3.0.0 1207 2023-01-11T13:22:54Z 2023-01-11T13:22:54Z Senate S S 2011-06-15 112 sscm00 Commerce, Science, and Transportation Committee Senate Standing Referred to 2011-06-15T21:05:43Z Data Accountability and Trust Act 112 1707 HR 2011-05-06 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS SAFE Data Act 112 2577 HR 2011-07-29 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS 2011-06-15 sscm00 Commerce, Science, and Transportation Committee Senate Read twice and referred to the Committee on Commerce, Science, and Transportation. IntroReferral 2011-06-15 Introduced in Senate IntroReferral 10000 9 Library of Congress P000590 Sen. Pryor, Mark L. [D-AR] Mark Pryor D AR Lunsford N R000361 Sen. Rockefeller, John D., IV [D-WV] JAY ROCKEFELLER D WV 2011-06-15 True Commerce Administrative law and regulatory procedures Business records Computer security and identity theft Computers and information technology Consumer affairs Consumer credit Federal Trade Commission (FTC) Federal preemption Fraud offenses and financial crimes Internet and video services Internet, web applications, social media Marketing and advertising Right of privacy Commerce 00 2011-06-15 Introduced in Senate 2011-08-26T15:52:57Z Data Security and Breach Notification Act of 2011 - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each covered entity (proprietorships, partnerships, estates, trusts, cooperatives, and nonprofit and for-profit corporations) that owns or possesses data containing personal information to implement policies and procedures regarding information security practices for the treatment and protection of such information.

Sets forth additional requirements for information brokers, including requiring brokers to: (1) submit their security policies to the FTC with a notification of a security breach or upon FTC request; (2) establish procedures to assure the accuracy of the information they collect, assemble, or maintain that is personal information or that identifies an individual; (3) provide individuals access to their personal information for review; and (4) correct inaccurate information. Authorizes the FTC to conduct information security practices audits of brokers who have had a security breach or require such brokers to conduct independent audits.

Directs the FTC to require information brokers to establish measures that facilitate the auditing or retracing of access to, or transmissions of, any data containing personal information.

Makes it unlawful for information brokers to obtain or disclose personal information by false pretenses (pretexting).

Establishes procedures in the event of an information security breach. Requires a covered entity that discovers a breach to notify the FTC and affected individuals. Sets forth requirements concerning such notification, including the method of notification requirements and timeliness requirements. Allows an exemption from notification requirements if such entity determines that there is no reasonable risk of identity theft, fraud, or other unlawful conduct. Establishes a presumption that there is no such risk for encrypted data.

Applies this Act to nonprofit organizations.

Sets forth enforcement provisions.

]]> Data Security and Breach Notification Act of 2011 Display Title Data Security and Breach Notification Act of 2011 Official Title as Introduced A bill to protect consumers by requiring reasonable security policies and procedures to protect data containing personal information, and to provide for nationwide notice in the event of a security breach. Introduced in Senate IS Short Titles as Introduced Data Security and Breach Notification Act of 2011 Introduced in Senate 2011-06-15T04:00:00Z 2011-06-15 Read twice and referred to the Committee on Commerce, Science, and Transportation. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.