S. 3333 (112th): Data Security and Breach Notification Act of 2012

Introduced:
Jun 21, 2012 (112th Congress, 2011–2013)
Sponsor:
Sen. Patrick “Pat” Toomey [R-PA]
Status:
Died (Referred to Committee)

The bill’s title was written by the bill’s sponsor. S. stands for Senate bill.

(About Ads | Advertise Here)
Status

This bill was introduced on June 21, 2012, in a previous session of Congress, but was not enacted.

Progress
Introduced Jun 21, 2012
Referred to Committee Jun 21, 2012
Cosponsors
5 cosponsors (5R) (show)
Committees

Senate Commerce, Science, and Transportation

The committee chair determines whether a bill will move past the committee stage.

Full Title

A bill to require certain entities that collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information, and for other purposes.

Summary

No summaries available.

Text

Read Bill Text »

Last updated Jun 21, 2012.
14 pages

Primary Source

View on THOMAS (The Library of Congress)

GovTrack gets most information from THOMAS, which is updated generally one day after events occur. Activity since the last update may not be reflected here.

Citation

Click a format for a citation suggestion:

GovTrack’s Bill Summary

We don’t have a summary available yet.

Library of Congress Summary

The summary below was written by the Congressional Research Service, which is a nonpartisan division of the Library of Congress.

6/21/2012--Introduced.
Data Security and Breach Notification Act of 2012 - Requires commercial entities that acquire, maintain, store, or utilize personal information (covered entities) to take reasonable measures to protect and secure data in electronic form containing personal information.
Directs a covered entity that owns or licenses such data to give notice of any breach of the security of the system that the entity reasonably believes has caused or will cause identity theft or other financial harm to each individual:
(1) who is a U.S. citizen or resident; and
(2) whose personal information was, or that the covered entity reasonably believes has been, accessed and acquired by an unauthorized person.
Requires a covered entity to notify the Secret Service or the Federal Bureau of Investigation (FBI) of a security breach of personal information involving more than 10,000 individuals.
Requires a third-party entity contracted to maintain, store, or process data containing personal information to notify the covered entity of a breach of security of a system.
Requires a service provider to notify the covered entity if it becomes aware of a breach of security involving personal information owned or possessed by a covered entity and if such covered entity can be reasonably identified.
Allows delays of notifications to avoid impeding a civil or criminal investigation or threatening national or homeland security.
Sets forth the methods for notification under this Act. Preempts information security practices of the Communications Act applicable to telecommunication carriers, satellite operators, and cable operators.
Sets forth civil monetary penalties for violations of this Act. Exempts financial institutions and entities subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

House Republican Conference Summary

The summary below was written by the House Republican Conference, which is the caucus of Republicans in the House of Representatives.

No summary available.

House Democratic Caucus Summary

The House Democratic Caucus does not provide summaries of bills.

So, yes, we display the House Republican Conference’s summaries when available even if we do not have a Democratic summary available. That’s because we feel it is better to give you as much information as possible, even if we cannot provide every viewpoint.

We’ll be looking for a source of summaries from the other side in the meanwhile.

The bill contains the following citations to other parts of U.S. law:

Slip Laws

Slip laws refer to enacted bills and joint resolutions in their original form as enacted by Congress, that is, before other laws amend them. Slip laws are cited as “Public Law XXX-YYY”, where XXX is the number of the Congress in which the bill or resolution was introduced.

United States Code

The United States Code is the compilation of permanent laws enacted by Congress. Temporary and other non-permanent laws do not appear in the United States Code. (About half of the United States Code is the law itself, called positive law. The other half is merely a compilation of the laws but has no legal significance.)