VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

H.R. 4400 · 113th Congress

Data Accountability and Trust Act

Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Never voted on. It didn't reach a floor vote before the 113th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.

BRD RushSponsor
5 cosponsors · 4 D, 1 R

5 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.

Data Accountability and Trust Act - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each person engaged in interstate commerce that owns or possesses data containing personal information to establish specified security policies and procedures to treat and protect such information.

What it does: CRS summary · Introduced in House · Apr 4, 2014

Data Accountability and Trust Act - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each person engaged in interstate commerce that owns or possesses data containing personal information to establish specified security policies and procedures to treat and protect such information.

Requires the regulations to include methods for disposing of both electronic and nonelectronic data.

Requires information brokers to submit their security policies to the FTC in conjunction with a notification of a security breach notification or on FTC request. Authorizes the FTC to conduct information security practices audits of brokers who have had a security breach or require such brokers to conduct independent audits.

Requires information brokers to: (1) establish procedures to verify the accuracy of information that identifies individuals, (2) provide to individuals whose personal information it maintains a means to review it, (3) place a conspicuous notice on the Internet instructing individuals how to request access to such information, and (4) correct inaccurate information.

Directs the FTC to require information brokers to establish measures which facilitate the auditing or retracing of access to, or transmissions of, any data containing personal information.

Makes it unlawful for information brokers to obtain or disclose personal information by false pretenses (pretexting).

Requires such person to notify the FTC and affected individuals of information security breaches. Sets forth requirements concerning such notification, including method of notification requirements and timeliness requirements. Allows an exemption from notification requirements if such person determines that there is no reasonable risk of identity theft, fraud, or other unlawful conduct.

Preempts state information security laws.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: Data Accountability and Trust Act

Latest action (Apr 11, 2014): Referred to the Subcommittee on Commerce, Manufacturing, and Trade.

Policy area: Commerce · Origin: House · Introduced: Apr 4, 2014

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

No recorded floor vote found.