Paratransit software and technology minimum standards

(a) In general Section 5310 of title 49, United States Code, is amended by adding at the end— (j) Paratransit software minimum standards (1) In general No later than 1 year after enactment of this Act, the Administrator shall issue minimum standards for Americans with Disabilities (ADA) paratransit software and technologies procured pursuant to this section. (2) Standards The Administrator shall consider the following in developing the guidance described in the subsection (a): (A) Accessibility of applications including compliance with Web Content Accessibility Guidelines 2.1 (WCAG 2.1) or any subsequent version of such Guidelines. (B) Cybersecurity of applications including compliance with System and Organization Controls 2 (SOC 2) and ISO 27001, and any successor standard. (C) Data storage on cloud infrastructure located in the United States. (D) Integration of multiple service providers—including but not limited to paratransit operated by a transit agency or contractor, taxis, and transportation networking companies (TNC)—through API or related mechanisms, and the ability to move trips between service providers. (E) Real-time route optimization and dynamic trip scheduling, with the ability to utilize some of the extra capacity on ADA paratransit fleet to provide same-day paratransit service. (F) Ability to book on digital booking interfaces that can integrate all service providers. (G) Data sharing and agency portal systems, including an open API to enable integration to third party systems while protecting personally identifiable information of riders and capable, if approved by the recipient, of providing the recipient with the ability to share data with their metropolitan planning organization, State, and local government access to anonymized data for transportation planning, real time operations data, and rules. (H) Safeguards necessary to ensure that all data generated by the provision of service or paid for by the recipient is owned by the recipient and cannot be withheld or limited, nor may the provider condition access to such data, in any manner. (I) Such other considerations as the Administrator determines necessary to advance the needs of riders, transit agencies and providers, and that ensure that investments are future-proofed to accommodate emerging technological and operational developments. (3) Stakeholder consultation In developing the minimum standards described in paragraph (1), the Administrator shall consult with relevant stakeholders including— (A) transit agencies and transit industry associations; (B) paratransit riders with disabilities; (C) organizations representing riders with disabilities; (D) United States Access Board; (E) labor organizations representing frontline public transportation workers; (F) transit technology providers; (G) for-hire transportation providers; and (H) cybersecurity experts. (4) Limitation Beginning not later than 1 year after final minimum standards are published by the Administrator, no funds awarded under section 5307 or 5310 shall be used to acquire or utilize third-party software for the provision of paratransit services that does not meet the minimum standards established under paragraph (1). (5) Final standards Beginning not later than 2 years after final minimum standards are published by the Administrator, no funds awarded under section 5311 shall be used to acquire or utilize third-party software for the provision of paratransit services that does not meet the minimum standards established under paragraph (1)..