<enum>XXI</enum><header>Chemical facility anti–terrorism standards</header><section id="id8be2f50d1379450982918d2b175393b1"><enum>2101.</enum><header>Definitions</header><text display-inline="no-display-inline">In this title—</text><paragraph id="idd0da856e6d164887873c1a982969b8d7"><enum>(1)</enum><text>the term <term>CFATS regulation</term> means—</text><subparagraph id="idE3603C3877B94CE19F1D19B05C4280C5"><enum>(A)</enum><text>an existing CFATS regulation; and</text></subparagraph><subparagraph id="idc82101b94e814730a7d79eb2728b1fbf"><enum>(B)</enum><text>any regulation or amendment to an existing CFATS regulation issued pursuant to the authority under section 2107;</text></subparagraph></paragraph><paragraph id="id5cdeb3d8d4ad4f4599c726ae7c65c2ff"><enum>(2)</enum><text>the term <term>chemical facility of interest</term> means a facility that—</text><subparagraph id="id7f8df5866ee74b0c81b1414e684890ad"><enum>(A)</enum><text>holds, or that the Secretary has a reasonable basis to believe holds, a chemical of interest, as designated under Appendix A to part 27 of title 6, Code of Federal Regulations, or any successor thereto, at a threshold quantity set pursuant to relevant risk-related security principles; and</text></subparagraph><subparagraph id="id41ea3bfb10c04ecb8f05cf5787c9d4bb"><enum>(B)</enum><text>is not an excluded facility;</text></subparagraph></paragraph><paragraph id="id4d0d9310268b4f0093acf51081272451"><enum>(3)</enum><text>the term <term>covered chemical facility</term> means a facility that—</text><subparagraph id="id75347a41c9a745378d8eae9c36eeb6f7"><enum>(A)</enum><text>the Secretary—</text><clause id="id917ffac24f68455fbe88fc94011ee64c"><enum>(i)</enum><text>identifies as a chemical facility of interest; and</text></clause><clause id="idb04b3a43d952481a9dcaf03d1262eb35"><enum>(ii)</enum><text>based upon review of the facility's Top-Screen, determines meets the risk criteria developed under section 2102(e)(2)(B); and</text></clause></subparagraph><subparagraph id="id18ff8c7ff7fd4137a2d525bd04928f2f"><enum>(B)</enum><text>is not an excluded facility;</text></subparagraph></paragraph><paragraph id="idd683b4feca004841b7a653b85d7b2935"><enum>(4)</enum><text>the term <term>excluded facility</term> means—</text><subparagraph id="id4c196b28b2a3488cb627f0bc11c0f4d3"><enum>(A)</enum><text>a facility regulated under the Maritime Transportation Security Act of 2002 (<external-xref legal-doc="public-law" parsable-cite="pl/107/295">Public Law 107–295</external-xref>; 116 Stat. 2064);</text></subparagraph><subparagraph id="id3f04d57d3bd84212addced7f2246399c"><enum>(B)</enum><text>a public water system, as that term is defined in section 1401 of the Safe Drinking Water Act (42 U.S.C. 300f);</text></subparagraph><subparagraph id="id9c41a8d262f64f8b9a693ea6b62109d5"><enum>(C)</enum><text>a Treatment Works, as that term is defined in section 212 of the Federal Water Pollution Control Act (<external-xref legal-doc="usc" parsable-cite="usc/33/1292">33 U.S.C. 1292</external-xref>);</text></subparagraph><subparagraph id="idd3541e9e7d844599851f34f2590d9448"><enum>(D)</enum><text>a facility owned or operated by the Department of Defense or the Department of Energy; or</text></subparagraph><subparagraph id="id2584588ebc7a486fb98a5498b26c016e"><enum>(E)</enum><text>a facility subject to regulation by the Nuclear Regulatory Commission, or by a State that has entered into an agreement with the Nuclear Regulatory Commission under section 274 b. of the Atomic Energy Act of 1954 (<external-xref legal-doc="usc" parsable-cite="usc/42/2021">42 U.S.C. 2021(b)</external-xref>) to protect against unauthorized access of any material, activity, or structure licensed by the Nuclear Regulatory Commission;</text></subparagraph></paragraph><paragraph id="idf5c060e28af340fea678c6c62cb04d15"><enum>(5)</enum><text>the term <term>existing CFATS regulation</term> means—</text><subparagraph id="idd2c6aeea9844423583496b4094549544"><enum>(A)</enum><text>a regulation promulgated under section 550 of the Department of Homeland Security Appropriations Act, 2007 (<external-xref legal-doc="public-law" parsable-cite="pl/109/295">Public Law 109–295</external-xref>; <external-xref legal-doc="usc" parsable-cite="usc/6/121">6 U.S.C. 121</external-xref> note) that is in effect on the day before the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>; and</text></subparagraph><subparagraph id="ida4c4aa3312b94d8f82e8c447e8c6865b"><enum>(B)</enum><text>a Federal Register notice or other published guidance relating to section 550 of the Department of Homeland Security Appropriations Act, 2007 that is in effect on the day before the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>;</text></subparagraph></paragraph><paragraph id="id5566d97911804e928e9b6587d3331a0c"><enum>(6)</enum><text>the term <term>expedited approval facility</term> means a covered chemical facility for which the owner or operator elects to submit a site security plan in accordance with section 2102(c)(4);</text></paragraph><paragraph id="idb207d35983f242b1b27bdae976d3b046"><enum>(7)</enum><text>the term <term>facially deficient</term>, relating to a site security plan, means a site security plan that does not support a certification that the security measures in the plan address the security vulnerability assessment and the risk-based performance standards for security for the facility, based on a review of—</text><subparagraph id="idF40B8D94EDD44C0BA6B945191CA57D65"><enum>(A)</enum><text>the facility's site security plan;</text></subparagraph><subparagraph id="id72DE943A2A1042BA89BFCA380100710F"><enum>(B)</enum><text>the facility's Top-Screen;</text></subparagraph><subparagraph id="idF981C6CC853C4F709F97BB0DAC4E5499"><enum>(C)</enum><text>the facility's security vulnerability assessment; or</text></subparagraph><subparagraph id="id87B5D81C65C247E4BF0D2EFC89072913"><enum>(D)</enum><text>any other information that—</text><clause id="idB2E6342423274CA6A03B6B0D19094B62"><enum>(i)</enum><text>the facility submits to the Department; or</text></clause><clause id="id0330D3C9BF234AB5B0CD3076C32BCD2E"><enum>(ii)</enum><text>the Department obtains from a public source or other source;</text></clause></subparagraph></paragraph><paragraph id="idec0e43ba6cd34e9c8f0848b8f6a610a2"><enum>(8)</enum><text>the term <term>guidance for expedited approval facilities</term> means the guidance issued under section 2102(c)(4)(B)(i);</text></paragraph><paragraph id="ide26538224c104756ae1da1a45b3dbc1c"><enum>(9)</enum><text>the term <term>risk assessment</term> means the Secretary’s application of relevant risk criteria identified in section 2102(e)(2)(B);</text></paragraph><paragraph id="id6f7c8b91a9a949ac8968f56b97b82165"><enum>(10)</enum><text>the term <term>terrorist screening database</term> means the terrorist screening database maintained by the Federal Government Terrorist Screening Center or its successor;</text></paragraph><paragraph id="id8bee6a0152964bee9597c8c73bd42bed"><enum>(11)</enum><text>the term <term>tier</term> has the meaning given the term in <external-xref legal-doc="regulation" parsable-cite="cfr/6/27.105">section 27.105</external-xref> of title 6, Code of Federal Regulations, or any successor thereto;</text></paragraph><paragraph id="id3fff25e48c11411ea7e0793b1a442525"><enum>(12)</enum><text>the terms <term>tiering</term> and <term>tiering methodology</term> mean the procedure by which the Secretary assigns a tier to each covered chemical facility based on the risk assessment for that covered chemical facility;</text></paragraph><paragraph id="ide5153cb8834949e2bbf3b67706ddb8ae"><enum>(13)</enum><text>the term <term>Top-Screen</term> has the meaning given the term in <external-xref legal-doc="regulation" parsable-cite="cfr/6/27.105">section 27.105</external-xref> of title 6, Code of Federal Regulations, or any successor thereto; and</text></paragraph><paragraph id="idb139481b257b407a94abbb4b6338aa52"><enum>(14)</enum><text>the term <term>vulnerability assessment</term> means the identification of weaknesses in the security of a chemical facility of interest.</text></paragraph></section><section id="id934cf03b3f8d4076a6703f7cb43677ba"><enum>2102.</enum><header>Chemical facility anti-terrorism standards program</header><subsection id="id03be1b15d8d441e1b327fad6ae0c1f26"><enum>(a)</enum><header>Program established</header><paragraph id="idd169fdd18cb34bfc9a4b4d014fe786db"><enum>(1)</enum><header>In general</header><text>There is in the Department a Chemical Facility Anti-Terrorism Standards Program.</text></paragraph><paragraph id="id8c736ed957d246d1abea03f1ab616b3b"><enum>(2)</enum><header>Requirements</header><text>In carrying out the Chemical Facility Anti-Terrorism Standards Program, the Secretary shall—</text><subparagraph id="id02c14c7e9fbf488187f6028642aef520"><enum>(A)</enum><text>identify—</text><clause id="id43c02557d1684be3b821e928482e8274"><enum>(i)</enum><text>chemical facilities of interest; and</text></clause><clause id="idc374cad1f589428e9fd261343cb38d5a"><enum>(ii)</enum><text>covered chemical facilities;</text></clause></subparagraph><subparagraph id="id9fe968f4be7f45f49003c3bc319afe4a"><enum>(B)</enum><text>require each chemical facility of interest to submit a Top-Screen and any other information the Secretary determines necessary to enable the Department to assess the security risks associated with the facility;</text></subparagraph><subparagraph id="id3f23b31af3954c62817d0a15eb904042"><enum>(C)</enum><text>establish risk-based performance standards designed to address high levels of security risk at covered chemical facilities; and</text></subparagraph><subparagraph id="idfeb5ef78046f4972aecc5d1545ece909"><enum>(D)</enum><text>require each covered chemical facility to—</text><clause id="id60d3f6b29faa4a6793938e72ee149b46"><enum>(i)</enum><text>submit a security vulnerability assessment; and</text></clause><clause id="id9233e4681b0b4c54b8bdf734ebfaaa87"><enum>(ii)</enum><text>develop, submit, and implement a site security plan.