<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="billres.xsl"?>
<!DOCTYPE bill PUBLIC "-//US Congress//DTDs/bill.dtd//EN" "bill.dtd">
<bill bill-stage="Introduced-in-Senate" public-private="public"><metadata xmlns:dc="http://purl.org/dc/elements/1.1/">
<dublinCore>
<dc:title>113 S2981 IS: Secure Data Act of 2014</dc:title>
<dc:publisher>U.S. Senate</dc:publisher>
<dc:date>2014-12-04</dc:date>
<dc:format>text/xml</dc:format>
<dc:language>EN</dc:language>
<dc:rights>Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain.</dc:rights>
</dublinCore>
</metadata>
<form>
<distribution-code display="yes">II</distribution-code><congress>113th CONGRESS</congress><session>2d Session</session><legis-num>S. 2981</legis-num><current-chamber>IN THE SENATE OF THE UNITED STATES</current-chamber><action><action-date date="20141204">December 4, 2014</action-date><action-desc><sponsor name-id="S247">Mr. Wyden</sponsor> introduced the following bill; which was read twice and referred to the <committee-name committee-id="SSCM00">Committee on Commerce, Science, and Transportation</committee-name></action-desc></action><legis-type>A BILL</legis-type><official-title>To prohibit Federal agencies from mandating the deployment of vulnerabilities in data security
			 technologies. </official-title></form><legis-body><section id="idA28B175AC82F4057B9959F044EC0D5F9" section-type="section-one"><enum>1.</enum><header>Short title</header><text display-inline="no-display-inline">This Act may be cited as the <quote><short-title>Secure Data Act of 2014</short-title></quote>.</text></section><section id="id1DF21550CAF249CD93FCEDD999602972" section-type="subsequent-section"><enum>2.</enum><header>Prohibition on data security vulnerability mandates</header><subsection id="idF6579ABD61D14E61ABBAFD1064C18BF7"><enum>(a)</enum><header>In general</header><text>Except as provided in subsection (b), no agency may mandate that a manufacturer, developer, or
			 seller of
			 covered products design or alter the security functions in its
			 product or service to allow the
			 surveillance of any user of such product or
			 service, or to allow the physical search of such product, by any agency.</text></subsection><subsection id="id3FE5FC35D5224E1ABCEF1F3AB13BCC22"><enum>(b)</enum><header>Exception</header><text>Subsection (a) shall not apply to mandates authorized under the Communications Assistance for Law
			 Enforcement Act (<external-xref legal-doc="usc" parsable-cite="usc/47/1001">47 U.S.C. 1001 et seq.</external-xref>).</text></subsection><subsection id="id64E63FF4F4DC461E89BAD4C7417CCF15"><enum>(c)</enum><header>Definitions</header><text>In this section—</text><paragraph id="id1CE5F39FB3EC42F98FDB47074C790B35"><enum>(1)</enum><text>the term <term>agency</term> has the meaning given the term in <external-xref legal-doc="usc" parsable-cite="usc/44/3502">section 3502</external-xref> of title 44, United States Code; and</text></paragraph><paragraph id="id14DED91E766247BB9C207B029DFD61DE"><enum>(2)</enum><text>the term <term>covered product</term> means any computer hardware, computer software, or electronic device that is made available to the
			 general public.</text></paragraph></subsection></section></legis-body></bill>


