H.R. 135 · 115th Congress
Cyber Privacy Fortification Act of 2017
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 115th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
ConyersSponsor1 cosponsor · 1 D
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices regarding security breaches of computerized data that there is reason to believe resulted in improper access to specified sensitive personally identifiable information that is electronic or digital.
What it does: CRS summary · Introduced in House · Jan 3, 2017
Cyber Privacy Fortification Act of 2017
This bill amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices regarding security breaches of computerized data that there is reason to believe resulted in improper access to specified sensitive personally identifiable information that is electronic or digital.
A person who owns or possesses data in electronic form containing a means of identification, and who has knowledge of a major security breach of the system containing such data, must notify the U.S. Secret Service or the Federal Bureau of Investigation.
A "major security breach" involves: (1) a means of identification pertaining to at least 10,000 individuals that is reasonably believed to have been acquired, (2) databases owned by the federal government, or (3) a means of identification of federal employees or contractors involved in national security matters or law enforcement.
The Department of Justice and state attorneys general may bring civil actions and obtain injunctive relief for violations of federal laws relating to data security.
Federal agencies must prepare and make available to the public privacy impact assessments that describe the impact of certain proposed and final agency rules on the privacy of individuals. Agencies may waive or delay certain privacy impact assessment requirements for emergencies and national security reasons.
Federal agencies must: (1) periodically review promulgated rules that have a significant privacy impact on individuals or a privacy impact on a substantial number of individuals, and (2) consider whether each such rule can be amended or rescinded in a manner that minimizes any such impact while remaining in accordance with applicable statutes.
The bill provides access to judicial review to individuals adversely affected or aggrieved by final agency action on any such rule.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Cyber Privacy Fortification Act of 2017
Latest action (Jan 12, 2017): Referred to the Subcommittee on Regulatory Reform, Commercial And Antitrust Law.
Policy area: Science, Technology, Communications · Origin: House · Introduced: Jan 3, 2017
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.