1. Short title This Act may be cited as the Safe and Secure Federal Websites Act of 2017 . 2. Ensuring functionality and security of new Federal websites that collect personally identifiable information (a) Certification requirement (1) In general Except as otherwise provided under this subsection, an agency may not deploy or make available to the public a new Federal PII website until the date on which the chief information officer of the agency submits a certification to Congress that the website is fully functional and secure. (2) Transition In the case of a new Federal PII website that is operational on the date of the enactment of this Act, paragraph (1) shall not apply until the end of the 90-day period beginning on such date of enactment. If the certification required under paragraph (1) for such website has not been submitted to Congress before the end of such period, the head of the responsible agency shall render the website inaccessible to the public until such certification is submitted to Congress. (3) Exception for beta website with explicit permission Paragraph (1) shall not apply to a website (or portion thereof) that is in a development or testing phase, if the following conditions are met: (A) A member of the public may access PII-related portions of the website only after executing an agreement that acknowledges the risks involved. (B) No agency compelled, enjoined, or otherwise provided incentives for such a member to access the website for such purposes. (4) Construction Nothing in this section shall be construed as applying to a website that is operated entirely by an entity (such as a State or locality) that is independent of the Federal Government, regardless of the receipt of funding in support of such website from the Federal Government. (b) Definitions In this section: (1) Agency The term agency has the meaning given that term under section 551 of title 5, United States Code. (2) Fully functional The term fully functional means, with respect to a new Federal PII website, that the