To amend the Gramm-Leach-Bliley Act to establish procedures for disclosures by financial institutions of nonpublic personal information, and for other purposes.

This bill requires a financial institution to report, within 72 hours of discovery, a data breach to the Consumer Financial Protection Bureau. The bureau must assess whether the breach requires disclosure to consumers.