Increasing Notice of Foreign Outsourcing Act
Latest action · May 20, 2004 Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S6007-6009)
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedMay 20, 2004
- Passed SenateNot reached
- Passed HouseNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Increasing Notice of Foreign Outsourcing Act - Directs the Secretary of Health and Human Services (HHS) to issue regulations requiring covered entities under the Health Insurance Portability and Accountability Act of 1996 that outsource protected health information to foreign-based business associates to include in their notice of privacy protections: (1) notification of outsourcing; (2) any risks and consequences to the privacy and security of such information resulting from outsourcing; (3) additional measures the covered entity is taking to protect outsourced protected health information; and (4) certification that the covered entity has taken reasonable steps to ensure that the handling of such information will comport with applicable laws.
Amends the Gramm-Leach-Bliley Act to impose similar requirements on financial institutions that outsource nonpublic personal information to foreign-based businesses.
Directs the Secretary of HHS, with regard to protected health information outsourced by covered entities, and the Federal banking agencies, National Credit Union Administration, Secretary of the Treasury, Securities and Exchange Commission, and Federal Trade Commission, with regard to nonpublic personal information outsourced by financial institutions, to issue regulations requiring: (1) outsourcing contracts with foreign-based businesses to contain audit provisions; and (2) such businesses and subcontractors to be contractually bound by Federal privacy standards and security safeguards.
Establishes notification procedures in the event of a breach of database security involving protected health or nonpublic personal information.
Requires contracts with foreign call centers to include a provision requiring call center employees to disclose their physical location upon request. Imposes civil penalties for violators.
Cosponsors
Members who signed on, in the order they did.
Actions 3
Everything that happened, newest first.
- May 20, 2004Introduced in Senate
- May 20, 2004Read twice and referred to the Committee on the Judiciary. (text of measure as introduced: CR S6007-6009)
- May 20, 2004Sponsor introductory remarks on measure. (CR S6006-6007)
Related bills 1
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| S 2481 | Increasing Notice of Foreign Outsourcing Act | Identical bill | Jun 1, 2004 |
Subjects
Assigned by the Library of Congress. Policy area: Commerce.
- Administrative procedure
- Business records
- Civil Rights and Liberties, Minority Issues
- Commerce
- Computer security measures
- Consumer education
- Consumer protection
- Contractors
- Contracts
- Data banks
- Department of Health and Human Services
- Department of the Treasury
- Federal Deposit Insurance Corporation
- Federal Reserve System
- Federal Trade Commission
- Finance and Financial Sector
- Financial institutions
- Financial services
- Financial statements
- Fines (Penalties)
- Foreign corporations
- Foreign Trade and International Finance
- Government Operations and Politics
- Government paperwork
- Government publicity
- Health
- Health care industry
- Independent regulatory commissions
- Information disclosure (Securities law)
- Internet
- Law
- Medical records
- National Credit Union Administration
- Right of privacy
- Science, Technology, Communications
- Securities and Exchange Commission
- Subcontractors
- Subsidiary corporations
- Telephone
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.