action plan. The corrective action plan shall include a timeline and a corrective action plan with the goal of eliminating the waiver and being compliant with existing standards. (4) The waiver may be approved by the Director (or acting Director) of U.S. Immigration and Customs Enforcement for a specified period of time not to exceed 90 days. (5) The Director (or acting Director) shall notify the Congress of, and post online, any approved request within 3 business days. (6) The waiver may be reapproved every 90 days. Any approval must be posted online and submitted to Congress within 3 business days. (7) After 1 year, any reapproval shall be approved by the Secretary, the Chief Financial Officer of U.S. Immigration and Customs Enforcement, and the Director (or acting Director) of U.S. Immigration and Customs Enforcement, who shall publish jointly justification for the approval. (c) Quality assurance surveillance plan The Director of U.S. Immigration and Customs Enforcement shall include a quality assurance surveillance plan in all new immigration detention facility contracts and agreements. The Director shall submit a report to the Congress not later than 120 days after the date of the enactment of this Act on plans to include quality assurance surveillance plans in existing contacts and agreements. (d) Reports on financial penalties (1) Penalties imposed Not later than 30 days after the date of the enactment of this Act, and every 30 days thereafter, the Director of U.S. Immigration and Customs Enforcement shall report to Congress and publicly post online any financial penalties imposed on an immigration detention facility, including temporary withholding of payment under a contract. (2) Penalties not imposed Not later than 2 years after the date of the enactment of this Act, and every 2 years thereafter, the Secretary of Homeland Security shall report to Congress and publicly post online a report analyzing a sample of cases with respect to which the Secretary identified a failure to meet a detention standard