S.Amdt. 4839

SA 4839. Mr. OBAMA submitted an amendment intended to be proposed by
him to the bill H.R. 5631, making appropriations for the Department of
Defense for the fiscal year ending September 30, 2007, and for other
purposes; which was ordered to lie on the table; as follows:

At the appropriate place, insert the following:
Sec. 8109. (a) Certification on Notification of Disclosure
of Personal Information.--Not later than 30 days after the
date of any data security breach of the Department of
Defense, the Secretary of Defense shall certify in writing to
the congressional defense committees that each member of the
Armed Forces or other individual whose personal information,
while in the possession or control of the Department of
Defense has been compromised due to lax security precautions
at the Department of Defense, theft, or negligent disclosure
has been appropriately notified in writing of such
compromise.
(b) Provision of Certain Services.--Upon request of any
individual described in subsection (a), the Secretary shall
provide to such individual, at no charge to such individual--
(1) credit monitoring services during the 1-year period
beginning on the date of such request; and
(2) a copy of the credit report (as defined in section 603
of the Fair Credit Reporting Act) of such individual from
each of the major credit bureaus, including Equifax,
TransUnion, and Experian, once annually during the 2-year
period beginning on the date on which the credit monitoring
services required by paragraph (1) terminate, which shall be
in addition to any other credit report provided to such
individual under law, whether at no cost to such individual
or otherwise.
(c) Definitions.--In this section:
(1) The term ``data security breach'' means the
unauthorized assess or use of data in electronic or printed
form that contains personal information.
(2) The term ``personal information'', in the case of an
individual, means the name, address, or telephone number of
the individual in combination with any of the following:
(A) The Social Security Number of the individual.
(B) Any information regarding the medical history of the
individual.
(C) The history of the individual's service in the Armed
Forces.
(D) Any other personally identifiable information of the
individual that is not routinely part of the public record.
______