fraud related activity imposes criminal penalties attempts conspiracies commit fraud related activity connection computers expands prohibition trafficking passwords include trafficking means protected computer accessed authorization modifies criminal civil forfeiture provisions including requiring certain civil forfeiture seizures forfeitures performed persons designated purpose secretary homeland_security dhs attorney general doj prohibits civil actions involving unauthorized use protected computer violation contractual obligation agreement constitutes sole basis determining access computer unauthorized directs attorney general report number criminal cases involve unauthorized access nongovernmental computer conduct sole basis determination defendant violated contractual obligation agreement service provider employer prohibits relation felony violation provisions fraud related activity connection computers intentionally causing attempting cause damage critical infrastructure computer damage results resulted substantial impairment operation computer associated critical infrastructure excludes definition exceeds authorized access purposes prohibition fraudulent use computers access violation contractual obligation agreement internet service provider internet website nongovernment employer violation constitutes sole basis determining access protected computer unauthorized title privacy security personally identifiable information subjects business entity engaging interstate commerce involves collecting accessing transmitting storing disposing sensitive information electronic digital form persons requirements data privacy security program established title excepts financial institutions subject data security requirements standards gramm leach bliley act specified entities subject health_insurance_portability_and_accountability_act hipaa service providers electronic communication party extent provider exclusively engaged transmission routing temporary intermediate transient storage communication public records subject confidentiality nondisclosure requirement deems business entity compliance requirements entity complies provides protection equal industry standards standards widely accepted effective industry practice applicable type sensitive information involved ordinary course business requires business entity subject title comply specified safeguards identified ftc rulemaking process protection sensitive personally identifiable information implement comprehensive personal data privacy security program includes administrative technical physical safeguards appropriate size complexity entity nature scope activities requires program designed ensure privacy security confidentiality sensitive information protect anticipated vulnerabilities protect unauthorized access use information create significant risk harm fraud individual requires business entity identify reasonably foreseeable vulnerabilities result unauthorized access disclosure use alteration sensitive information systems containing information assess likelihood potential damage unauthorized access disclosure use alteration sensitive information assess sufficiency policies technologies safeguards control minimize risks unauthorized access disclosure use alteration sensitive information assess vulnerability sensitive information destruction disposal information design personal data privacy security program control risks adopt measures commensurate sensitivity data size complexity scope activities entity control access systems facilities containing sensitive information establish plan procedures minimizing sensitive information maintained steps ensure appropriate employee training regular testing key controls systems procedures entity personal data privacy security program prescribes penalties violations requirements allows injunction business entity stop continuing violations requirements subtitle grants authority ftc enforce requirements authorizes state attorneys general law enforcement agencies bring civil actions protect state residents business entities violating requirements preempts state laws relating administrative technical physical safeguards protection personal information requires agency business entity engaged interstate commerce uses accesses transmits stores disposes collects sensitive personally identifiable information notify resident information accessed acquired unreasonable delay discovery security breach excepts financial institutions subject data security requirements standards gramm leach bliley act specified entities subject health_insurance_portability_and_accountability_act hipaa allows exemptions secret_service fbi determines notification security breach expected reveal sensitive sources methods similarly impede government ability conduct law enforcement investigations fbi determines notification breach expected damage national security provides agency business entity shall exempt notice requirements risk assessment concludes significant risk security breach resulted result identity theft economic loss harm physical harm individuals sensitive information subject breach unreasonable delay later days discovery breach agency entity notifies ftc results risk assessment decision exemption ftc indicate business days receipt decision notice given provides business entity exempt notice requirements utilizes participates security program effectively blocks use sensitive information initiate unauthorized financial transactions charged individual account provides notice affected individuals security breach resulted fraud unauthorized transactions provides individual notice mail telephone mail security breach notice major media outlets serving state jurisdiction security breach involves individuals specifies required content security breach notification requires agency business entity required provide notification breach involving individuals provide notification credit reporting agencies directs dhs secretary designate federal entity receive notices requires business entities federal agencies report data security breaches designated entity breach involves individuals database contains information individuals federal government database individuals known federal employees contractors involved national security law enforcement requires designated agency report information receives security breaches secret_service fbi ftc civil law enforcement purposes promptly possible hours notice breach required provided individual later days breach discovered whichever occurs authorizes attorney general ftc bring civil administrative actions business entities violations subtitle seek injunctive relief civil penalties authorizes state attorneys general state local law enforcement agencies bring civil action behalf state residents threatened adversely affected business entity violating provisions title obtain injunctive relief civil penalties requires state attorney general bringing civil action provide written notice attorney general stay action consolidate pending actions intervene file petitions appeal directs ftc report number nature security breaches described notices filed business entities invoking risk assessment exemption response notices directs secret_service fbi report number nature security breaches subject national security law enforcement exemptions title iii compliance statutory pay act provides budgetary effects act purpose complying statutory pay act shall determined reference latest statement titled budgetary effects paygo legislation act provided statement submitted prior vote passage


Summary:
Smartphone Theft Prevention Act - Amends the Communications Act of 1934 to require commercial mobile service providers to make available on mobile devices a function that an account holder may use remotely to: (1) delete or render inaccessible all information relating to the account holder that has been placed on the device; (2) render the device inoperable on the global networks of such service providers, even if the device is turned off or has the data storage medium removed; (3) prevent the device from being reactivated or reprogrammed without a passcode or similar authorization after the device has been rendered inoperable or has been subject to an unauthorized factory reset; and (4) reverse any such actions if the device is recovered by the account holder.

Prohibits a mobile device from being manufactured in the United States or imported into the United States for sale or resale to the public, unless the device is configured in such a manner that a service provider may make such remote deletion and inoperability functions available on the device.

Allows the Federal Communications Commission (FCC) to waive such requirements with respect to any low-cost mobile device that: (1) is intended primarily for voice-only mobile service, and (2) may have limited data consumption functions focused on text messaging or short message service.

Prohibits service providers from charging a fee for making such remote deletion and inoperability functions available.

require commercial mobile service providers available mobile devices function account holder use remotely delete render inaccessible information relating account holder placed device render device inoperable global networks service providers device turned data storage medium removed prevent device reprogrammed similar authorization device rendered inoperable subject unauthorized factory reset reverse actions device recovered account holder prohibits mobile device manufactured united_states imported united_states sale resale public device configured manner service provider remote deletion functions available device allows federal_communications_commission fcc waive requirements respect low cost mobile device intended primarily voice mobile service limited data consumption functions focused text messaging short message service prohibits service providers charging fee making remote deletion functions available