3.0.0 1326 2023-01-13T04:49:50Z 2023-01-13T04:49:50Z Senate S S 2005-06-28 109 ssju00 Judiciary Committee Senate Standing Reported by 2005-10-20T17:57:48Z Markup by 2005-10-20T16:35:46Z Referred to 2005-06-28T23:33:12Z 2005-10-20 Senate Placed on Senate Legislative Calendar under General Orders. Calendar No. 252. Calendars 2005-10-20 ssju00 Judiciary Committee Senate Committee on the Judiciary. Reported by Senator Specter without amendment. Without written report. Committee 2005-10-20 Committee on the Judiciary. Reported by Senator Specter without amendment. Without written report. Committee 14000 9 Library of Congress ssju00 Judiciary Committee 2005-10-20 ssju00 Judiciary Committee Senate Committee on the Judiciary. Ordered to be reported without amendment favorably. Committee 2005-06-28 ssju00 Judiciary Committee Senate Read twice and referred to the Committee on the Judiciary. IntroReferral 2005-06-28 Introduced in Senate IntroReferral 10000 9 Library of Congress S001141 Sen. Sessions, Jeff [R-AL] Jeff Sessions R AL N S000059 Sen. Santorum, Rick [R-PA] RICK SANTORUM R PA 2006-09-29 False 2006-03-10T06:00:00Z S. 1326, Notification of Risk to Personal Data Act http://www.cbo.gov/publication/17652 <p>Cost estimate for the bill as reported by the Senate Committee on the Judiciary on October 20, 2005</p> 2006-03-10T06:00:00Z S. 1326, Notification of Risk to Personal Data Act https://www.cbo.gov/publication/17652 Cost estimate for the bill as reported by the Senate Committee on the Judiciary on October 20, 2005 Science, Technology, Communications Civil actions and liability Commerce Computer security measures Consumer credit Crime and Law Enforcement Damages Data banks Electronic government information Federal preemption Finance and Financial Sector Fines (Penalties) Government Operations and Politics Government liability Government publicity Identification devices Identity theft Injunctions Internet Law Liability (Law) Right of privacy State laws Telephone Web sites Science, Technology, Communications 00 2005-06-28 Introduced in Senate 2005-09-30T15:43:20Z Notification of Risk to Personal Data Act - Requires any agency or person that owns or licenses computerized data containing sensitive personal information to: (1) implement and maintain reasonable security and notification procedures and practices (appropriate to the size and nature of the agency or person and the nature of the information) to protect sensitive personal information from unauthorized access, destruction, use, modification, or disclosure; and (2) notify any individual whose sensitive personal information was compromised if such individual is known to be a U.S. resident (permits a federal law enforcement agency of domestic or foreign jurisdiction to delay notification if notification would impede a criminal or civil investigation).

Requires any agency or person in possession of computerized data containing sensitive personal information that it does not own or license to notify the entity from whom it received the information if the security of that information was compromised, resulting in a significant risk of identity theft. Sets forth provisions regarding the timeliness of notification, the methods and contents of notice, and the duty to coordinate with consumer reporting agencies.

Establishes civil remedies for failure to provide notice of a security breach. Authorizes enforcement by state Attorneys General on behalf of residents of the state.

]]> 80 2005-10-20 Reported to Senate without amendment 2006-03-28T22:55:09Z (This measure has not been amended since it was introduced. The summary has been expanded because action occurred on the measure.)

Notification of Risk to Personal Data Act - Requires any agency or person (agency) that owns or licenses computerized data containing sensitive personal information to: (1) implement and maintain reasonable security and notification procedures and practices to protect sensitive personal information from unauthorized access, destruction, use, modification, or disclosure; and (2) notify any U.S. resident whose sensitive personal information was compromised. Permits a federal law enforcement agency to delay notification if notification would impede an investigation.

Requires any agency in possession of computerized data containing sensitive personal information that it does not own or license to notify the entity from whom it received the information if the security of that information was compromised, resulting in a significant risk of identity theft.

Sets forth provisions regarding: (1) the timeliness of notification; (2) the methods and contents of notice; and (3) the duty to coordinate with consumer reporting agencies.

Declares that an agency that maintains notification procedures as part of an information security policy for the treatment of sensitive personal information and otherwise meets this Act's requirements shall be in compliance with this Act if the agency notifies subject persons in accordance with its policies in the event of a security breach.

Establishes civil remedies for failure to provide notice of a security breach.

Authorizes enforcement by state attorneys general on behalf of residents of the state.

]]> Notification of Risk to Personal Data Act Display Title Notification of Risk to Personal Data Act Short Titles as Introduced Notification of Risk to Personal Data Act Short Titles as Reported to Senate Notification of Risk to Personal Data Act S Senate Popular Titles Identity Theft bill 9 Library of Congress Official Title as Introduced A bill to require agencies and persons in possession of computerized data containing sensitive personal information, to disclose security breaches where such breach poses a significant risk of identity theft. Reported to Senate 2005-10-20T04:00:00Z Introduced in Senate 2005-06-28T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-109s1326is/xml/BILLS-109s1326is.xml 2005-10-20 Placed on Senate Legislative Calendar under General Orders. Calendar No. 252. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.