S. 3742 · 111th Congress
Data Security and Breach Notification Act of 2010
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 111th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
PryorSponsor1 cosponsor · 1 D
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Data Security and Breach Notification Act of 2010 - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each covered entity (proprietorships, partnerships, estates, trusts, cooperatives, and nonprofit and for-profit corporations) engaged in interstate commerce owning or possessing data containing personal information to establish…
What it does: CRS summary · Introduced in Senate · Aug 5, 2010
Data Security and Breach Notification Act of 2010 - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each covered entity (proprietorships, partnerships, estates, trusts, cooperatives, and nonprofit and for-profit corporations) engaged in interstate commerce owning or possessing data containing personal information to establish specified security policies and procedures to treat and protect such information.
Requires the regulations to include methods for disposing of both electronic and nonelectronic data.
Requires information brokers to submit their security policies to the FTC in conjunction with a notification of a security breach notification or on FTC request. Authorizes the FTC to conduct information security practices audits of brokers or require brokers to conduct independent audits.
Requires information brokers to: (1) establish procedures to verify the accuracy of information that identifies individuals; (2) provide to individuals whose personal information it maintains a means to review it; (3) place a conspicuous notice on the Internet instructing individuals how to request access to such information; and (4) correct inaccurate information.
Directs the FTC to require information brokers to establish measures which facilitate the auditing or retracing of access to, or transmissions of, any data containing personal information.
Makes it unlawful for information brokers to obtain or disclose personal information by false pretenses (pretexting).
Requires a covered entity to notify the FTC and affected individuals of information security breaches. Sets forth requirements concerning such notification, including method of notification requirements and timeliness requirements. Allows an exemption from notification requirements if the covered entity determines that there is no reasonable risk of identity theft, fraud, or other unlawful conduct.
Preempts state information security laws.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Data Security and Breach Notification Act of 2010
Latest action (Sep 22, 2010): Committee on Commerce, Science, and Transportation Subcommittee on Consumer Protection, Product Safety, and Insurance . Hearings held. With printed Hearing: S.Hrg. 111-1040.
Policy area: Commerce · Origin: Senate · Introduced: Aug 5, 2010
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.