H.R. 104 · 114th Congress
Cyber Privacy Fortification Act of 2015
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 114th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
ConyersSponsor1 cosponsor · 1 D
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices of a security breach involving sensitive personally identifiable information. Defines "sensitive personally identifiable information" as specified electronic or digital information.
What it does: CRS summary · Introduced in House · Jan 6, 2015
Cyber Privacy Fortification Act of 2015
Amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices of a security breach involving sensitive personally identifiable information. Defines "sensitive personally identifiable information" as specified electronic or digital information.
Defines "security breach" as a compromise of the security, confidentiality, or integrity of computerized data that there is reason to believe has resulted in improper access to sensitive personally identifiable information.
Requires a person who owns or possesses data in electronic form containing a means of identification and who has knowledge of a major security breach of the system containing such data maintained by such person to provide prompt notice to the U.S. Secret Service or the Federal Bureau of Investigation.
Defines "major security breach" as any security breach that involves: (1) a means of identification pertaining to at least 10,000 individuals that is reasonably believed to have been acquired, (2) databases owned by the federal government, or (3) a means of identification of federal employees or contractors involved in national security matters or law enforcement.
Authorizes the Attorney General and any state attorney general to bring civil actions and obtain injunctive relief for violations of federal laws relating to data security.
Requires federal agencies as part of their rulemaking process to prepare and make available to the public privacy impact assessments that describe the impact of certain proposed and final agency rules on the privacy of individuals.
Sets forth authority for agencies to waive or delay certain privacy impact assessment requirements for emergencies and national security reasons.
Directs federal agencies to periodically review promulgated rules that have a significant privacy impact on individuals or a privacy impact on a substantial number of individuals. Requires agencies to consider whether each such rule can be amended or rescinded in a manner that minimizes any such impact while remaining in accordance with applicable statutes.
Provides access to judicial review to individuals adversely affected or aggrieved by final agency action on any such rule.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Cyber Privacy Fortification Act of 2015
Latest action (Jan 22, 2015): Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.
Policy area: Science, Technology, Communications · Origin: House · Introduced: Jan 6, 2015
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.