3.0.0 1976 2023-01-11T13:27:02Z 2023-01-11T13:27:02Z Senate S S 2014-01-30 113 sscm00 Commerce, Science, and Transportation Committee Senate Standing Referred to 2014-01-30T20:46:56Z Data Accountability and Trust Act 113 4400 HR 2014-04-11 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS To establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission, to amend the Children's Online Privacy Protection Act of 1998 to improve provisions relating to collection, use, and disclosure of personal information of children, and for other purposes. 113 4711 HR 2014-05-23 Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Related bill CRS Commercial Privacy Bill of Rights Act of 2014 113 2378 S 2014-05-21 Read twice and referred to the Committee on Commerce, Science, and Transportation. Related bill CRS 2014-01-30 sscm00 Commerce, Science, and Transportation Committee Senate Read twice and referred to the Committee on Commerce, Science, and Transportation. IntroReferral 2014-01-30 Sponsor introductory remarks on measure. (CR S656-657) IntroReferral B00100 9 Library of Congress 2014-01-30 Introduced in Senate IntroReferral 10000 9 Library of Congress R000361 Sen. Rockefeller, John D., IV [D-WV] JAY ROCKEFELLER D WV N F000062 Sen. Feinstein, Dianne [D-CA] Dianne Feinstein D CA 2014-01-30 True P000590 Sen. Pryor, Mark L. [D-AR] Mark Pryor D AR Lunsford 2014-01-30 True N000032 Sen. Nelson, Bill [D-FL] CLARENCE NELSON D FL WILLIAM 2014-01-30 True Commerce Administrative law and regulatory procedures Bank accounts, deposits, capital Banking and financial institutions regulation Business records Civil actions and liability Computer security and identity theft Computers and information technology Congressional oversight Consumer affairs Consumer credit Criminal investigation, prosecution, interrogation Federal Trade Commission (FTC) Fraud offenses and financial crimes Intelligence activities, surveillance, classified information Internet and video services Internet, web applications, social media Right of privacy Small business Social work, volunteer service, charitable organizations Commerce 00 2014-01-30 Introduced in Senate 2014-03-07T22:14:07Z Data Security and Breach Notification Act of 2014 - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each covered entity (proprietorships, partnerships, estates, trusts, cooperatives, and nonprofit and for-profit corporations) that owns or possesses data containing personal information to implement policies and procedures regarding information security practices for the treatment and protection of such information.

Establishes procedures to be followed in the event of an information security breach. Requires a covered entity that discovers a breach to notify the FTC (unless the covered entity has already notified a federal entity designated by the Department of Homeland Security [DHS] to receive such information) and affected individuals. Sets forth requirements concerning such notification, including methods of notification and timeliness requirements. Allows an exemption from notification requirements if such entity reasonably concludes that there is no reasonable risk of identity theft, fraud, or other unlawful conduct. Establishes a presumption that there is no such risk for encrypted data.

Directs DHS to designate a federal entity that covered entities would be required to notify if a security breach involves: (1) the personal information of more than 10,000 individuals, (2) a database containing the personal information of more than 1 million individuals, (3) federal government databases, or (4) the personal information of federal employees or contractors known to be involved in national security or law enforcement.

Requires the designated entity to provide each notice it receives to:

  • the U.S. Secret Service;
  • the Federal Bureau of Investigation (FBI);
  • the FTC;
  • the U.S. Postal Inspection Service, if mail fraud is involved;
  • attorneys general of affected states; and
  • appropriate federal agencies for law enforcement, national security, or data security purposes.

Sets forth enforcement provisions for the FTC, state attorneys general, and the Attorney General (DOJ).

Establishes criminal penalties of a fine, imprisonment for up to five years, or both, for concealment of a security breach that results in economic harm of at least $1,000 to an individual.

]]> Data Security and Breach Notification Act of 2014 Display Title Data Security and Breach Notification Act of 2014 Short Titles as Introduced Data Security and Breach Notification Act of 2014 Official Title as Introduced A bill to protect consumers by requiring reasonable security policies and procedures to protect data containing personal information, and to provide for nationwide notice in the event of a breach of security. Introduced in Senate 2014-01-30T05:00:00Z https://www.govinfo.gov/content/pkg/BILLS-113s1976is/xml/BILLS-113s1976is.xml 2014-01-30 Read twice and referred to the Committee on Commerce, Science, and Transportation. text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries and statuses for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.