</text></clause></subparagraph></paragraph></subsection><subsection id="idC36F85D1E39C4DE982867A591B7E0020"><enum>(b)</enum><header>Security measures</header><paragraph id="id8AF4DB9C244F4789972375050C3F5177"><enum>(1)</enum><header>In general</header><text>A facility, in developing a site security plan as required under subsection (a), shall include security measures that, in combination, appropriately address the security vulnerability assessment and the risk-based performance standards for security for the facility.</text></paragraph><paragraph id="idF25C36B327BC4F7F9E47AA2334605D47"><enum>(2)</enum><header>Employee input</header><text>To the greatest extent practicable, a facility’s security vulnerability assessment and site security plan shall include input from at least 1 facility employee and, where applicable, 1 employee representative from the bargaining agent at that facility, each of whom possesses, in the determination of the facility’s security officer, relevant knowledge, experience, training, or education as pertains to matters of site security.</text></paragraph></subsection><subsection id="id366c25ed3bbb47b2897a7b79362d9be8"><enum>(c)</enum><header>Approval or disapproval of site security plans</header><paragraph id="iddaa2dfbad2c34d2bbe970684739ec785"><enum>(1)</enum><header>In general</header><subparagraph id="id6f91352c6a0a4da18971c39eaa3df995"><enum>(A)</enum><header>Review</header><text>Except as provided in paragraph (4), the Secretary shall review and approve or disapprove each site security plan submitted pursuant to subsection (a).</text></subparagraph><subparagraph id="idade3879395b04c8eb040f285faf4fd23"><enum>(B)</enum><header>Bases for disapproval</header><text>The Secretary—</text><clause id="id8149fe51010e4176810f9a18f9ae6ec6"><enum>(i)</enum><text>may not disapprove a site security plan based on the presence or absence of a particular security measure; and</text></clause><clause id="ida9971b9c6bfd489f9ca899e3a061fbba"><enum>(ii)</enum><text>shall disapprove a site security plan if the plan fails to satisfy the risk-based performance standards established pursuant to subsection (a)(2)(C).</text></clause></subparagraph></paragraph><paragraph id="idab215885ea5c48819723ed5f2fd5b4ae"><enum>(2)</enum><header>Alternative security programs</header><subparagraph id="id811335bc032749f7a7762609305b8b9e"><enum>(A)</enum><header>Authority to approve</header><clause id="id4c36bf6eb3d94c54b29a1697948caddf"><enum>(i)</enum><header>In general</header><text>The Secretary may approve an alternative security program established by a private sector entity or a Federal, State, or local authority or under other applicable laws, if the Secretary determines that the requirements of the program meet the requirements under this section.</text></clause><clause id="id0efe2eb6a10047499228c86188c64b80"><enum>(ii)</enum><header>Additional security measures</header><text>If the requirements of an alternative security program do not meet the requirements under this section, the Secretary may recommend additional security measures to the program that will enable the Secretary to approve the program.</text></clause></subparagraph><subparagraph id="idd696ce72757345b5bb5f29a238dcb2dc"><enum>(B)</enum><header>Satisfaction of site security plan requirement</header><text>A covered chemical facility may satisfy the site security plan requirement under subsection (a) by adopting an alternative security program that the Secretary has—</text><clause id="idad7d7fca126440ef9f4dcb8943394e39"><enum>(i)</enum><text>reviewed and approved under subparagraph (A); and</text></clause><clause id="idd788f30809294513b722b45267df618c"><enum>(ii)</enum><text>determined to be appropriate for the operations and security concerns of the covered chemical facility.</text></clause></subparagraph></paragraph><paragraph id="id829134267c9843b8b7ce69fbcd96389a"><enum>(3)</enum><header>Site security plan assessments</header><subparagraph id="idbe3c45e2fe13468591ea780888e4d77f"><enum>(A)</enum><header>Risk assessment policies and procedures</header><text>In approving or disapproving a site security plan under this subsection, the Secretary shall employ the risk assessment policies and procedures developed under this title.</text></subparagraph><subparagraph id="idb210ada5cedf488fae7ed7b214758e49"><enum>(B)</enum><header>Previously approved plans</header><text>In the case of a covered chemical facility for which the Secretary approved a site security plan before the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary may not require the facility to resubmit the site security plan solely by reason of the enactment of this title.</text></subparagraph></paragraph><paragraph id="ide74ead6bb180424ea350bb9e4b1e4693"><enum>(4)</enum><header>Expedited approval program</header><subparagraph id="idb04b9eb0a40946d09a2018f18458df01"><enum>(A)</enum><header>In general</header><text>A covered chemical facility assigned to tier 3 or 4 may meet the requirement to develop and submit a site security plan under subsection (a)(2)(D) by developing and submitting to the Secretary—</text><clause id="id556f512f146646f5a8f4fda8920441dd"><enum>(i)</enum><text>a site security plan and the certification described in subparagraph (C); or</text></clause><clause id="id9fdab3d713414ecaa18546f2f726c0b9"><enum>(ii)</enum><text>a site security plan in conformance with a template authorized under subparagraph (H).</text></clause></subparagraph><subparagraph id="idfb34e4480e6f4d59aca52b53cc0c7aec"><enum>(B)</enum><header>Guidance for expedited approval facilities</header><clause id="idf8e59fc80f0c454ba51b0087899c4e5b"><enum>(i)</enum><header>In general</header><text>Not later than 180 days after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall issue guidance for expedited approval facilities that identifies specific security measures that are sufficient to meet the risk-based performance standards.</text></clause><clause id="idaf585c99ccfa4136a8095fda1755cd6d"><enum>(ii)</enum><header>Material deviation from guidance</header><text>If a security measure in the site security plan of an expedited approval facility materially deviates from a security measure in the guidance for expedited approval facilities, the site security plan shall include an explanation of how such security measure meets the risk-based performance standards.</text></clause><clause id="id70dff687fdb04dc58366d3839b0f1f43"><enum>(iii)</enum><header>Applicability of other laws to development and issuance of initial guidance</header><text>During the period before the Secretary has met the deadline under clause (i), in developing and issuing, or amending, the guidance for expedited approval facilities under this subparagraph and in collecting information from expedited approval facilities, the Secretary shall not be subject to—</text><subclause id="idC0C53A54B2C14EEBB39D1303CC65AFD2"><enum>(I)</enum><text><external-xref legal-doc="usc" parsable-cite="usc/5/553">section 553</external-xref> of title 5, United States Code;</text></subclause><subclause id="idD3F4E93947DB4D0E8D7837842B3319AC"><enum>(II)</enum><text>subchapter I of chapter 35 of title 44, United States Code; or</text></subclause><subclause id="id618F1F06F4004AE88966154E649F9668"><enum>(III)</enum><text>section 2107(b) of this title.</text></subclause></clause></subparagraph><subparagraph id="id37db2664ae7042f58c52462fe5e85534"><enum>(C)</enum><header>Certification</header><text>The owner or operator of an expedited approval facility shall submit to the Secretary a certification, signed under penalty of perjury, that—</text><clause id="idb885598a127943bcaec878a9801d0236"><enum>(i)</enum><text>the owner or operator is familiar with the requirements of this title and part 27 of title 6, Code of Federal Regulations, or any successor thereto, and the site security plan being submitted;</text></clause><clause id="ide8dc85b0b4a647009a25e3d14608dc0a"><enum>(ii)</enum><text>the site security plan includes the security measures required by subsection (b);</text></clause><clause id="idCE101495F7994CADB51AB939C319B804"><enum>(iii)</enum><subclause commented="no" display-inline="yes-display-inline" id="idF36F368E73364BD798A54EF176AAA811"><enum>(I)</enum><text>the security measures in the site security plan do not materially deviate from the guidance for expedited approval facilities except where indicated in the site security plan;</text></subclause><subclause changed="added" id="idAFC282DBD8A947EE8EF4F37D4D6CDF90" indent="up1" reported-display-style="italic"><enum>(II)</enum><text>any deviations from the guidance for expedited approval facilities in the site security plan meet the risk-based performance standards for the tier to which the facility is assigned; and</text></subclause><subclause changed="added" id="iddee2370b8c494b7d8d1047b998fa81db" indent="up1" reported-display-style="italic"><enum>(III)</enum><text>the owner or operator has provided an explanation of how the site security plan meets the risk-based performance standards for any material deviation;</text></subclause></clause><clause id="id19c458fab2fc4049a71ee44e4e6b8859"><enum>(iv)</enum><text>the owner or operator has visited, examined, documented, and verified that the expedited approval facility meets the criteria set forth in the site security plan;</text></clause><clause id="id31d3487deae34564bce3dbbf77bea466"><enum>(v)</enum><text>the expedited approval facility has implemented all of the required performance measures outlined in the site security plan or set out planned measures that will be implemented within a reasonable time period stated in the site security plan;</text></clause><clause id="id7099cf6ca04a403b893fe52c6f3b8438"><enum>(vi)</enum><text>each individual responsible for implementing the site security plan has been made aware of the requirements relevant to the individual’s responsibility contained in the site security plan and has demonstrated competency to carry out those requirements;</text></clause><clause id="id5f822bf4a69d40beaeb701155c4f8ff5"><enum>(vii)</enum><text>the owner or operator has committed, or, in the case of planned measures will commit, the necessary resources to fully implement the site security plan; and</text></clause><clause id="id1801139EDA904081BED78975A70DAE97"><enum>(viii)</enum><text>the planned measures include an adequate procedure for addressing events beyond the control of the owner or operator in implementing any planned measures.