[Congressional Record Volume 163, Number 186 (Tuesday, November 14, 2017)]
[Senate]
[Pages S7215-S7216]
From the Congressional Record Online through the Government Publishing Office [www.gpo.gov]




          STATEMENTS ON INTRODUCED BILLS AND JOINT RESOLUTIONS

      By Mrs. SHAHEEN (for herself, Ms. Collins, Mr. Isakson, and Mr. 
        Menendez):
  S. 2120. A bill to prevent international violence against women, and 
for other purposes; to the Committee on Foreign Relations.
  Ms. COLLINS. Mr. President, today, I join my colleagues, Senators 
Shaheen, Isakson, and Menendez, in introducing the International 
Violence Against Women Act of 2017. This legislation makes ending 
violence against women and girls a top diplomatic priority. It 
permanently authorizes the State Department's Office of Global Women's 
Issues and the position of the Ambassador-at-Large for Global Women's 
Issues. It requires the Administration to develop and implement an 
annual strategy to prevent and respond to violence against women and 
girls for each of the five years after the date of enactment. This bill 
would ensure that efforts begun under President George W. Bush and 
President Obama to combat gender-based violence continue in future 
Administrations.
  Mr. President, we have witnessed great strides in women's equality in 
our own Country, and in much of the world, over the past century. 
Across vast swathes of the globe, however, violence against women and 
forced marriage remain everyday problems. One out of every three women 
worldwide will be physically, sexually, or otherwise abused during her 
lifetime, with rates reaching 70 percent in some countries. This type 
of violence ranges from domestic violence, rape, and acid burnings to 
dowry deaths and so-called ``honor killings.'' Violence against women 
and girls is a human rights violation, a public health epidemic, and a 
barrier to solving global challenges such as extreme poverty, HIV/AIDS, 
and conflict. Such violence is often exacerbated in humanitarian 
emergencies and conflict settings.
  In Iraq and Syria, girls and women have been abducted from their 
homes and villages, sold into sexual slavery, and forced into marriages 
with fighters of the Islamic State of Iraq and the Levant. In Burma, 
rape is used as a weapon against the women and girls of the Rohingya 
ethnic group. In Nigeria, girls as young as 11-years-old are offered a 
horrendous choice by Boko Haram: carry out suicide bomb attacks against 
Nigerian villages or live in forced marriages and sexual slavery.
  This systemic targeting of women is not confined to conflict zones. 
In India, the United Nations special rapporteur on violence against 
women said that they experience such crimes ``from womb to tomb.'' 
Compounding this tragedy, local police often decline to investigate or 
seek justice. In Afghanistan, women and girls are concerned that as 
Western forces draw down and attention shifts away from their country, 
the fragile gains that have been made there could be lost.
  The International Violence Against Women Act--IVAWA--ensures that the 
U.S. will continue to take a leadership role in combatting these 
problems. It establishes that it is the policy of the United States to 
take action to prevent and respond to violence against women and girls 
around the globe and to systematically integrate and coordinate efforts 
to address gender-based violence into U.S. foreign policy and foreign 
assistance programs.
  Specifically, IVAWA will foster efforts in four areas. First, it will 
increase legal and judicial protections by establishing and supporting 
laws and legal structures that prevent and appropriately respond to all 
forms of violence against women and girls, including ``honor killings'' 
and forced marriage. Emphasis will be placed on promoting political, 
legal, and institutional reforms that recognize violence against women 
and girls as a crime and train police and the judiciary to hold 
violators accountable and to respond to the needs of victims. Second, 
IVAWA will increase efforts to build health sector capacity, 
integrating programs to address violence against women and girls into 
existing health programs focused on child survival, women's health, and 
HIV/AIDS prevention. Third, IVAWA will focus on preventing violence by 
changing community norms and attitudes about the acceptability of 
violence against women and girls. And fourth, IVAWA will focus on 
reducing women and girls' vulnerability to violence by improving their 
economic status and educational opportunities. Efforts will include 
ensuring that women have access to job training and employment 
opportunities and increasing their right to own land and property, 
allowing them to potentially support themselves and their children.
  Violence has a profound effect on the lives of women and girls. In 
addition to being a pressing human rights issue, such violence 
contributes to inequality and political instability, making it a 
security issue as well as a moral issue for us all. I am committed to 
continuing to work with my colleagues to end violence against women and 
girls and to provide the assistance and resources necessary to achieve 
this goal.
                                 ______
                                 
      By Mr. LEAHY (for himself, Mr. Markey, Mr. Blumenthal, Mr. Wyden, 
        Mr. Franken, Ms. Baldwin, and Ms. Harris):
  S. 2124. A bill to ensure the privacy and security of sensitive 
personal information, to prevent and mitigate identity theft, to 
provide notice of security breaches involving sensitive personal 
information, and to enhance law enforcement assistance and for other 
protections against security breaches, fraudulent access, and misuse of 
personal information; to the Committee on the Judiciary.
  Mr. LEAHY. Mr. President, today, I am introducing the Consumer 
Privacy Protection Act of 2017. This legislation, if enacted, will help 
ensure that when Americans entrust corporations with their most 
sensitive personal information, these corporations take the right steps 
to keep this information secure, and do the right thing in the event of 
a data breach. In today's modern world, data security is no longer just 
about protecting our identities and our bank accounts; it is about 
protecting our privacy and even our National security.
  The need for this legislation has long been clear, and never more so 
than in the wake of the recent, massive Equifax data breach. After 
media investigations and multiple Congressional hearings, we learned 
that the Equifax breach exposed the sensitive personal information of 
almost half the American population. We also learned that Equifax 
failed to take basic steps to secure its databases, and waited an 
unjustifiably long period before notifying consumers and regulators. 
Clearly, it is past time for all corporations that hold our personal 
information to maintain some common-sense, baseline cybersecurity 
standards.
  Corporations make significant profits from our personal information, 
and they should be obligated to keep it safe. Yet too often, data 
breaches continue to plague American businesses

