Personal Data Notification and Protection Act of 2017 2017-09-18 Introduced in House Personal Data Notification and Protection Act of 2017

This bill requires certain businesses that use, access, transmit, store, dispose of, or collect sensitive personally identifiable information to notify individuals whose information is believed to have been accessed or acquired through a discovered security breach. In addition, the businesses must meet specified requirements for notifying certain federal agencies, credit reporting agencies, and the media regarding a security breach. The bill also sets forth requirements for the notification process, exemptions from the requirements, and enforcement authorities for the Federal Trade Commission and the states.

]]> text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.