</text></clause></subparagraph><subparagraph id="id3e7b8794c7734a93b65308bfde7f4814"><enum>(D)</enum><header>Deadline</header><clause id="ida60582b781ba43d9ba8ca96b41444368"><enum>(i)</enum><header>In general</header><text>Not later than 120 days after the date described in clause (ii), the owner or operator of an expedited approval facility shall submit to the Secretary the site security plan and the certification described in subparagraph (C).</text></clause><clause id="id745f4f66030d4f76bdab1ad9521b77f8"><enum>(ii)</enum><header>Date</header><text>The date described in this clause is—</text><subclause id="idd4edf1abdcec416ebccba7af3ea0b7e6"><enum>(I)</enum><text>for an expedited approval facility that was assigned to tier 3 or 4 under existing CFATS regulations before the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the date that is 210 days after the date of enactment of that Act; and</text></subclause><subclause id="id5db35351ab154117982c510362982b9b"><enum>(II)</enum><text>for any expedited approval facility not described in subclause (I), the later of—</text><item id="id411F415297D54FB88FFABEC4F5F8F157"><enum>(aa)</enum><text>the date on which the expedited approval facility is assigned to tier 3 or 4 under subsection (e)(2)(A); or</text></item><item id="id77A88D59182041A8ACE4BCF67BC06136"><enum>(bb)</enum><text>the date that is 210 days after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>.</text></item></subclause></clause><clause id="id3dc87f8053a045e495fbad437126fb64"><enum>(iii)</enum><header>Notice</header><text>An owner or operator of an expedited approval facility shall notify the Secretary of the intent of the owner or operator to certify the site security plan for the expedited approval facility not later than 30 days before the date on which the owner or operator submits the site security plan and certification described in subparagraph (C).</text></clause></subparagraph><subparagraph id="id770ec3ca69e3472bb7c0f3465e800312"><enum>(E)</enum><header>Compliance</header><clause id="idaa16143090104c929d63929b697a073e"><enum>(i)</enum><header>In general</header><text>For an expedited approval facility submitting a site security plan and certification in accordance with subparagraphs (A), (B), (C), and (D)—</text><subclause id="idfdb18e90d6184a47affcb68843f0dc08"><enum>(I)</enum><text>the expedited approval facility shall comply with all of the requirements of its site security plan; and</text></subclause><subclause id="ide36c8a95dd574263bf228849b1e36f26"><enum>(II)</enum><text>the Secretary—</text><item id="idc859c6d0abde47acac0a83a3b4408a93"><enum>(aa)</enum><text>except as provided in subparagraph (G), may not disapprove the site security plan; and</text></item><item id="id48585d759b2f444a9142e5a9c46fe68c"><enum>(bb)</enum><text>may audit and inspect the expedited approval facility under subsection (d) to verify compliance with its site security plan.</text></item></subclause></clause><clause id="id83099c01ae8b46be8aa2d98a86b36f02"><enum>(ii)</enum><header>Noncompliance</header><text>If the Secretary determines an expedited approval facility is not in compliance with the requirements of the site security plan or is otherwise in violation of this title, the Secretary may enforce compliance in accordance with section 2104.</text></clause></subparagraph><subparagraph id="idd4d885f258644d8d86aeef9db33a571b"><enum>(F)</enum><header>Amendments to site security plan</header><clause id="id059612d7c4014dbfbca84df56292b097"><enum>(i)</enum><header>Requirement</header><subclause id="id8acca2f4dd8c494a98aa403191094c51"><enum>(I)</enum><header>In general</header><text>If the owner or operator of an expedited approval facility amends a site security plan submitted under subparagraph (A), the owner or operator shall submit the amended site security plan and a certification relating to the amended site security plan that contains the information described in subparagraph (C).</text></subclause><subclause id="id63161e9003d748d3b0c3cbefd724fb1d"><enum>(II)</enum><header>Technical amendments</header><text>For purposes of this clause, an amendment to a site security plan includes any technical amendment to the site security plan.</text></subclause></clause><clause id="id1e0407c318d043acb40a1e02a6e07f24"><enum>(ii)</enum><header>Amendment required</header><text>The owner or operator of an expedited approval facility shall amend the site security plan if—</text><subclause id="idbbc595572d694bbaa46f917faafc3449"><enum>(I)</enum><text>there is a change in the design, construction, operation, or maintenance of the expedited approval facility that affects the site security plan;</text></subclause><subclause id="idd353f3e1cd704d8eaccdbfa0ed51a611"><enum>(II)</enum><text>the Secretary requires additional security measures or suspends a certification and recommends additional security measures under subparagraph (G); or</text></subclause><subclause id="id1e4b89249aaf423e8ee8e0e48fcad9fe"><enum>(III)</enum><text>the owner or operator receives notice from the Secretary of a change in tiering under subsection (e)(3).</text></subclause></clause><clause id="id8acc8ca2e8844c4caa227f054cbd4a97"><enum>(iii)</enum><header>Deadline</header><text>An amended site security plan and certification shall be submitted under clause (i)—</text><subclause id="id0871fe3afd2046eead6603fd04c262ed"><enum>(I)</enum><text>in the case of a change in design, construction, operation, or maintenance of the expedited approval facility that affects the security plan, not later than 120 days after the date on which the change in design, construction, operation, or maintenance occurred;</text></subclause><subclause id="id1598c64bb44748dfa5ed255e1bc28a9d"><enum>(II)</enum><text>in the case of the Secretary requiring additional security measures or suspending a certification and recommending additional security measures under subparagraph (G), not later than 120 days after the date on which the owner or operator receives notice of the requirement for additional security measures or suspension of the certification and recommendation of additional security measures; and</text></subclause><subclause id="idb2640dd3a12741c39fe5e09b5791cd5d"><enum>(III)</enum><text>in the case of a change in tiering, not later than 120 days after the date on which the owner or operator receives notice under subsection (e)(3).</text></subclause></clause></subparagraph><subparagraph id="idb611bdb538094cb4a7e7461d51b76efc"><enum>(G)</enum><header>Facially deficient site security plans</header><clause id="idacae4a248b3d4f5fa057d870cf36afc9"><enum>(i)</enum><header>Prohibition</header><text>Notwithstanding subparagraph (A) or (E), the Secretary may suspend the authority of a covered chemical facility to certify a site security plan if the Secretary—</text><subclause id="id0fe23a88f9354cecbd25b866227efd40"><enum>(I)</enum><text>determines the certified site security plan or an amended site security plan is facially deficient; and</text></subclause><subclause id="idedae1a878380448a990278a80d2f15fe"><enum>(II)</enum><text>not later than 100 days after the date on which the Secretary receives the site security plan and certification, provides the covered chemical facility with written notification that the site security plan is facially deficient, including a clear explanation of each deficiency in the site security plan.</text></subclause></clause><clause id="id9edc8876f1c749008535d9eace30c3a0"><enum>(ii)</enum><header>Additional security measures</header><subclause id="ide0d0647175a64a888472cfa9ee2fe786"><enum>(I)</enum><header>In general</header><text>If, during or after a compliance inspection of an expedited approval facility, the Secretary determines that planned or implemented security measures in the site security plan of the facility are insufficient to meet the risk-based performance standards based on misrepresentation, omission, or an inadequate description of the site, the Secretary may—</text><item id="id5D4CA5C4DC494223BEF611773950A64E"><enum>(aa)</enum><text>require additional security measures; or</text></item><item id="idEF9D190B75DB4EEC83524E0184CF27DF"><enum>(bb)</enum><text>suspend the certification of the facility.</text></item></subclause><subclause id="ida8fdaa548bc94083b0b0686979796e89"><enum>(II)</enum><header>Recommendation of additional security measures</header><text>If the Secretary suspends the certification of an expedited approval facility under subclause (I), the Secretary shall—</text><item id="id37A73F69CBD04C10AEC5986CA18175BD"><enum>(aa)</enum><text>recommend specific additional security measures that, if made part of the site security plan by the facility, would enable the Secretary to approve the site security plan; and</text></item><item id="id2FD4BC63BA5D48D68E5560815C5D28AE"><enum>(bb)</enum><text>provide the facility an opportunity to submit a new or modified site security plan and certification under subparagraph (A).