Notification of Risk to Personal Data Act

Summary

Notification of Risk to Personal Data Act - Requires any agency or person that owns or licenses electronic data containing personal information, following the discovery of a breach of security of the system containing such data, to notify any U.S. resident whose personal information was, or is reasonably believed to have been, acquired by an unauthorized person. Requires any agency or person who possesses but does not own or license such data, to notify the information owner or licensee about such an unauthorized acquisition. Allows delay of notification in connection with authorized law enforcement purposes. Provides authorized methods of notification and alternative notification procedures. Provides: (1) civil penalties and rights and remedies in connections with violations; and (2) for enforcement by State attorneys general.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

1. 24 January 2005

   Introduced

   Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S288-289)

   Source: IntroReferral

2. 24 January 2005

   Introduced

   Sponsor introductory remarks on measure. (CR S287-288)

   Source: IntroReferral

3. 24 January 2005

   Introduced

   Introduced in Senate

   Source: IntroReferral

Votes

No vote records are attached yet.

Versions

• Introduced in Senate · 24 January 2005 · Official file

Documents

3 official files

• Introduced in Senate (text)

  Introduced in Senate · EN · 24 January 2005

  ViewDownloadOpen at official source

• Introduced in Senate (PDF)

  Introduced in Senate · EN · 24 January 2005

  ViewDownloadOpen at official source

• Introduced in Senate

  summary · EN · 24 January 2005

  Open at official source

Sponsors

• Sen. Feinstein, Dianne [D-CA] · D · Sponsor
• · ssju00 · Standing

Related records

• related to ← Notification of Risk to Personal Data Act