3.0.0 1202 2023-01-11T19:40:50Z 2023-01-11T19:40:50Z Senate S S 2007-04-24 110 ssju00 Judiciary Committee Senate Standing Referred to 2007-04-24T22:49:36Z 2007-04-24 ssju00 Judiciary Committee Senate Read twice and referred to the Committee on the Judiciary. IntroReferral 2007-04-24 Introduced in Senate IntroReferral 10000 9 Library of Congress S001141 Sen. Sessions, Jeff [R-AL] Jeff Sessions R AL N K000352 Sen. Kyl, Jon [R-AZ] Jon Kyl R AZ Llewellyn 2007-05-01 False Crime and Law Enforcement Bank accounts Civil Rights and Liberties, Minority Issues Civil actions and liability Commerce Consumer credit Consumer education Credit cards Data banks Debit cards Driver licenses Finance and Financial Sector Fraud Identification devices Identity theft Law Parties to actions Right of privacy Science, Technology, Communications Social Welfare Social security numbers Transportation and Public Works Crime and Law Enforcement 00 2007-04-24 Introduced in Senate 2007-06-06T14:13:18Z Personal Data Protection Act of 2007 - Defines "identity theft" to mean a fraud committed using the sensitive personal information of another individual with the intent to commit or to aid or abet unlawful activity that results in economic loss to that individual.

Requires any agency or person that owns or licenses computerized data containing sensitive personal information to: (1) develop, implement, and maintain reasonable security and notification procedures and practices (appropriate to the size and nature of the agency or person and the nature of the information) to ensure the security and confidentiality of the personal information and to protect sensitive personal information against unauthorized access, destruction, use, modification, or disclosure; and (2) notify any individual whose sensitive personal information was compromised (permits a federal law enforcement agency of domestic or foreign jurisdiction to delay notification if notification would impede a criminal or civil investigation).

Requires any agency or person in possession of computerized data containing sensitive personal information that it does not own or license to notify and cooperate with the owner or licensor upon discovery of a breach of the security of the system of such agency or person as expediently as possible. Authorizes an agency or person in possession of sensitive personal information to enter into an agreement with the owner or licensor of information regarding which person or entity will provide any notice required to an individual whose sensitive personal information was compromised. Requires the agency or person that owns or licenses computerized data containing sensitive personal information to provide any notice required if there is not such an agreement. Sets forth provisions regarding the timeliness of notification, the methods and contents of notice, and the duty to coordinate with consumer reporting agencies.

Establishes civil remedies for failure to provide notice of a security breach. Authorizes enforcement by state Attorneys General on behalf of residents of the state.

]]> Personal Data Protection Act of 2007 Official Title as Introduced A bill to require agencies and persons in possession of computerized data containing sensitive personal information, to disclose security breaches where such breach poses a significant risk of identity theft. Introduced in Senate IS Display Title Personal Data Protection Act of 2007 Short Titles as Introduced Personal Data Protection Act of 2007 Introduced in Senate 2007-04-24T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-110s1202is/xml/BILLS-110s1202is.xml 2007-04-24 Read twice and referred to the Committee on the Judiciary. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.