</text></item></subclause><subclause id="idd633f3a0a6df4464997bb1b49a622528"><enum>(III)</enum><header>Submission; review</header><text>If an expedited approval facility determines to submit a new or modified site security plan and certification as authorized under subclause (II)(bb)—</text><item id="id49CD2E0BA51E45AB89E1F08621CE38BE"><enum>(aa)</enum><text>not later than 90 days after the date on which the facility receives recommendations under subclause (II)(aa), the facility shall submit the new or modified plan and certification; and</text></item><item id="id82D1DFB50E9242D2A9A7881E1C1D22EA"><enum>(bb)</enum><text>not later than 45 days after the date on which the Secretary receives the new or modified plan under item (aa), the Secretary shall review the plan and determine whether the plan is facially deficient.</text></item></subclause><subclause id="id2202c98b787c44a08aa8585f00d4931a"><enum>(IV)</enum><header>Determination not to include additional security measures</header><item id="id1B50A7A02D344A6A8DB8311976DD8537"><enum>(aa)</enum><header>Revocation of certification</header><text>If an expedited approval facility does not agree to include in its site security plan specific additional security measures recommended by the Secretary under subclause (II)(aa), or does not submit a new or modified site security plan in accordance with subclause (III), the Secretary may revoke the certification of the facility by issuing an order under section 2104(a)(1)(B).</text></item><item id="id80C95039F5BC4763859DE077C12D112F"><enum>(bb)</enum><header>Effect of revocation</header><text>If the Secretary revokes the certification of an expedited approval facility under item (aa) by issuing an order under section 2104(a)(1)(B)—</text><subitem id="idEA05BC1F243D4FD1B0D2B64AA391B19D"><enum>(AA)</enum><text>the order shall require the owner or operator of the facility to submit a site security plan or alternative security program for review by the Secretary review under subsection (c)(1); and</text></subitem><subitem id="id29F3A708541E4A4CB3BAEDBF23A1A488"><enum>(BB)</enum><text>the facility shall no longer be eligible to certify a site security plan under this paragraph.</text></subitem></item></subclause><subclause id="ida02ece3076f146cdb423440dc74f9a47"><enum>(V)</enum><header>Facial deficiency</header><text>If the Secretary determines that a new or modified site security plan submitted by an expedited approval facility under subclause (III) is facially deficient—</text><item id="id6E42892C89414C6DA69041C4B7A96F27"><enum>(aa)</enum><text>not later than 120 days after the date of the determination, the owner or operator of the facility shall submit a site security plan or alternative security program for review by the Secretary under subsection (c)(1); and</text></item><item id="id3083E97F6E5141DA9742FE0982FB2799"><enum>(bb)</enum><text>the facility shall no longer be eligible to certify a site security plan under this paragraph.</text></item></subclause></clause></subparagraph><subparagraph id="id86231edbcb744b31980e25f5e356a190"><enum>(H)</enum><header>Templates</header><clause id="id749bbdb19449473797f439094ad80b9b"><enum>(i)</enum><header>In general</header><text>The Secretary may develop prescriptive site security plan templates with specific security measures to meet the risk-based performance standards under subsection (a)(2)(C) for adoption and certification by a covered chemical facility assigned to tier 3 or 4 in lieu of developing and certifying its own plan.</text></clause><clause id="ida4eab9c72bda4dc3a3b8943333fddc6e"><enum>(ii)</enum><header>Applicability of other laws to development and issuance of initial site security plan templates and related guidance</header><text>During the period before the Secretary has met the deadline under subparagraph (B)(i), in developing and issuing, or amending, the site security plan templates under this subparagraph, in issuing guidance for implementation of the templates, and in collecting information from expedited approval facilities, the Secretary shall not be subject to—</text><subclause id="id37DF0C378A2A4E85816B8BA9D27FFDFE"><enum>(I)</enum><text><external-xref legal-doc="usc" parsable-cite="usc/5/553">section 553</external-xref> of title 5, United States Code;</text></subclause><subclause id="idC03779CAD7934CFEB5D2ED3EB76E9DB3"><enum>(II)</enum><text>subchapter I of chapter 35 of title 44, United States Code; or</text></subclause><subclause id="id2F001258324C4108B5644F03B7574531"><enum>(III)</enum><text>section 2107(b) of this title.</text></subclause></clause><clause id="idf3637f4e217749209f69e77edee1cf45"><enum>(iii)</enum><header>Rule of construction</header><text>Nothing in this subparagraph shall be construed to prevent a covered chemical facility from developing and certifying its own security plan in accordance with subparagraph (A).</text></clause></subparagraph><subparagraph id="id2556782068174a3aa2ef4c1de778d077"><enum>(I)</enum><header>Evaluation</header><clause id="id01ff5e0349a04f019aa140214c2be072"><enum>(i)</enum><header>In general</header><text>Not later than 18 months after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall take any appropriate action necessary for a full evaluation of the expedited approval program authorized under this paragraph, including conducting an appropriate number of inspections, as authorized under subsection (d), of expedited approval facilities.</text></clause><clause id="idde754d07698d47d3b7a84078846427d3"><enum>(ii)</enum><header>Report</header><text>Not later than 18 months after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security and the Committee on Energy and Commerce of the House of Representatives a report that contains—</text><subclause id="id3fef5d3ccd1b47ee871f7097a30e5c58"><enum>(I)</enum><item commented="no" display-inline="yes-display-inline" id="idB945DB97A8B44593937E2EA274AD3722"><enum>(aa)</enum><text>the number of eligible facilities using the expedited approval program authorized under this paragraph; and</text></item><item changed="added" id="id400A54D21DB84EFB9AC2C562B9F64E10" indent="up1" reported-display-style="italic"><enum>(bb)</enum><text>the number of facilities that are eligible for the expedited approval program but are using the standard process for developing and submitting a site security plan under subsection (a)(2)(D);</text></item></subclause><subclause id="id062ca6e9d0c44c24931b2f6a520c30da"><enum>(II)</enum><text>any costs and efficiencies associated with the expedited approval program;</text></subclause><subclause id="idac5bacf9a8ef4f46b6e5e2f8f5b82433"><enum>(III)</enum><text>the impact of the expedited approval program on the backlog for site security plan approval and authorization inspections;</text></subclause><subclause id="idf981952f92ae463fa14c00f319e4fcce"><enum>(IV)</enum><text>an assessment of the ability of expedited approval facilities to submit facially sufficient site security plans;</text></subclause><subclause id="id8855529bd5b34f83bff41d9edb75e97c"><enum>(V)</enum><text>an assessment of any impact of the expedited approval program on the security of chemical facilities; and</text></subclause><subclause id="idd7eb9a1408414b818c8ee8b590596484"><enum>(VI)</enum><text>a recommendation by the Secretary on the frequency of compliance inspections that may be required for expedited approval facilities.</text></subclause></clause></subparagraph></paragraph></subsection><subsection id="id212750e424a64594aceb9c9862a3dda6"><enum>(d)</enum><header>Compliance</header><paragraph id="id68caf0e078304220ba3747495069772f"><enum>(1)</enum><header>Audits and inspections</header><subparagraph id="idd7306806ee474026a79e50969ea4e57d"><enum>(A)</enum><header>Definitions</header><text>In this paragraph—</text><clause id="id2cc5014396144a2f9ad78c3560d4c69e"><enum>(i)</enum><text>the term <term>nondepartmental</term>—</text><subclause id="id2471e3d383ed4cda979b2b4f2467ad08"><enum>(I)</enum><text>with respect to personnel, means personnel that is not employed by the Department; and</text></subclause><subclause id="id12176cd02f1545c7bd1c41a1b0f80a61"><enum>(II)</enum><text>with respect to an entity, means an entity that is not a component or other authority of the Department; and</text></subclause></clause><clause id="id45c15b7606ee47c888fca1b7e1db31e0"><enum>(ii)</enum><text>the term <term>nongovernmental</term>—</text><subclause id="id19c43105b92b450a9dd955aee619ed8f"><enum>(I)</enum><text>with respect to personnel, means personnel that is not employed by the Federal Government; and</text></subclause><subclause id="id5314840154854c5fb8c261ef1acf8316"><enum>(II)</enum><text>with respect to an entity, means an entity that is not an agency, department, or other authority of the Federal Government.</text></subclause></clause></subparagraph><subparagraph id="id441950933b764048a95e8c66efc0c8ff"><enum>(B)</enum><header>Authority to conduct audits and inspections</header><text>The Secretary shall conduct audits or inspections under this title using—</text><clause id="id9147b4a135cc4059921007f9ea028695"><enum>(i)</enum><text>employees of the Department;</text></clause><clause id="id4d3851d77cb340c488a2c434e40100ff"><enum>(ii)</enum><text>nondepartmental or nongovernmental personnel approved by the Secretary; or</text></clause><clause commented="no" id="id4F0091F1A9E8447EAB806E9713259290"><enum>(iii)</enum><text>a combination of individuals described in clauses (i) and (ii).</text></clause></subparagraph><subparagraph id="id5f84b73c9f5d4f8eaeee430a7a9647f1"><enum>(C)</enum><header>Support personnel</header><text>The Secretary may use nongovernmental personnel to provide administrative and logistical services in support of audits and inspections under this title.