United States · Bill · S
S. 2472 (108th)
Increasing Notice of Foreign Outsourcing Act
Introduced
20 May 2004
Last action
—
Status
Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S6007-6009)
Sponsors
—
Subjects
Discovery layer
Source updated
10 August 2026
Summary
Increasing Notice of Foreign Outsourcing Act - Directs the Secretary of Health and Human Services (HHS) to issue regulations requiring covered entities under the Health Insurance Portability and Accountability Act of 1996 that outsource protected health information to foreign-based business associates to include in their notice of privacy protections: (1) notification of outsourcing; (2) any risks and consequences to the privacy and security of such information resulting from outsourcing; (3) additional measures the covered entity is taking to protect outsourced protected health information; and (4) certification that the covered entity has taken reasonable steps to ensure that the handling of such information will comport with applicable laws. Amends the Gramm-Leach-Bliley Act to impose similar requirements on financial institutions that outsource nonpublic personal information to foreign-based businesses. Directs the Secretary of HHS, with regard to protected health information outsourced by covered entities, and the Federal banking agencies, National Credit Union Administration, Secretary of the Treasury, Securities and Exchange Commission, and Federal Trade Commission, with regard to nonpublic personal information outsourced by financial institutions, to issue regulations requiring: (1) outsourcing contracts with foreign-based businesses to contain audit provisions; and (2) such businesses and subcontractors to be contractually bound by Federal privacy standards and security safeguards. Establishes notification procedures in the event of a breach of database security involving protected health or nonpublic personal information. Requires contracts with foreign call centers to include a provision requiring call center employees to disclose their physical location upon request. Imposes civil penalties for violators.
This text is taken from the official record. PoliticalRepo does not editorialize.
Timeline
No timeline events have been ingested for this record yet.
Votes
No vote records are attached yet.
Versions
No version snapshots stored. Document URLs remain at the source.
Documents
3 official files
Introduced in Senate (text)
Introduced in Senate · EN · 20 May 2004
Introduced in Senate (PDF)
Introduced in Senate · EN · 20 May 2004
Introduced in Senate
summary · EN · 20 May 2004
Sponsors
No sponsors or actors listed by the source.
Related records
No cross-record relationships stored yet.
Sources
PoliticalRepo is an index and interpretation layer, not the authoritative legal source.
- Official source: https://www.congress.gov/bill/108th-congress/senate-bill/2472
- Open data entity: https://api.congress.gov/v3/bill/108/s/2472