3.0.0 2577 2023-01-11T13:22:44Z 2023-01-11T13:22:44Z House H HR 2011-07-18 112 From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]By Mrs. BONO MACK:H.R. 2577.Congress has the power to enact this legislation pursuantto the following:Clauses 1 of Section 8 of Article I of the Constitution theUnited States Congress shall have power ``To regulateCommerce with foreign Nations, and among the several States,and with the Indian Tribes''.[Page H5150]]]> hsif00 Energy and Commerce Committee House Standing hsif17 Innovation, Data, and Commerce Subcommittee Referred to 2011-07-29T19:56:47Z Referred to 2011-07-18T16:01:35Z Data Accountability and Trust Act 112 1707 HR 2011-05-06 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS Data Accountability and Trust Act (DATA) of 2011 112 1841 HR 2011-05-13 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS Data Security and Breach Notification Act of 2011 112 1207 S 2011-06-15 Read twice and referred to the Committee on Commerce, Science, and Transportation. Related bill CRS 2011-07-29 hsif17 Innovation, Data, and Commerce Subcommittee 1 House committee actions Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Committee 2011-07-18 Referred to the House Committee on Energy and Commerce. IntroReferral H11100 2 House floor actions hsif00 Energy and Commerce Committee 2011-07-18 Introduced in House IntroReferral Intro-H 9 Library of Congress 2011-07-18 Introduced in House IntroReferral 1000 9 Library of Congress B001228 Rep. Bono Mack, Mary [R-CA-45] MARY BONO MACK R CA 45 N Commerce Administrative law and regulatory procedures Civil actions and liability Computer security and identity theft Computers and information technology Consumer affairs Consumer credit Federal Trade Commission (FTC) Federal preemption Fraud offenses and financial crimes Government studies and investigations Internet and video services Internet, web applications, social media Right of privacy Telephone and wireless communication Commerce 00 2011-07-18 Introduced in House 2011-12-05T15:54:26Z Secure and Fortify Electronic Data Act or the SAFE Data Act - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring any person engaged in interstate commerce that owns or possesses data containing personal information to establish and implement reasonable security policies and procedures to treat and protect such information.

Requires such regulations to include specified policies and procedures, including: (1) a process for identifying and assessing vulnerabilities in the system, and (2) a process for taking preventive and corrective action to mitigate such vulnerabilities.

Requires a person covered by this Act to establish a plan and procedures for minimizing the amount of personal information maintained.

Exempts services providers from such requirements for any electronic communication by a third party that is transmitted, routed, or stored in intermediate or transient storage by the provider.

Establishes notification procedures in the event of a breach of security of any system that contains personal information. Allows an exemption from notification requirements if a person subject to this Act determines that there is no reasonable risk of identity theft, fraud, or other unlawful conduct. Creates a presumption that no reasonable risk of such conduct exists following a breach of security if the data containing personal information is unusable, unreadable, or indecipherable to an unauthorized person by encryption or other security technology that is generally accepted by experts in the information security field.

Directs a person subject to this Act to provide a credit report and credit monitoring if certain identifying information is breached.

Sets forth provisions regarding enforcement of this Act by the FTC and by state attorneys general. Establishes civil penalties for violations.

Exempts from the requirements of this Act any person subject to the information security requirements of the Health Insurance Portability and Accountability Act (HIPAA) or the Gramm-Leach Bliley Act.

]]> SAFE Data Act Display Title SAFE Data Act Official Title as Introduced To protect consumers by requiring reasonable security policies and procedures to protect data containing personal information, and to provide for nationwide notice in the event of a security breach. Introduced in House IH Short Titles as Introduced SAFE Data Act Short Titles as Introduced Secure and Fortify Electronic Data Act Introduced in House 2011-07-18T04:00:00Z https://www.govinfo.gov/content/pkg/BILLS-112hr2577ih/xml/BILLS-112hr2577ih.xml 2011-07-29 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.