S. 1216Senate109th Congress (2005-2007)In Committee

Financial Privacy Breach Notification Act of 2005

Introduced June 9, 2005

Legislative Activity

Stay on top of the latest movement without scrolling through every action

2 earlier actions
SenateIntro Referral Latest Action

Read twice and referred to the Committee on Banking, Housing, and Urban Affairs. (text of measure as introduced: CR S6319-6320)

June 9, 2005

View full timeline
SenateIntro Referral

Introduced in Senate

June 9, 2005

SenateIntro Referral

Sponsor introductory remarks on measure. (CR S6318-6319)

June 9, 2005

SenateIntro Referral

Read twice and referred to the Committee on Banking, Housing, and Urban Affairs. (text of measure as introduced: CR S6319-6320)

June 9, 2005

Floor Debate

14 members

What members said about S. 1216 on the floor

6 Republicans8 Democrats
Jeff Bingaman
Sen. Jeff BingamanD-NM · Jun 9, 2005

Mr. President--I rise today to introduce a bill that would establish a capability within the State Department Science Advisor's Office to assess science and technology outside the United States. Over…

Christopher J. Dodd
Sen. Christopher J. DoddD-CT · Jun 9, 2005

Mr. President, I am pleased to join with my colleague from Maine, Senator Collins, and my colleague from Vermont, Senator Leahy, to introduce legislation today to protect America's children from the…

Debbie Stabenow
Sen. Debbie StabenowD-MI · Jun 9, 2005

Mr. President, I rise today to introduce legislation that will convey the United States Coast Guard Cutter Mackinaw to the City and County of Cheboygan for use as a museum. The United States Coast…

Tom Harkin
Sen. Tom HarkinD-IA · Jun 9, 2005

Mr. President, over the past 100 years, the economy of the United States has become inextricably tied to the supply of petroleum. In the early part of the 20th century, America's abundant sources of…

Edward M. Kennedy
Sen. Edward M. KennedyD-MA · Jun 9, 2005

Mr. President, it is a privilege to join my distinguished colleague, Senator Durbin, in introducing the Teacher Excellence for All Children Act of 2005. Its goal is to bring us closer to giving every…

Show 8 more
Judd Gregg
Sen. Judd GreggR-NH · Jun 9, 2005

Mr. President, today I am proud to introduce the Higher Education for Freedom Act. This bill will establish a competitive grant program making funds available to institutions of higher education,…

Olympia J. Snowe
Sen. Olympia J. SnoweR-ME · Jun 9, 2005

Mr. President, this year well over 6 million pregnancies will occur in America. The challenge of raising healthy children and preparing them for a changing world is a staggering one indeed. This is…

Lamar Alexander
Sen. Lamar AlexanderR-TN · Jun 9, 2005

Mr. President, in order to protect our Nation's most scenic areas, Senator Warner, the senior Senator from Virginia, and I are today introducing a revised version of the Environmentally Responsible…

Harry Reid
Sen. Harry ReidD-NV · Jun 9, 2005

Mr. President, this week marks the fortieth anniversary of the U.S. Supreme Court decision in Griswold v. Connecticut that struck down a Connecticut law that had made the use of birth control by…

Barbara Boxer
Sen. Barbara BoxerD-CA · Jun 9, 2005

Mr. President, as we commemorate World Oceans Week, we celebrate the wonder and beauty of the world's oceans. We celebrate the role our oceans play in commerce, fishing and shipping. We celebrate the…

Ted Stevens
Sen. Ted StevensR-AK · Jun 9, 2005

Mr. President, I introduce legislation today to maintain the solvency of the Oil Spill Liability Trust Fund established pursuant to the Oil Pollution Act of 1990. Shortly after midnight on March 24,…

Jon S. Corzine
Sen. Jon S. CorzineD-NJ · Jun 9, 2005

Mr. President, identity theft is a serious and growing concern facing our Nation's consumers. According to the Federal Trade Commission, nearly 10 million Americans were the victims of identity theft…

Jon S. Corzine
Sen. Jon S. CorzineD-NJ · Jun 9, 2005

Mr. President, identity theft is a serious and growing concern facing our Nation's consumers. According to the Federal Trade Commission, nearly 10 million Americans were the victims of identity theft…

Show 2 more
Conrad R. Burns
Sen. Conrad R. BurnsR-MT · Jun 9, 2005

Mr. President, today I am introducing legislation that provides an important clarification to the Fort Peck Reservation Rural Water System Act of 2000. The water project authorized by that…

Gordon H. Smith
Sen. Gordon H. SmithR-OR · Jun 9, 2005

Mr. President, today I introduce important legislation to enable more Americans to realize the dream of homeownership. The First- Time Homebuyers' Tax Credit Act that Senator Stabenow and I are…

Bill Text

Latest available legislative text

Reading Mode
Latest
Introduced in SenateIssued June 9, 2005

II

109th CONGRESS

1st Session

S. 1216

IN THE SENATE OF THE UNITED STATES

June 9, 2005

Mr. Corzine introduced the following bill; which was read twice and referred to the Committee on Banking, Housing, and Urban Affairs

A BILL

To require financial institutions and financial service providers to notify customers of the unauthorized use of personal financial information, and for other purposes.

1.

Short title

This Act may be cited as the Financial Privacy Breach Notification Act of 2005.

2.

Timely notification of unauthorized access to personal financial information

Subtitle B of title V of the Gramm-Leach-Bliley Act (15 U.S.C. 6821 et seq.) is amended—

(1)

by redesignating sections 526 and 527 as sections 528 and 529, respectively; and

(2)

by inserting after section 525 the following:

526.

