To direct the Federal Trade Commission to prescribe rules that require covered entities to secure sensitive personally identifiable information against a security breach.

Data Protection Act of 2017 This bill directs the Federal Trade Commission to require an entity to employ reasonable measures to secure sensitive, personally identifiable information maintained by the entity against a security breach.