S. 2124 · 115th Congress
Consumer Privacy Protection Act of 2017
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 115th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
LeahySponsor7 cosponsors · 7 D
6 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill amends the federal criminal code to make it a crime to intentionally and willfully conceal knowledge of a security breach that results in economic harm of at least $1,000 to any individual.
What it does: CRS summary · Introduced in Senate · Nov 14, 2017
Consumer Privacy Protection Act of 2017
This bill amends the federal criminal code to make it a crime to intentionally and willfully conceal knowledge of a security breach that results in economic harm of at least $1,000 to any individual.
It imposes criminal penalties on a violator and authorizes the U.S. Secret Service and the Federal Bureau of Investigation to investigate offenses.
The bill authorizes the Department of Justice (DOJ) to file a civil action: (1) to prevent ongoing conduct that damages 100 or more protected computers (e.g., government computers); and (2) to prevent the disposition of unlawfully obtained property.
The bill also adds to the list of money laundering predicate offenses financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices.
Finally, the bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program.
Following the discovery of a security breach of sensitive personally identifiable information (PII), a commercial entity must notify an affected U.S. resident and provide identify theft prevention and mitigation services. Sensitive PII is information that identifies a particular person, including electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos.
It establishes civil penalties for violations and authorizes DOJ, the Federal Trade Commission, and states to enforce compliance.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Consumer Privacy Protection Act of 2017
Latest action (Nov 14, 2017): Read twice and referred to the Committee on the Judiciary. (Sponsor introductory remarks on measure: CR S7215-7216)
Policy area: Crime and Law Enforcement · Origin: Senate · Introduced: Nov 14, 2017
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.