United States · Bill · S
S. 1408 (112th)
Data Breach Notification Act of 2011
Introduced
22 July 2011
Last action
—
Status
Placed on Senate Legislative Calendar under General Orders. Calendar No. 310.
Sponsors
—
Subjects
Discovery layer
Source updated
10 August 2026
Summary
Data Breach Notification Act of 2011 - Requires any federal agency or business entity engaged in interstate commerce that uses, accesses, or collects sensitive personally identifiable information, following the discovery of a security breach, to notify: (1) any U.S. resident whose information may have been accessed or acquired, and (2) the owner or licensee of any such information that the agency or business does not own or license. Exempts: (1) agencies and business entities from notification requirements for national security and law enforcement purposes and for security breaches that a risk assessment concludes do not have a significant risk of resulting in harm if specified certification or notice is provided, subject to review by the Secret Service; and (2) business entities which utilize a security program that blocks the use of sensitive personally identifiable information and provide notice of a breach to affected individuals. Requires notifications regarding security breaches under specified circumstances to the Secret Service, the Federal Bureau of Investigation (FBI), the Postal Inspection Service, and state attorneys general. Authorizes the Attorney General to bring a civil action in U.S. district court against any business entity that violates this Act. Sets civil penalties for violations. Amends the Fair Credit Reporting Act to require agencies to include a fraud alert in the file of a consumer that submits evidence of compromised financial information to a consumer reporting agency. Authorizes: (1) civil actions by state attorneys general to enforce this Act, and (2) appropriations for costs incurred by the Secret Service to investigate and conduct risk assessments of security breaches.
This text is taken from the official record. PoliticalRepo does not editorialize.
Timeline
No timeline events have been ingested for this record yet.
Votes
No vote records are attached yet.
Versions
No version snapshots stored. Document URLs remain at the source.
Documents
6 official files
Reported to Senate (text)
Reported to Senate · EN · 6 February 2012
Reported to Senate (PDF)
Reported to Senate · EN · 6 February 2012
Reported to Senate with amendment(s)
summary · EN · 6 February 2012
Introduced in Senate (text)
Introduced in Senate · EN · 22 July 2011
Introduced in Senate (PDF)
Introduced in Senate · EN · 22 July 2011
Introduced in Senate
summary · EN · 22 July 2011
Sponsors
No sponsors or actors listed by the source.
Related records
No cross-record relationships stored yet.
Sources
PoliticalRepo is an index and interpretation layer, not the authoritative legal source.
- Official source: https://www.congress.gov/bill/112th-congress/senate-bill/1408
- Open data entity: https://api.congress.gov/v3/bill/112/s/1408