A bill to require Federal agencies, and persons engaged in interstate commerce, in possession of data containing personal information, to disclose any unauthorized acquisition of such information.
Notification of Risk to Personal Data Act - Requires any Federal agency or person that owns, licenses, or collects personal information data following the discovery of a breach its personal data security system, or upon receiving notice of a system breach, to notify (as specified) the individual whose information was obtained by an unauthorized person. Requires any agency or person possessing, but not owning or licensing such data, to notify the information owner or licensee of an unauthorized acquisition. Excepts agencies from notification requirements for national security and law enforcement purposes and requires Congress to be immediately notified when such exceptions are made. Sets forth enforcement provisions.
Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S288-289)
Referred to the Subcommittee on Commerce, Trade and Consumer Protection.
Introduced in Senate
Read twice and referred to the Committee on the Judiciary.
Star Print ordered on the bill.
checking server…
Ask anything about this bill. The AI reads the full text to answer.
Enter to send · Shift+Enter for new line