Sec. 537.
198 words·~1 min read·
/bill/113/hr/2217/unknown/section-537·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Any company that collects or retains personal information directly from any individual who participates in the Registered Traveler or successor program of the Transportation Security Administration shall safeguard and dispose of such information in accordance with the requirements in— the National Institute for Standards and Technology Special Publication 800–30, entitled Risk Management Guide for Information Technology Systems ; the National Institute for Standards and Technology Special Publication 800–53, Revision 3, entitled Recommended Security Controls for Federal Information Systems and Organizations ; and any supplemental standards established by the Administrator of the Transportation Security Administration (referred to in this section as the Administrator ).
The airport authority or air carrier operator that sponsors the company under the Registered Traveler program shall be known as the Sponsoring Entity . The Administrator shall require any company covered by subsection
(a)to provide, not later than 30 days after the date of enactment of this Act, to the Sponsoring Entity written certification that the procedures used by the company to safeguard and dispose of information are in compliance with the requirements under subsection (a). Such certification shall include a description of the procedures used by the company to comply with such requirements.