</text></subparagraph><subparagraph id="id460e83f658a449a3a16ea4a86f437f82"><enum>(D)</enum><header>Reporting structure</header><clause id="id4e5d057c12da41dcb68bda6a5736d852"><enum>(i)</enum><header>Nondepartmental and nongovernmental audits and inspections</header><text>Any audit or inspection conducted by an individual employed by a nondepartmental or nongovernmental entity shall be assigned in coordination with a regional supervisor with responsibility for supervising inspectors within the Infrastructure Security Compliance Division of the Department for the region in which the audit or inspection is to be conducted.</text></clause><clause id="iddfdf4bdc379d4389886f317176bb093c"><enum>(ii)</enum><header>Requirement to report</header><text>While an individual employed by a nondepartmental or nongovernmental entity is in the field conducting an audit or inspection under this subsection, the individual shall report to the regional supervisor with responsibility for supervising inspectors within the Infrastructure Security Compliance Division of the Department for the region in which the individual is operating.</text></clause><clause id="id046bea0007b04c09b60206e3f8562592"><enum>(iii)</enum><header>Approval</header><text>The authority to approve a site security plan under subsection (c) or determine if a covered chemical facility is in compliance with an approved site security plan shall be exercised solely by the Secretary or a designee of the Secretary within the Department.</text></clause></subparagraph><subparagraph id="id7f4de75ae8e54b63a6a0f36723bf3d09"><enum>(E)</enum><header>Standards for auditors and inspectors</header><text>The Secretary shall prescribe standards for the training and retraining of each individual used by the Department as an auditor or inspector, including each individual employed by the Department and all nondepartmental or nongovernmental personnel, including—</text><clause id="id2a400c0c4d47462db1dae968b0131f6d"><enum>(i)</enum><text>minimum training requirements for new auditors and inspectors;</text></clause><clause id="id10f6907c8642402ba8ffcb65f93003d2"><enum>(ii)</enum><text>retraining requirements;</text></clause><clause id="id1012418e3d9045949f23bf5e9449c295"><enum>(iii)</enum><text>minimum education and experience levels;</text></clause><clause id="id4e23c7d2038f496586b7841957c2ab90"><enum>(iv)</enum><text>the submission of information as required by the Secretary to enable determination of whether the auditor or inspector has a conflict of interest;</text></clause><clause id="id4cc00e649df448d98af1e425cf305fb3"><enum>(v)</enum><text>the proper certification or certifications necessary to handle chemical-terrorism vulnerability information (as defined in <external-xref legal-doc="usc" parsable-cite="usc/6/27">section 27.105</external-xref> of title 6, Code of Federal Regulations, or any successor thereto);</text></clause><clause id="id64b26cfffe1b41c09af9070566791efd"><enum>(vi)</enum><text>the reporting of any issue of non-compliance with this section to the Secretary within 24 hours; and</text></clause><clause id="idd6323a3dc634468b9a0c201b1ec5fa2b"><enum>(vii)</enum><text>any additional qualifications for fitness of duty as the Secretary may require.</text></clause></subparagraph><subparagraph id="id41a0379ca2704ecd962a35dc82161c5f"><enum>(F)</enum><header>Conditions for nongovernmental auditors and inspectors</header><text>If the Secretary arranges for an audit or inspection under subparagraph (B) to be carried out by a nongovernmental entity, the Secretary shall—</text><clause id="id43b1e8023ec542a1b3c7c0e7b4ec83ea"><enum>(i)</enum><text>prescribe standards for the qualification of the individuals who carry out such audits and inspections that are commensurate with the standards for similar Government auditors or inspectors; and</text></clause><clause id="id967e665432534af3ba7a036fcb4a97ee"><enum>(ii)</enum><text>ensure that any duties carried out by a nongovernmental entity are not inherently governmental functions.</text></clause></subparagraph></paragraph><paragraph id="id375d38526dd54ef9a45be944bf908603"><enum>(2)</enum><header>Personnel surety</header><subparagraph id="id8ab0911a82fc4822a03f36d03a80cb21"><enum>(A)</enum><header>Personnel Surety Program</header><text>For purposes of this title, the Secretary shall establish and carry out a Personnel Surety Program that—</text><clause id="id55d0ce4f331c4977b37da9147b9690a3"><enum>(i)</enum><text>does not require an owner or operator of a covered chemical facility that voluntarily participates in the program to submit information about an individual more than 1 time;</text></clause><clause id="idf3fdfd40904040faa69c307c7bafed2e"><enum>(ii)</enum><text>provides a participating owner or operator of a covered chemical facility with relevant information about an individual based on vetting the individual against the terrorist screening database, to the extent that such feedback is necessary for the facility to be in compliance with regulations promulgated under this title; and</text></clause><clause id="id3125f9630b344e149172421989580e75"><enum>(iii)</enum><text>provides redress to an individual—</text><subclause id="id2a31940dbe3940c09cde87900212b457"><enum>(I)</enum><text>whose information was vetted against the terrorist screening database under the program; and</text></subclause><subclause id="id106ad2bb94ff4aaf8ce8eb183da9ef6a"><enum>(II)</enum><text>who believes that the personally identifiable information submitted to the Department for such vetting by a covered chemical facility, or its designated representative, was inaccurate.</text></subclause></clause></subparagraph><subparagraph id="id76edcdb272694cd38dc40fa9ab95156e"><enum>(B)</enum><header>Personnel Surety Program implementation</header><text>To the extent that a risk-based performance standard established under subsection (a) requires identifying individuals with ties to terrorism—</text><clause commented="no" id="ide3b7dfc92cb045b2a6ce24f4b7e5f9f6"><enum>(i)</enum><text>a covered chemical facility—</text><subclause commented="no" id="id32F58544F23E48F2B963A8D417B799DD"><enum>(I)</enum><text>may satisfy its obligation under the standard by using any Federal screening program that periodically vets individuals against the terrorist screening database, or any successor program, including the Personnel Surety Program established under subparagraph (A); and</text></subclause><subclause commented="no" id="id59D976C9A79D4C2399C928B1D8DB3BD5"><enum>(II)</enum><text>shall—</text><item commented="no" id="id90EDDA128DBF4643AFC0EFE066301351"><enum>(aa)</enum><text>accept a credential from a Federal screening program described in subclause (I) if an individual who is required to be screened presents such a credential; and</text></item><item id="id8ff4ecc1c6c64b4c9404b319add79232"><enum>(bb)</enum><text>address in its site security plan or alternative security program the measures it will take to verify that a credential or documentation from a Federal screening program described in subclause (I) is current;</text></item></subclause></clause><clause id="id3F33C281F8F947E6AF24169EAABF85A7"><enum>(ii)</enum><text>visual inspection shall be sufficient to meet the requirement under clause (i)(II)(bb), but the facility should consider other means of verification, consistent with the facility’s assessment of the threat posed by acceptance of such credentials; and</text></clause><clause id="id3c93c4982ab44d91b94ccaafaec24fa8"><enum>(iii)</enum><text>the Secretary may not require a covered chemical facility to submit any information about an individual unless the individual—</text><subclause id="id9b2c52b9bb4c4232bd743bc64b63d47f"><enum>(I)</enum><text>is to be vetted under the Personnel Surety Program; or</text></subclause><subclause id="idc788741f9e9c4bbe8016d41c187909d3"><enum>(II)</enum><text>has been identified as presenting a terrorism security risk.</text></subclause></clause></subparagraph><subparagraph id="id09a8feaaf4114093a849327ce2bb9230"><enum>(C)</enum><header>Rights unaffected</header><text>Nothing in this section shall supersede the ability—</text><clause id="id64737699DE7E4D359229EEC3839FB390"><enum>(i)</enum><text>of a facility to maintain its own policies regarding the access of individuals to restricted areas or critical assets; or</text></clause><clause id="idE5725CA60F874F709E2B1BBB07BC7DE1"><enum>(ii)</enum><text>of an employing facility and a bargaining agent, where applicable, to negotiate as to how the results of a background check may be used by the facility with respect to employment status.</text></clause></subparagraph></paragraph><paragraph id="id864ff8cba617450b8967224edfd5cd78"><enum>(3)</enum><header>Availability of information</header><text>The Secretary shall share with the owner or operator of a covered chemical facility any information that the owner or operator needs to comply with this section.</text></paragraph></subsection><subsection id="id68c86458d9e04ff2b311b71a562f6e88"><enum>(e)</enum><header>Responsibilities of the Secretary</header><paragraph id="id3f86751a2a81456e8a762aabc95647ad"><enum>(1)</enum><header>Identification of chemical facilities of interest</header><text>In carrying out this title, the Secretary shall consult with the heads of other Federal agencies, States and political subdivisions thereof, relevant business associations, and public and private labor organizations to identify all chemical facilities of interest.</text></paragraph><paragraph id="id225873ab4484405297aea8fa69b24d08"><enum>(2)</enum><header>Risk assessment</header><subparagraph id="id7470ebff6e3b43feb025505e928c10d7"><enum>(A)</enum><header>In general</header><text>For purposes of this title, the Secretary shall develop a security risk assessment approach and corresponding tiering methodology for covered chemical facilities that incorporates the relevant elements of risk, including threat, vulnerability, and consequence.