Data Security and Breach Notification Act of 2014

Summary

Data Security and Breach Notification Act of 2014 - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each covered entity (proprietorships, partnerships, estates, trusts, cooperatives, and nonprofit and for-profit corporations) that owns or possesses data containing personal information to implement policies and procedures regarding information security practices for the treatment and protection of such information. Establishes procedures to be followed in the event of an information security breach. Requires a covered entity that discovers a breach to notify the FTC (unless the covered entity has already notified a federal entity designated by the Department of Homeland Security [DHS] to receive such information) and affected individuals. Sets forth requirements concerning such notification, including methods of notification and timeliness requirements. Allows an exemption from notification requirements if such entity reasonably concludes that there is no reasonable risk of identity theft, fraud, or other unlawful conduct. Establishes a presumption that there is no such risk for encrypted data. Directs DHS to designate a federal entity that covered entities would be required to notify if a security breach involves: (1) the personal information of more than 10,000 individuals, (2) a database containing the personal information of more than 1 million individuals, (3) federal government databases, or (4) the personal information of federal employees or contractors known to be involved in national security or law enforcement. Requires the designated entity to provide each notice it receives to: the U.S. Secret Service; the Federal Bureau of Investigation (FBI); the FTC; the U.S. Postal Inspection Service, if mail fraud is involved; attorneys general of affected states; and appropriate federal agencies for law enforcement, national security, or data security purposes. Sets forth enforcement provisions for the FTC, state attorneys general, and the Attorney General (DOJ). Establishes criminal penalties of a fine, imprisonment for up to five years, or both, for concealment of a security breach that results in economic harm of at least $1,000 to an individual.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

1. 30 January 2014

   Introduced

   Introduced in Senate

   Source: IntroReferral

2. 30 January 2014

   Introduced

   Read twice and referred to the Committee on Commerce, Science, and Transportation.

   Source: IntroReferral

3. 30 January 2014

   Introduced

   Sponsor introductory remarks on measure. (CR S656-657)

   Source: IntroReferral

Votes

No vote records are attached yet.

Versions

• Introduced in Senate · 30 January 2014 · Download file

Documents

3 official files

• Introduced in Senate (text)

  Introduced in Senate · EN · 30 January 2014

  ViewDownloadOpen at official source

• Introduced in Senate (PDF)

  Introduced in Senate · EN · 30 January 2014

  ViewDownloadOpen at official source

  Leesvertaling

  Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

  Vertaal naarNL · DutchDE · GermanFR · FrenchES · SpanishIT · ItalianPL · PolishPT · PortugueseSV · SwedishDA · DanishFI · FinnishEL · GreekCS · CzechHU · HungarianRO · RomanianBG · BulgarianHR · CroatianSK · SlovakSL · SlovenianLT · LithuanianLV · LatvianET · EstonianGA · IrishMT · Maltese

  Vertaal document

  Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

• Introduced in Senate

  summary · EN · 30 January 2014

  Open at official source

  Leesvertaling

  Vertaal dit document naar jouw taal. PoliticalRepo bewaart geen aparte kopie per EU-taal.

  Vertaal naarNL · DutchDE · GermanFR · FrenchES · SpanishIT · ItalianPL · PolishPT · PortugueseSV · SwedishDA · DanishFI · FinnishEL · GreekCS · CzechHU · HungarianRO · RomanianBG · BulgarianHR · CroatianSK · SlovakSL · SlovenianLT · LithuanianLV · LatvianET · EstonianGA · IrishMT · Maltese

  Vertaal document

  Documentvertaling op verzoek met downloadbare PDF (logo + link naar de officiële bron). Het bronbestand blijft leidend.

Sponsors

• Sen. Rockefeller, John D., IV [D-WV] · D · Sponsor
• Sen. Feinstein, Dianne [D-CA] · D · Sponsor
• Sen. Pryor, Mark L. [D-AR] · D · Sponsor
• Sen. Nelson, Bill [D-FL] · D · Sponsor
• · sscm00 · Standing

Related records

• related to → Data Accountability and Trust Act
• related to → To establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission, to amend the Children's Online Privacy Protection Act of 1998 to improve provisions relating to collection, use, and disclosure of personal information of children, and for other purposes.
• related to ← Commercial Privacy Bill of Rights Act of 2014