[[Page S7216]]

and compromise the privacy of millions of consumers. At the same time, 
the amount of information we share with corporations who are the target 
of these breaches is growing. Corporations collect and store our social 
security numbers, our bank account information, and our email 
addresses. They collect information about our private health and 
medical conditions. They know what routes we take to work and where we 
drop our kids off at school. They can replicate our fingerprints or 
even faceprints. We trust them with private photographs that we store 
in the cloud. This information is increasingly targeted by both 
criminal hackers and nation-states, including hostile foreign powers.
  The Consumer Privacy Protection Act I am introducing today is based 
on legislation I first introduced in 2015, and builds and expands on 
data security legislation that I have introduced in Congress since 
2005. It seeks to protect the vast amount of information that we now 
share with corporations each and every day. Americans want to know that 
the corporations who are profiting from their information are actually 
doing something to prevent the next data breach. Americans want to know 
when someone has had unauthorized access to their bank accounts and to 
their private family photographs, but they do not just want to be 
notified of yet another data breach. Consumers should not have to 
settle for mere notice of data breaches. American consumers deserve 
protection. This legislation would accomplish that.
  The Consumer Privacy Protection Act requires that corporations meet 
certain baseline privacy and data security standards to keep 
information they store about their customers safe, and requires that 
corporations provide notice and protection to consumers in the event of 
a breach. This legislation protects broad categories of data, 
including, (1) social security numbers and other government-issued 
identification numbers; (2) financial account information, including 
credit card numbers and bank accounts; (3) online usernames and 
passwords, including email names and passwords; (4) unique biometric 
data, including fingerprints; (5) information about a person's physical 
and mental health; (6) information about geolocation; and (7) access to 
private digital photographs and videos.
  It is true that not every breach can be prevented. Cyber criminals 
and nation-state actors are determined and constantly looking for new 
ways to pierce the most sophisticated security systems. But just as we 
expect a bank to put a lock on the front door and an alarm on the vault 
to protect its customers' money, we expect corporations to take 
reasonable measures to protect the personal information they collect 
from us. Unfortunately, many of the corporations that profit from the 
very information that we entrust them to protect, have woefully 
inadequate measures to secure this information. For others, security is 
simply not a priority. American consumers deserve better and our 
national security demands it.
  This legislation creates civil penalties for corporations that fail 
to meet the required privacy and data security standards established in 
the bill or fail to provide notice and protection to consumers when a 
breach occurs. The Department of Justice, the Federal Trade Commission, 
and State attorneys general each have a role in enforcement. This 
legislation also requires corporations to inform Federal law 
enforcement of all large data breaches, as well as breaches that could 
impact the federal government. Such notification is necessary to help 
law enforcement bring these cyber criminals to justice and identify 
patterns that help protect against future attacks.
  Many Americans understandably assume Federal law already protects 
this sensitive information--common sense tells us that it should. 
Unfortunately, the reality is that it does not. States provide a 
patchwork of protection, and while some laws are strong, others are 
not. For example, my home state of Vermont has a strong data breach 
notification law that that has been in effect since 2007. But there are 
many other States that have not passed data security laws designed to 
prevent data breaches.
  This legislation sets a floor: a baseline standard that that protects 
Americans across the country, while also freeing individual States to 
provide even stronger protections to their residents. In crafting 
Federal law, we must be careful not to override strong State laws, but 
we also need to ensure that all Americans, regardless of where they 
live, have their privacy protected. To this end, the Consumer Privacy 
Protection Act preempts State law relating to data security and data 
breach notification only to the extent that the protections under those 
laws are weaker than those provided for in this bill. We must ensure 
that consumers do not lose privacy protections they currently enjoy. 
Since this bill is modeled after those States with the strongest 
consumer protections, I believe it will improve protections for 
consumers in nearly every State.
  I am joined today by Senators Markey, Blumenthal, Wyden, Franken, and 
Baldwin in introducing this legislation. These Senators have long 
shared my commitment to protecting consumer privacy. This legislation 
also has the support of leading consumer privacy advocates, including: 
the Center for Democracy and Technology, the Consumer Federation of 
America, New America's Open Technology Institute, and Public Knowledge.
  Millions of Americans who have had their personal information 
compromised or stolen as a result of a data breach consider this issue 
to be of critical importance and a priority for the Senate. Protecting 
privacy rights should be important to all of us, regardless of party or 
ideology. I hope all Senators will support this common-sense measure to 
better protect Americans' privacy.

                          ____________________