</text></subparagraph><subparagraph id="id2b2d787ee469451888e6307cfd4143df"><enum>(B)</enum><header>Criteria for determining security risk</header><text>The criteria for determining the security risk of terrorism associated with a covered chemical facility shall take into account—</text><clause id="id025ed25d8cf4495d98dcd11a6af01dec"><enum>(i)</enum><text>relevant threat information;</text></clause><clause id="idacc7bd00982747558c953bf4df81b97b"><enum>(ii)</enum><text>potential severe economic consequences and the potential loss of human life in the event of the facility being subject to attack, compromise, infiltration, or exploitation by terrorists; and</text></clause><clause id="id97f1e07f49c1496780562b41e47e2f5c"><enum>(iii)</enum><text>vulnerability of the facility to attack, compromise, infiltration, or exploitation by terrorists.</text></clause></subparagraph></paragraph><paragraph id="id55fc22ec57a64c9fb11c9727ca92d77b"><enum>(3)</enum><header>Changes in tiering</header><subparagraph id="ide33f29b739d94fb593d74e60d3010d77"><enum>(A)</enum><header>Maintenance of records</header><text>The Secretary shall document the basis for each instance in which—</text><clause id="idc21107bf2a1f430da1570c25895d84ad"><enum>(i)</enum><text>tiering for a covered chemical facility is changed; or</text></clause><clause id="idd4fb9252e5024ff4bb29a303668cf596"><enum>(ii)</enum><text>a covered chemical facility is determined to no longer be subject to the requirements under this title.</text></clause></subparagraph><subparagraph id="idc041354006844362bd150b372802734c"><enum>(B)</enum><header>Required information</header><text>The records maintained under subparagraph (A) shall include information on whether and how the Secretary confirmed the information that was the basis for the change or determination described in subparagraph (A).</text></subparagraph></paragraph><paragraph id="id570747179cef481fb70775e920ec988f"><enum>(4)</enum><header>Semiannual performance reporting</header><text>Not later than 6 months after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, and not less frequently than once every 6 months thereafter, the Secretary shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security and the Committee on Energy and Commerce of the House of Representatives a report that includes, for the period covered by the report—</text><subparagraph id="id8ef42d47b9de4349adfd9584cbf7a643"><enum>(A)</enum><text>the number of covered chemical facilities in the United States;</text></subparagraph><subparagraph id="id0119a2d1980048189a074f37e0a8781f"><enum>(B)</enum><text>information—</text><clause id="id00bd57ee2526491a8273917fd362cef6"><enum>(i)</enum><text>describing—</text><subclause id="idfaa5c18b61774357b95999f52be7f7ca"><enum>(I)</enum><text>the number of instances in which the Secretary—</text><item id="id833d6dcccf1b4a9e83659d70bf356c15"><enum>(aa)</enum><text>placed a covered chemical facility in a lower risk tier; or</text></item><item id="ide50d29b11ab24dda9ea5c1fef1303ce7"><enum>(bb)</enum><text>determined that a facility that had previously met the criteria for a covered chemical facility under section 2101(3) no longer met the criteria; and</text></item></subclause><subclause id="id8eec69601a614c20b2472f07d4f74088"><enum>(II)</enum><text>the basis, in summary form, for each action or determination under subclause (I); and</text></subclause></clause><clause id="idcf4a10cf67f64a1fa482422962796616"><enum>(ii)</enum><text>that is provided in a sufficiently anonymized form to ensure that the information does not identify any specific facility or company as the source of the information when viewed alone or in combination with other public information;</text></clause></subparagraph><subparagraph id="idAE9F424C46EC444980724DD3A99345A6"><enum>(C)</enum><text>the average number of days spent reviewing site security or an alternative security program for a covered chemical facility prior to approval;</text></subparagraph><subparagraph id="id24865b65c6f1461b8e077baa79a32727"><enum>(D)</enum><text>the number of covered chemical facilities inspected;</text></subparagraph><subparagraph id="id867d6d27859840959e037c55e06893cd"><enum>(E)</enum><text>the average number of covered chemical facilities inspected per inspector; and</text></subparagraph><subparagraph id="id2d866e5aa2654c698c042861e144d828"><enum>(F)</enum><text>any other information that the Secretary determines will be helpful to Congress in evaluating the performance of the Chemical Facility Anti-Terrorism Standards Program.</text></subparagraph></paragraph></subsection></section><section id="idfab7152384e341b388d21c15c038c7d9"><enum>2103.</enum><header>Protection and sharing of information</header><subsection id="idec1dffb0829043658c80cce4cda2181a"><enum>(a)</enum><header>In general</header><text>Notwithstanding any other provision of law, information developed under this title, including vulnerability assessments, site security plans, and other security related information, records, and documents shall be given protections from public disclosure consistent with the protection of similar information under <external-xref legal-doc="usc" parsable-cite="usc/46/70103">section 70103(d)</external-xref> of title 46, United States Code.</text></subsection><subsection id="id6bbf81d4da284cb4aa11553ec06ec2b0"><enum>(b)</enum><header>Sharing of information with States and local governments</header><text>Nothing in this section shall be construed to prohibit the sharing of information developed under this title, as the Secretary determines appropriate, with State and local government officials possessing a need to know and the necessary security clearances, including law enforcement officials and first responders, for the purpose of carrying out this title, provided that such information may not be disclosed pursuant to any State or local law.</text></subsection><subsection id="id8ce80494708d43a2960efdc130f7659a"><enum>(c)</enum><header>Sharing of information with first responders</header><paragraph id="idfd5deb974ffa41f7912f826f330db795"><enum>(1)</enum><header>Requirement</header><text>The Secretary shall provide to State, local, and regional fusion centers (as that term is defined in section 210A(j)(1)) and State and local government officials, as the Secretary determines appropriate, such information as is necessary to help ensure that first responders are properly prepared and provided with the situational awareness needed to respond to security incidents at covered chemical facilities.</text></paragraph><paragraph id="id06aa0dbccb034ff09d4e6962f6e61e9e"><enum>(2)</enum><header>Dissemination</header><text>The Secretary shall disseminate information under paragraph (1) through a medium or system determined by the Secretary to be appropriate to ensure the secure and expeditious dissemination of such information to necessary selected individuals.</text></paragraph></subsection><subsection id="idbe738245db3842068243e2ae6ea3aadf"><enum>(d)</enum><header>Enforcement proceedings</header><text>In any proceeding to enforce this section, vulnerability assessments, site security plans, and other information submitted to or obtained by the Secretary under this title, and related vulnerability or security information, shall be treated as if the information were classified information.</text></subsection><subsection id="id9a6fff629b4e42b884f18fffc64e31e2"><enum>(e)</enum><header>Availability of information</header><text>Notwithstanding any other provision of law (including <external-xref legal-doc="usc" parsable-cite="usc/5/552">section 552(b)(3)</external-xref> of title 5, United States Code), <external-xref legal-doc="usc" parsable-cite="usc/5/552">section 552</external-xref> of title 5, United States Code (commonly known as the <quote>Freedom of Information Act</quote>) shall not apply to information protected from public disclosure pursuant to subsection (a) of this section.</text></subsection><subsection id="idDAC9623F1AF04F3BBA4E75699CF18AFF"><enum>(f)</enum><header>Sharing of information with Members of Congress</header><text>Nothing in this section shall prohibit the Secretary from disclosing information developed under this title to a Member of Congress in response to a request by a Member of Congress.</text></subsection></section><section id="id6778f152c5604c0796ab7eb611df03c1"><enum>2104.</enum><header>Civil enforcement</header><subsection id="ide09d03f5589d4530928ecfde0477ccd9"><enum>(a)</enum><header>Notice of noncompliance</header><paragraph id="id90fe8c389c3e48a58e7021c7c7de0b9a"><enum>(1)</enum><header>Notice</header><text>If the Secretary determines that a covered chemical facility is not in compliance with this title, the Secretary shall—</text><subparagraph id="id3c483698311c4b6685b1dca1cb054974"><enum>(A)</enum><text>provide the owner or operator of the facility with—</text><clause id="idbe57f771b750475db972ab17b71a3c71"><enum>(i)</enum><text>not later than 14 days after date on which the Secretary makes the determination, a written notification of noncompliance that includes a clear explanation of any deficiency in the security vulnerability assessment or site security plan; and</text></clause><clause id="id0587ecb4c5594b21bcfaa082eb73a609"><enum>(ii)</enum><text>an opportunity for consultation with the Secretary or the Secretary’s designee; and</text></clause></subparagraph><subparagraph id="id25e09fc4fbe842b5bf0afa13b525dc1a"><enum>(B)</enum><text>issue to the owner or operator of the facility an order to comply with this title by a date specified by the Secretary in the order, which date shall be not later than 180 days after the date on which the Secretary issues the order.</text></subparagraph></paragraph><paragraph id="id3995E7BD4D0148AD914CFFC61D8C7434"><enum>(2)</enum><header>Continued noncompliance</header><text>If an owner or operator remains noncompliant after the procedures outlined in paragraph (1) have been executed, or demonstrates repeated violations of this title, the Secretary may enter an order in accordance with this section assessing a civil penalty, an order to cease operations, or both.