Amend HB 20 (house committee printing) as follows:
(1)  On page 3, strike lines 8 through 10, and substitute the following:
applications;
(3)  procedures for renewal and revocation of accreditations; and
(4)  procedures for ensuring the data privacy and security of applicant information.
(2)  On page 3, between lines 23 and 24, insert the following:
(c)  The attorney general shall ensure the registry maintained under Subsection (a) and any materials used by an accredited nonprofit organization to display the seal prescribed by the attorney general under Subsection (b) include a clear and conspicuous statement that accreditation under this subchapter is voluntary and does not constitute this state's endorsement or approval of the organization.
(3)  On page 4, line 14, between "HOTLINE." and "The", insert "(a)".
(4)  On page 4, between lines 20 and 21, insert the following:
(b)  The attorney general shall:
(1)  maintain a record of each report submitted under this section;
(2)  review each submitted report of a suspected fraud to determine whether an investigation is warranted;
(3)  investigate each credible report of a suspected fraud, regardless of the total number of similar complaints submitted;
(4)  refer any report of a suspected fraud involving a potential criminal offense to an appropriate law enforcement authority; and
(5)  provide aggregate, non-identifying information to the public on the number and types of reports submitted through the hotline during each declared disaster after the conclusion of the disaster.
Sec. 418.410.  DATA PRIVACY AND SECURITY. (a) The attorney general by rule shall ensure any personal or organizational information compiled under this subchapter is:
(1)  limited to information necessary to determine a nonprofit organization's eligibility for initial accreditation and to maintain accreditation; and
(2)  collected in the least intrusive manner possible.
(b)  The attorney general shall provide to each nonprofit organization applying for accreditation clear notice describing:
(1)  the specific types of information collected;
(2)  the purposes for which the collected information will be used; and
(3)  whether and with whom the collected information will be shared.
(c)  Information collected under this subchapter may not be:
(1)  used for any purpose other than a purpose related to a nonprofit organization's accreditation;
(2)  sold, rented, or otherwise provided to a third party for commercial purposes; or
(3)  shared with another governmental entity except as required by law or for a purpose directly related to administration of the accreditation program.
(d)  The attorney general shall establish and implement reasonable administrative, technical, and physical protections to maintain the confidentiality, integrity, and availability of information collected under this subchapter, including protections for the secure storage, transmission, and disposal of collected information.
(e)  The attorney general shall publish in a publicly accessible location on the attorney general's Internet website a description of the data management practices for the accreditation program, including:
(1)  the categories of information collected from each nonprofit organization applicant;
(2)  authorized uses of the collected information;
(3)  the length of time the collected information is retained; and
(4)  the measures in place to protect the collected information from unauthorized access or disclosure.
Sec. 418.411.  REPORT TO LEGISLATURE. The attorney general shall submit to the legislature an annual report evaluating the operation of the accreditation program under this subchapter, including:
(1)  the number of nonprofit organizations accredited;
(2)  use and public recognition of the accreditation seal prescribed by the attorney general;
(3)  any impact the program may have on charitable giving during a declared disaster, to the extent data is available;
(4)  any impact on nonprofit organizations in this state, including participation rates, administrative burden, and perceived benefits or challenges of accreditation; and
(5)  legislative recommendations for improvements to the program.