VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

S. 2289 · 115th Congress

Data Breach Prevention and Compensation Act of 2018

Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Never voted on. It didn't reach a floor vote before the 115th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.

3 cosponsors · 3 D

1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.

This bill creates the Office of Cybersecurity within the Federal Trade Commission (FTC) that, in part, must:

What it does: CRS summary · Introduced in Senate · Jan 10, 2018

Data Breach Prevention and Compensation Act of 2018

This bill creates the Office of Cybersecurity within the Federal Trade Commission (FTC) that, in part, must:

  • supervise, evaluate, and regulate specified agencies' management of data security;
  • examine agencies annually for compliance with regulations;
  • investigate an agency in the event of a breach covered by the bill or suspected noncompliance with regulations, and report on any findings of such investigation; and
  • coordinate with the National Institute of Standards and Technology and the National Cybersecurity and Communications Integration Center of the Department of Homeland Security.

The office is authorized to: (1) investigate an agency's compliance with regulations regarding any data breach, and (2) enjoin an agency from violating specified regulations.

Specified consumer reporting agencies, in part, must:

  • provide the office with information relating to security measures,
  • demonstrate reasonable data protection measures, and
  • notify the FTC of a covered breach.

The bill establishes civil penalties for violations and directs the FTC to enforce compliance.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: Data Breach Prevention and Compensation Act of 2018

Latest action (Jul 12, 2018): Committee on Banking, Housing, and Urban Affairs. Hearings held.

Policy area: Finance and Financial Sector · Origin: Senate · Introduced: Jan 10, 2018

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

No recorded floor vote found.