Notification to customers of unauthorized access to personal financial information

(a)

Definitions

In this section:

(1)

Breach

The term breach—

(A)

means the unauthorized acquisition, or loss, of computerized data or paper records which compromises the security, confidentiality, or integrity of personal financial information maintained by or on behalf of a financial institution; and

(B)

does not include a good faith acquisition of personal financial information by an employee or agent of a financial institution for a business purpose of the institution, if the personal financial information is not subject to further unauthorized disclosure.

(2)

personal financial information

The term personal financial information means the last name of an individual in combination with any 1 or more of the following data elements, when either the name or the data elements are not encrypted:

(A)

Social security number.

(B)

Driver’s license number or State identification number.

(C)

Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to the financial account of an individual.

(b)

Notification to customers relating to unauthorized access of personal financial information

(1)

Financial institution requirement

In any case in which there has been a breach of personal financial information at a financial institution, or such a breach is reasonably believed to have occurred, the financial institution shall promptly notify—

(A)

each customer affected by the violation or suspected violation;

(B)

each consumer reporting agency described in section 603(p) of the Fair Credit Reporting Act (15 U.S.C. 1681a); and

(C)

appropriate law enforcement agencies, in any case in which the financial institution has reason to believe that the breach or suspected breach affects a large number of customers, including as described in subsection (e)(1)(C), subject to regulations of the Federal Trade Commission.

(2)

Other entities

For purposes of paragraph (1), any person that maintains personal financial information for or on behalf of a financial institution shall promptly notify the financial institution of any case in which such customer information has been, or is reasonably believed to have been, breached.

(c)

Timeliness of notification

Notification required by this section shall be made—

(1)

promptly and without unreasonable delay, upon discovery of the breach or suspected breach; and

(2)

consistent with—

(A)

the legitimate needs of law enforcement, as provided in subsection (d); and

(B)

any measures necessary to determine the scope of the breach or restore the reasonable integrity of the information security system of the financial institution.

(d)

Delays for law enforcement purposes

Notification required by this section may be delayed if a law enforcement agency determines that the notification would impede a criminal investigation, and in any such case, notification shall be made promptly after the law enforcement agency determines that it would not compromise the investigation.

(e)

Form of notice

Notification required by this section may be provided—

(1)

to a customer—

(A)

in written notification;

(B)

in electronic form, if the notice provided is consistent with the provisions regarding electronic records and signatures set forth in section 101 of the Electronic Signatures in Global and National Commerce Act (15 U.S.C. 7001);

(C)

if the Federal Trade Commission determines that the number of all customers affected by, or the cost of providing notifications relating to, a single breach or suspected breach would make other forms of notification prohibitive, or in any case in which the financial institution certifies in writing to the Federal Trade Commission that it does not have sufficient customer contact information to comply with other forms of notification, in the form of—

(i)

an e-mail notice, if the financial institution has access to an e-mail address for the affected customer that it has reason to believe is accurate;

(ii)

a conspicuous posting on the Internet website of the financial institution, if the financial institution maintains such a website; or

(iii)

notification through the media that a breach of personal financial information has occurred or is suspected that compromises the security, confidentiality, or integrity of customer information of the financial institution; or

(D)

in such other form as the Federal Trade Commission may by rule prescribe; and

(2)

to consumer reporting agencies and law enforcement agencies (where appropriate), in such form as the Federal Trade Commission may prescribe, by rule.

(f)

Content of notification

Each notification to a customer under subsection (b) shall include—

(1)

a statement that—

(A)

credit reporting agencies have been notified of the relevant breach or suspected breach; and

(B)

the credit report and file of the customer will contain a fraud alert to make creditors aware of the breach or suspected breach, and to inform creditors that the express authorization of the customer is required for any new issuance or extension of credit (in accordance with section 605(g) of the Fair Credit Reporting Act); and

(2)

such other information as the Federal Trade Commission determines is appropriate.

(g)

Compliance

Notwithstanding subsection (e), a financial institution shall be deemed to be in compliance with this section, if—

(1)

the financial institution has established a comprehensive information security program that is consistent with the standards prescribed by the appropriate regulatory body under section 501(b);

(2)

the financial institution notifies affected customers and consumer reporting agencies in accordance with its own internal information security policies in the event of a breach or suspected breach of personal financial information; and

(3)

such internal security policies incorporate notification procedures that are consistent with the requirements of this section and the rules of the Federal Trade Commission under this section.

(h)

Civil penalties

(1)

Damages

Any customer injured by a violation of this section may institute a civil action to recover damages arising from that violation.

(2)

Injunctions

Actions of a financial institution in violation or potential violation of this section may be enjoined.

(3)

Cumulative effect

The rights and remedies available under this section are in addition to any other rights and remedies available under applicable law.

(i)

Rules of construction

(1)

In general

Compliance with this section by a financial institution shall not be construed to be a violation of any provision of subtitle (A), or any other provision of Federal or State law prohibiting the disclosure of financial information to third parties.

(2)

Limitation

Except as specifically provided in this section, nothing in this section requires or authorizes a financial institution to disclose information that it is otherwise prohibited from disclosing under subtitle A or any other provision of Federal or State law.

(j)

Enforcement

The Federal Trade Commission is authorized to enforce compliance with this section, including the assessment of fines for violations of subsection (b)(1).

.

3.

Effective date

This Act shall take effect on the expiration of the date which is 6 months after the date of enactment of this Act.