To strengthen privacy and data security, and for other purposes.
Federal Agency Data Breach Notification Act of 2014 - Requires the Director of the Office of Management and Budget (OMB) to establish and oversee procedures for agencies to follow in the event of a breach of information security involving the disclosure of personally identifiable information (PII).
Requires such procedures to include requirements for: (1) notice to the individuals whose PII could be compromised within 72 hours after the agency discovers the breach or evidence that reasonably indicates such a breach has occurred; (2) timely reporting to an OMB-designated federal cybersecurity center; and (3) any additional actions that the Director finds necessary and appropriate, including data breach analysis, fraud resolution services, identity theft insurance, and credit protection or monitoring services.
Directs the head of each agency to ensure that actions taken in response to a breach of information security involving the disclosure of PII under the authority or control of the agency comply with such OMB procedures.
Amends the E-Government Act of 2002 to require agencies to conduct privacy impact assessments before using information in an identifiable form purchased, or subscribed to for a fee, from a commercial data source.
Requires the Director to designate a Federal Chief Privacy Officer within OMB to carry out the responsibilities of the Director with regard to privacy.
Introduced in House
Introduced in House
Referred to the House Committee on Oversight and Government Reform.
checking server…
Ask anything about this bill. The AI reads the full text to answer.
Enter to send · Shift+Enter for new line