</text></paragraph></subsection><subsection id="id487fada9759e46e59a411ab913f4dfe9"><enum>(b)</enum><header>Civil penalties</header><paragraph id="id27602401cbaa42088bd54a9da534af76"><enum>(1)</enum><header>Violations of orders</header><text>Any person who violates an order issued under this title shall be liable for a civil penalty under <external-xref legal-doc="usc" parsable-cite="usc/46/70119">section 70119(a)</external-xref> of title 46, United States Code.</text></paragraph><paragraph id="idf30cad5c35e2494a8e717f0dde7b43ac"><enum>(2)</enum><header>Non-reporting chemical facilities of interest</header><text>Any owner of a chemical facility of interest who fails to comply with, or knowingly submits false information under, this title or the CFATS regulations shall be liable for a civil penalty under <external-xref legal-doc="usc" parsable-cite="usc/46/70119">section 70119(a)</external-xref> of title 46, United States Code.</text></paragraph></subsection><subsection id="idc311c4ebcc984534affa29528cc77024"><enum>(c)</enum><header>Emergency orders</header><paragraph id="idf60404b2908a49c0b0d1edfaf16d5bfe"><enum>(1)</enum><header>In general</header><text>Notwithstanding subsection (a) or any site security plan or alternative security program approved under this title, if the Secretary determines that there is an imminent threat of death, serious illness, or severe personal injury, due to a violation of this title or the risk of a terrorist incident that may affect a chemical facility of interest, the Secretary—</text><subparagraph id="id1b4f092404d24797a0de1aad74f1fa58"><enum>(A)</enum><text>shall consult with the facility, if practicable, on steps to mitigate the risk; and</text></subparagraph><subparagraph id="idF5C4519D456F4A39931080523B972848"><enum>(B)</enum><text>may order the facility, without notice or opportunity for a hearing, effective immediately or as soon as practicable, to—</text><clause id="ida7221defdd314e68802241b837d3fea8"><enum>(i)</enum><text>implement appropriate emergency security measures; or</text></clause><clause id="iddc4a0769bb0e4caab77994e5e4c8e0e7"><enum>(ii)</enum><text>cease or reduce some or all operations, in accordance with safe shutdown procedures, if the Secretary determines that such a cessation or reduction of operations is the most appropriate means to address the risk.</text></clause></subparagraph></paragraph><paragraph id="id7b69073109a8402fa04b8c2901f7af3c"><enum>(2)</enum><header>Limitation on delegation</header><text>The Secretary may not delegate the authority under paragraph (1) to any official other than the Under Secretary responsible for overseeing critical infrastructure protection, cybersecurity, and other related programs of the Department appointed under section 103(a)(1)(H).</text></paragraph><paragraph id="id17b19c9d7a66491bbda2bfdf9756a799"><enum>(3)</enum><header>Limitation on authority</header><text>The Secretary may exercise the authority under this subsection only to the extent necessary to abate the imminent threat determination under paragraph (1).</text></paragraph><paragraph id="id99eda55faa444dbdaae5abb2c67a72f9"><enum>(4)</enum><header>Due process for facility owner or operator</header><subparagraph id="id42daa647f22241d6a9798b7f0ba76e91"><enum>(A)</enum><header>Written orders</header><text>An order issued by the Secretary under paragraph (1) shall be in the form of a written emergency order that—</text><clause id="id3f6a00e4d71a44969e3072934cfc4089"><enum>(i)</enum><text>describes the violation or risk that creates the imminent threat;</text></clause><clause id="idc17c4ac7291642a78dd120d22b843d49"><enum>(ii)</enum><text>states the security measures or order issued or imposed; and</text></clause><clause id="id005cb375ff6e409ea72b0f81dbd841c3"><enum>(iii)</enum><text>describes the standards and procedures for obtaining relief from the order.</text></clause></subparagraph><subparagraph id="idacab9314bce34e2782badc178e52c1d1"><enum>(B)</enum><header>Opportunity for review</header><text>After issuing an order under paragraph (1) with respect to a chemical facility of interest, the Secretary shall provide for review of the order under <external-xref legal-doc="usc" parsable-cite="usc/5/554">section 554</external-xref> of title 5 if a petition for review is filed not later than 20 days after the date on which the Secretary issues the order.</text></subparagraph><subparagraph id="idbcdd232726d546cba9f55d76712bba26"><enum>(C)</enum><header>Expiration of effectiveness of order</header><text>If a petition for review of an order is filed under subparagraph (B) and the review under that paragraph is not completed by the last day of the 30-day period beginning on the date on which the petition is filed, the order shall vacate automatically at the end of that period unless the Secretary determines, in writing, that the imminent threat providing a basis for the order continues to exist.</text></subparagraph></paragraph></subsection><subsection id="id0e00b77408cb4719aca218a7bf61016c"><enum>(d)</enum><header>Right of action</header><text display-inline="yes-display-inline">Nothing in this title confers upon any person except the Secretary or his or her designee a right of action against an owner or operator of a covered chemical facility to enforce any provision of this title.</text></subsection></section><section id="id230209F3F5ED42EA878BE4FB1E826E26"><enum>2105.</enum><header>Whistleblower protections</header><subsection id="idca70b7b126a444fdb2e8a556d5b7a455"><enum>(a)</enum><header>Procedure for reporting problems</header><paragraph id="id94720e122ab540449a96d7e69c7ee565"><enum>(1)</enum><header>Establishment of a reporting procedure</header><text>Not later than 180 days after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall establish, and provide information to the public regarding, a procedure under which any employee or contractor of a chemical facility of interest may submit a report to the Secretary regarding a violation of a requirement under this title.</text></paragraph><paragraph id="idbfbddbc4366e4911817a10c2ec0ba469"><enum>(2)</enum><header>Confidentiality</header><text>The Secretary shall keep confidential the identity of an individual who submits a report under paragraph (1) and any such report shall be treated as a record containing protected information to the extent that the report does not consist of publicly available information.</text></paragraph><paragraph id="iddb7864b4786f4608a3bf2cb8a1bdb493"><enum>(3)</enum><header>Acknowledgment of receipt</header><text>If a report submitted under paragraph (1) identifies the individual making the report, the Secretary shall promptly respond to the individual directly and shall promptly acknowledge receipt of the report.</text></paragraph><paragraph id="idF85E3E599E024B14959CA9E78620F0AF"><enum>(4)</enum><header>Steps to address problems</header><text>The Secretary—</text><subparagraph id="id0305CE717806416A9026E724F95C4A3E"><enum>(A)</enum><text>shall review and consider the information provided in any report submitted under paragraph (1); and</text></subparagraph><subparagraph id="idF0174F601ACD44899D589C662AE224FF"><enum>(B)</enum><text>may take action under section 2104 of this title if necessary to address any substantiated violation of a requirement under this title identified in the report.</text></subparagraph></paragraph><paragraph id="id59A034E3BF90469D84B1C42F46F285D8"><enum>(5)</enum><header>Due process for facility owner or operator</header><subparagraph id="id4186A4A7521C4CC08B61BE50A89E69E8"><enum>(A)</enum><header>In general</header><text>If, upon the review described in paragraph (4), the Secretary determines that a violation of a provision of this title, or a regulation prescribed under this title, has occurred, the Secretary may—</text><clause id="idA5D92302127546C5A5C0B34D6D73A378"><enum>(i)</enum><text>institute a civil enforcement under section 2104(a) of this title; or</text></clause><clause id="id706102F7530C4E03A77A7EC5315414CD"><enum>(ii)</enum><text>if the Secretary makes the determination under section 2104(c), issue an emergency order.</text></clause></subparagraph><subparagraph id="id361A7043DFC94AD1B397F4DCC6B0F37B"><enum>(B)</enum><header>Written orders</header><text>The action of the Secretary under paragraph (4) shall be in a written form that—</text><clause id="id87AE75BBDE084E708875230F0584A654"><enum>(i)</enum><text>describes the violation;</text></clause><clause id="id5FC0E8C27E6F4D3B8109976894949A4F"><enum>(ii)</enum><text>states the authority under which the Secretary is proceeding; and</text></clause><clause id="idA9C6B5FB77B0448781A928AF9CF3B7C2"><enum>(iii)</enum><text>describes the standards and procedures for obtaining relief from the order.</text></clause></subparagraph><subparagraph id="id5CDAAE38F8584D1CA9EE1DF1E08ACFC5"><enum>(C)</enum><header>Opportunity for review</header><text>After taking action under paragraph (4), the Secretary shall provide for review of the action if a petition for review is filed within 20 calendar days of the date of issuance of the order for the action.</text></subparagraph><subparagraph id="id63343957F55442588BF3AF28FB72DBF7"><enum>(D)</enum><header>Expiration of effectiveness of order</header><text>If a petition for review of an action is filed under subparagraph (C) and the review under that subparagraph is not completed by the end of the 30-day period beginning on the date the petition is filed, the action shall cease to be effective at the end of such period unless the Secretary determines, in writing, that the violation providing a basis for the action continues to exist.