PoliticalRepoPoliticalRepo

United States · Bill · S

S. 2472 (108th)

Increasing Notice of Foreign Outsourcing Act

referredUnited States· United States Congress· EN

Introduced

20 May 2004

Last action

Status

Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S6007-6009)

Sponsors

Subjects

Discovery layer

Source updated

10 August 2026

Summary

Increasing Notice of Foreign Outsourcing Act - Directs the Secretary of Health and Human Services (HHS) to issue regulations requiring covered entities under the Health Insurance Portability and Accountability Act of 1996 that outsource protected health information to foreign-based business associates to include in their notice of privacy protections: (1) notification of outsourcing; (2) any risks and consequences to the privacy and security of such information resulting from outsourcing; (3) additional measures the covered entity is taking to protect outsourced protected health information; and (4) certification that the covered entity has taken reasonable steps to ensure that the handling of such information will comport with applicable laws. Amends the Gramm-Leach-Bliley Act to impose similar requirements on financial institutions that outsource nonpublic personal information to foreign-based businesses. Directs the Secretary of HHS, with regard to protected health information outsourced by covered entities, and the Federal banking agencies, National Credit Union Administration, Secretary of the Treasury, Securities and Exchange Commission, and Federal Trade Commission, with regard to nonpublic personal information outsourced by financial institutions, to issue regulations requiring: (1) outsourcing contracts with foreign-based businesses to contain audit provisions; and (2) such businesses and subcontractors to be contractually bound by Federal privacy standards and security safeguards. Establishes notification procedures in the event of a breach of database security involving protected health or nonpublic personal information. Requires contracts with foreign call centers to include a provision requiring call center employees to disclose their physical location upon request. Imposes civil penalties for violators.

This text is taken from the official record. PoliticalRepo does not editorialize.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

3 official files

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.

Sources

PoliticalRepo is an index and interpretation layer, not the authoritative legal source.