S. 1326 · 109th Congress
Identity Theft bill
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 109th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
R
SessionsSponsor1 cosponsor · 1 R
0 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Notification of Risk to Personal Data Act - Requires any agency or person (agency) that owns or licenses computerized data containing sensitive personal information to: (1) implement and maintain reasonable security and notification procedures and practices to protect sensitive personal information from unauthorized access, destruction, use, modification,…
What it does: CRS summary · Reported to Senate without amendment · Oct 20, 2005
(This measure has not been amended since it was introduced. The summary has been expanded because action occurred on the measure.)
Notification of Risk to Personal Data Act - Requires any agency or person (agency) that owns or licenses computerized data containing sensitive personal information to: (1) implement and maintain reasonable security and notification procedures and practices to protect sensitive personal information from unauthorized access, destruction, use, modification, or disclosure; and (2) notify any U.S. resident whose sensitive personal information was compromised. Permits a federal law enforcement agency to delay notification if notification would impede an investigation.
Requires any agency in possession of computerized data containing sensitive personal information that it does not own or license to notify the entity from whom it received the information if the security of that information was compromised, resulting in a significant risk of identity theft.
Sets forth provisions regarding: (1) the timeliness of notification; (2) the methods and contents of notice; and (3) the duty to coordinate with consumer reporting agencies.
Declares that an agency that maintains notification procedures as part of an information security policy for the treatment of sensitive personal information and otherwise meets this Act's requirements shall be in compliance with this Act if the agency notifies subject persons in accordance with its policies in the event of a security breach.
Establishes civil remedies for failure to provide notice of a security breach.
Authorizes enforcement by state attorneys general on behalf of residents of the state.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Notification of Risk to Personal Data Act
Latest action (Oct 20, 2005): Placed on Senate Legislative Calendar under General Orders. Calendar No. 252.
Policy area: Science, Technology, Communications · Origin: Senate · Introduced: Jun 28, 2005
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML) · Embed in your story
No recorded floor vote found.