</text></subparagraph></paragraph><paragraph id="idd3d49de7a54240e28bd58cb8c71fd091"><enum>(6)</enum><header>Retaliation prohibited</header><subparagraph id="idc9e742429e604fc78ae18cfe8c6e18fe"><enum>(A)</enum><header>In general</header><text>An owner or operator of a chemical facility of interest or agent thereof may not discharge an employee or otherwise discriminate against an employee with respect to the compensation provided to, or terms, conditions, or privileges of the employment of, the employee because the employee (or an individual acting pursuant to a request of the employee) submitted a report under paragraph (1).</text></subparagraph><subparagraph id="ideb581ae621194dc9bf604169a501f39c"><enum>(B)</enum><header>Exception</header><text>An employee shall not be entitled to the protections under this section if the employee—</text><clause id="idff26761033f04d2aba97a885c4d7ff9b"><enum>(i)</enum><text>knowingly and willfully makes any false, fictitious, or fraudulent statement or representation; or</text></clause><clause id="idca9a30d5f97b4624b5017bed98731818"><enum>(ii)</enum><text>uses any false writing or document knowing the writing or document contains any false, fictitious, or fraudulent statement or entry.</text></clause></subparagraph></paragraph></subsection><subsection id="id1cc328e83adb4f0eae207107db29d75b"><enum>(b)</enum><header>Protected disclosures</header><text>Nothing in this title shall be construed to limit the right of an individual to make any disclosure—</text><paragraph id="idf634a82552e241c7aa8f669aca737a92"><enum>(1)</enum><text>protected or authorized under section <external-xref legal-doc="usc" parsable-cite="usc/5/2302">2302(b)(8)</external-xref> or <external-xref legal-doc="usc" parsable-cite="usc/5/7211">7211</external-xref> of title 5, United States Code;</text></paragraph><paragraph id="ideb8f0ba79fa24e4a945a7435c88ebdf8"><enum>(2)</enum><text>protected under any other Federal or State law that shields the disclosing individual against retaliation or discrimination for having made the disclosure in the public interest; or</text></paragraph><paragraph id="id013c80c3c26441e588c6d8ced5700902"><enum>(3)</enum><text>to the Special Counsel of an agency, the inspector general of an agency, or any other employee designated by the head of an agency to receive disclosures similar to the disclosures described in paragraphs (1) and (2).</text></paragraph></subsection><subsection id="id7f63f0bce7894dfaa803458f7bab680c"><enum>(c)</enum><header>Publication of rights</header><text>The Secretary, in partnership with industry associations and labor organizations, shall make publicly available both physically and online the rights that an individual who discloses information, including security-sensitive information, regarding problems, deficiencies, or vulnerabilities at a covered chemical facility would have under Federal whistleblower protection laws or this title.</text></subsection><subsection id="id60e0c220a5a64d4aa5f6a65914889f8a"><enum>(d)</enum><header>Protected information</header><text>All information contained in a report made under this subsection (a) shall be protected in accordance with section 2103.</text></subsection></section><section id="id092a9db61a674772b422c84cfd1000a0"><enum>2106.</enum><header>Relationship to other laws</header><subsection id="id625a13f60dee4484ae49244b70a93ae9"><enum>(a)</enum><header>Other Federal laws</header><text>Nothing in this title shall be construed to supersede, amend, alter, or affect any Federal law that—</text><paragraph id="idF16ABA17B4814651895B30D3550C9B09"><enum>(1)</enum><text>regulates (including by requiring information to be submitted or made available) the manufacture, distribution in commerce, use, handling, sale, other treatment, or disposal of chemical substances or mixtures; or</text></paragraph><paragraph id="id657db4c082734fddb6fbf620e5e5e05f"><enum>(2)</enum><text>authorizes or requires the disclosure of any record or information obtained from a chemical facility under any law other than this title.</text></paragraph></subsection><subsection id="id8cef0193b3374f428bb7eccb5b7ae40f"><enum>(b)</enum><header>States and political subdivisions</header><text>This title shall not preclude or deny any right of any State or political subdivision thereof to adopt or enforce any regulation, requirement, or standard of performance with respect to chemical facility security that is more stringent than a regulation, requirement, or standard of performance issued under this section, or otherwise impair any right or jurisdiction of any State with respect to chemical facilities within that State, unless there is an actual conflict between this section and the law of that State.</text></subsection></section><section id="idb3b4606f391a4cdd9187362d51da6f8c"><enum>2107.</enum><header>CFATS regulations</header><subsection id="idc0b4d488f0c14f309d0f22356a737c32"><enum>(a)</enum><header>General authority</header><text>The Secretary may, in accordance with <external-xref legal-doc="usc-chapter" parsable-cite="usc-chapter/5/5">chapter 5</external-xref> of title 5, United States Code, promulgate regulations or amend existing CFATS regulations to implement the provisions under this title.</text></subsection><subsection id="idca6b8a46c3b44ed9b5c5100b4ce22c3a"><enum>(b)</enum><header>Existing CFATS regulations</header><paragraph id="idE7C518AC2E684FF89D1A825B3E212E49"><enum>(1)</enum><header>In general</header><text>Notwithstanding section 4(b) of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, each existing CFATS regulation shall remain in effect unless the Secretary amends, consolidates, or repeals the regulation.</text></paragraph><paragraph id="id24A53086DE3D4DC99562C444C2209F10"><enum>(2)</enum><header>Repeal</header><text>Not later than 30 days after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall repeal any existing CFATS regulation that the Secretary determines is duplicative of, or conflicts with, this title.</text></paragraph></subsection><subsection id="idd19935de809d44e6b4f07d7dd90d5462"><enum>(c)</enum><header>Authority</header><text>The Secretary shall exclusively rely upon authority provided under this title in—</text><paragraph id="id35c74d1b3db1452f8db45be66e0aac94"><enum>(1)</enum><text>determining compliance with this title;</text></paragraph><paragraph id="id867005f1dbc74d8e9a418982b78edc17"><enum>(2)</enum><text>identifying chemicals of interest; and</text></paragraph><paragraph id="idf13ab36ec6a942769286192f03c3709b"><enum>(3)</enum><text>determining security risk associated with a chemical facility.</text></paragraph></subsection></section><section id="id610f9f5a0cd3406eac7ec7286196adc5"><enum>2108.</enum><header>Small covered chemical facilities</header><subsection id="id2ebf25a46695447bb1ff528b953e35d7"><enum>(a)</enum><header>Definition</header><text>In this section, the term <term>small covered chemical facility</term> means a covered chemical facility that—</text><paragraph id="idcc8bbea378494945bf47abc57528308b"><enum>(1)</enum><text>has fewer than 100 employees employed at the covered chemical facility; and</text></paragraph><paragraph id="idd394b8adbc4a4e9c95748627d7664a3b"><enum>(2)</enum><text>is owned and operated by a small business concern (as defined in section 3 of the Small Business Act (<external-xref legal-doc="usc" parsable-cite="usc/15/632">15 U.S.C. 632</external-xref>)).</text></paragraph></subsection><subsection id="idd2ebd39ca0364ebe9a33d964eb29ed3e"><enum>(b)</enum><header>Assistance to facilities</header><text>The Secretary may provide guidance and, as appropriate, tools, methodologies, or computer software, to assist small covered chemical facilities in developing the physical security, cybersecurity, recordkeeping, and reporting procedures required under this title.</text></subsection><subsection id="idcfac46b7b07a468b96e3521fbf56bd44"><enum>(c)</enum><header>Report</header><text>The Secretary shall submit to the Committee on Homeland Security and Governmental Affairs of the Senate and the Committee on Homeland Security and the Committee on Energy and Commerce of the House of Representatives a report on best practices that may assist small covered chemical facilities in development of physical security best practices.</text></subsection></section><section id="id67579722b59c41b0be342dd4039b729f"><enum>2109.</enum><header>Outreach to chemical facilities of interest</header><text display-inline="no-display-inline">Not later than 90 days after the date of enactment of the <short-title>Protecting and Securing Chemical Facilities from Terrorist Attacks Act of 2014</short-title>, the Secretary shall establish an outreach implementation plan, in coordination with the heads of other appropriate Federal and State agencies, relevant business associations, and public and private labor organizations, to—</text><paragraph id="id49ce4c63aada45a8b3005a252cb5338a"><enum>(1)</enum><text>identify chemical facilities of interest; and</text></paragraph><paragraph id="id3b5f0e52aff341179a0b5416edf08b4d"><enum>(2)</enum><text>make available compliance assistance materials and information on education and training.</text></paragraph></section>

Chemical Facility Anti-Terrorism Standards Program

(a)

In general

The Homeland Security Act of 2002 (6 U.S.C. 101 et seq.) is amended by adding at the end the following:

(b)

Clerical amendment

The table of contents in section 1(b) of the Homeland Security Act of 2002 (Public Law 107–196; 116 Stat. 2135) is amended by adding at the end the following:

TITLE XXI—CHEMICAL FACILITY ANTI–TERRORISM STANDARDS

Sec. 2101. Definitions.

Sec. 2102. Chemical Facility Anti-Terrorism Standards Program.

Sec. 2103. Protection and sharing of information.–

Sec. 2104. Civil enforcement.

Sec. 2105. Whistleblower protections.

Sec. 2106. Relationship to other laws.

Sec. 2107. CFATS regulations.

Sec. 2108. Small covered chemical facilities.

Sec. 2109. Outreach to chemical facilities of interest.