A bill to protect consumers by requiring reasonable security policies and procedures to protect data containing personal information, and to provide for nationwide notice in the event of a breach of security.
Data Security and Breach Notification Act This bill requires the Federal Trade Commission to require certain entities that own or possess data containing personal information, or that contract with a third-party to maintain or process such information, to implement certain information-security policies and procedures for the treatment and protection of the information. Such entities must provide specified notice following the discovery of a security breach of such information.
Get AI-generated questions to help you understand this bill better
Timeline
Introduced in Senate
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Introduced in Senate
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Commerce
Administrative law and regulatory proceduresBank accounts, deposits, capitalBanking and financial institutions regulationBusiness recordsCivil actions and liabilityComputers and information technologyComputer security and identity theftCongressional oversightConsumer affairsConsumer creditCriminal investigation, prosecution, interrogationFederal Trade Commission (FTC)Fraud offenses and financial crimesIntelligence activities, surveillance, classified informationInternet and video servicesInternet, web applications, social mediaRight of privacySmall businessSocial work, volunteer service, charitable organizations
A bill to protect consumers by requiring reasonable security policies and procedures to protect data containing personal information, and to provide for nationwide notice in the event of a breach of security.
USA115th CongressS-2179| Senate
| Updated: 11/30/2017
Data Security and Breach Notification Act This bill requires the Federal Trade Commission to require certain entities that own or possess data containing personal information, or that contract with a third-party to maintain or process such information, to implement certain information-security policies and procedures for the treatment and protection of the information. Such entities must provide specified notice following the discovery of a security breach of such information.
Administrative law and regulatory proceduresBank accounts, deposits, capitalBanking and financial institutions regulationBusiness recordsCivil actions and liabilityComputers and information technologyComputer security and identity theftCongressional oversightConsumer affairsConsumer creditCriminal investigation, prosecution, interrogationFederal Trade Commission (FTC)Fraud offenses and financial crimesIntelligence activities, surveillance, classified informationInternet and video servicesInternet, web applications, social mediaRight of privacySmall businessSocial work, volunteer service, charitable organizations