Cyber-Security Enhancement and Consumer Data Protection Act of 2006
Latest action · Jun 22, 2006 Placed on the Union Calendar, Calendar No. 292.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedMay 9, 2006
- Passed HouseNot reached
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Cyber-Security Enhancement and Consumer Data Protection Act of 2006 - (Sec. 2) Amends the federal criminal code to prohibit obtaining without authorization: (1) a means of identification from a protected computer (a computer exclusively for the use of a financial institution or the federal government); or (2) the capability to gain access to or remotely control a protected computer.
(Sec. 3) Revises the definition of "protected computer" to include a computer the use of which affects interstate or foreign commerce or communication. Eliminates the criminal law requirement that conduct constituting computer fraud involve an interstate or foreign communication.
(Sec. 4) Includes computer fraud within the definition of racketeering for purposes of the Racketeer Influenced and Corrupt Organizations Act (RICO).
(Sec. 5) Includes threats to access a protected computer without authorization or to exceed such authorized access within the definition of computer-related extortion.
(Sec. 6) Expands the crime of computer fraud to include conspiracy to commit computer fraud.
(Sec. 7) Imposes a fine and/or prison term of up to five years for failure to notify the U.S. Secret Service or Federal Bureau of Investigation (FBI) of a major security breach in a database containing identification information with the intent to prevent, obstruct, or impede a lawful investigation of such breach. Defines "major security breach" as any security breach that involves: (1) the acquisition of the identification information of 10,000 or more individuals causing a significant risk of identity theft; (2) databases owned by the federal government; and (3) data containing identification information of federal employees or contractors involved in national security matters or law enforcement.
Directs the Attorney General and the Secretary of Homeland Security to jointly issue regulations on the form, content, and timing of notices of major security breaches. Requires that such regulations provide that notice of a security breach be provided to the Secret Service or FBI before notice is provided to consumers and within 14 days after discovery of such breach.
Grants immunity to law enforcement entities or to any person who notifies law enforcement of a security breach.
Imposes a civil penalty of $50,000 for each day any individual fails to provide notice of a major security breach (not to exceed $1 million).
(Sec. 8) Increases the prison term for computer fraud to a maximum of 30 years. Requires forfeiture of any personal property used to commit computer fraud.
(Sec. 9) Directs the U.S. Sentencing Commission to review and amend its guidelines and policy statements to reflect congressional intent to increase criminal penalties for computer fraud.
(Sec. 10) Imposes criminal penalties for damage affecting ten or more protected computers during any one-year period.
(Sec. 11) Authorizes additional funding in FY2007-FY2011 to the Director of the Secret Service, the Attorney General for the Criminal Division of the Department of Justice, and the Director of the FBI to investigate and prosecute crimes committed through the use of computers.
Cosponsors 6
Members who signed on, in the order they did. Signatures ran from May 9, 2006 to May 17, 2006; 5 are original cosponsors, there from the day it was introduced.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| D-CA | Adam B. Schiff | Original | May 9, 2006 |
| R-OH | Deborah Pryce | Original | May 9, 2006 |
| R-NC | Howard Coble | Original | May 9, 2006 |
| R-TX | Lamar Smith | Original | May 9, 2006 |
| R-FL | Tom Feeney | Original | May 9, 2006 |
| R-OH | Steve Chabot | May 17, 2006 |
Committees 1
Where it was sent and what each committee and subcommittee did with it, in order.
| Chamber | Committee | What it did |
|---|---|---|
| House | Judiciary Committee | Referred May 9, 2006Markup May 25, 2006Reported Jun 22, 2006 |
| Crime and Federal Government Surveillance Subcommittee | Referred May 9, 2006Hearings May 11, 2006Markup May 18, 2006Reported May 18, 2006 |
Actions 10
Everything that happened, newest first.
- Jun 22, 2006Reported (Amended) by the Committee on Judiciary. H. Rept. 109-522.
- Jun 22, 2006Placed on the Union Calendar, Calendar No. 292.
- May 25, 2006Committee Consideration and Mark-up Session Held.
- May 25, 2006Ordered to be Reported (Amended) by Voice Vote.
- May 18, 2006Subcommittee Consideration and Mark-up Session Held.
- May 18, 2006Forwarded by Subcommittee to Full Committee by Voice Vote .
- May 11, 2006Subcommittee Hearings Held.
- May 9, 2006Introduced in House
- May 9, 2006Referred to the Subcommittee on Crime, Terrorism, and Homeland Security.
- May 9, 2006Referred to the House Committee on the Judiciary.
Research
What has been written about this bill: committee reports, cost estimates, the sponsor’s authority statement, printed hearings and the Congressional Research Service’s work.
Committee report
Congressional Budget Office cost estimates 2
- Jun 16, 2006H.R. 5318, Cyber-Security Enhancement and Consumer Data Protection Act of 2006<p>Cost estimate for the bill as ordered reported by the House Committee on the Judiciary on May 25, 2006</p>
- Jun 16, 2006H.R. 5318, Cyber-Security Enhancement and Consumer Data Protection Act of 2006Cost estimate for the bill as ordered reported by the House Committee on the Judiciary on May 25, 2006
Printed hearings 1
Hearings whose printed record names this bill, newest first: hearings on it, and wider hearings where it came up.
| Number | Hearing | Committee | Held |
|---|---|---|---|
| Serial No. 109-106 | CYBER-SECURITY ENHANCEMENT AND CONSUMER DATA PROTECTION ACT OF 200669 pages | Judiciary Committee | May 11, 2006 |
Titles 4
Every title it has carried, official and short, at each stage.
- Official Title as Introduced
- To amend title 18, United States Code, to better assure cyber-security, and for other purposes.
- Short Titles as Introduced
- Cyber-Security Enhancement and Consumer Data Protection Act of 2006
- Short Titles as Reported to House
- Cyber-Security Enhancement and Consumer Data Protection Act of 2006
- Popular Titles
- Identity Theft bill
Subjects
Assigned by the Library of Congress. Policy area: Crime and Law Enforcement.
- Administrative procedure
- Armed Forces and National Security
- Civil Rights and Liberties, Minority Issues
- Classified defense information
- Commerce
- Computer crimes
- Computer hackers
- Computer industry
- Computer security measures
- Conspiracy
- Consumer education
- Counterintelligence
- Crime and Law Enforcement
- Criminal investigation
- Criminal justice information
- Data banks
- Department of Homeland Security
- Department of Justice
- Electronic government information
- Espionage
- Federal Bureau of Investigation (FBI)
- Federal employees
- Federal law enforcement officers
- Fines (Penalties)
- Forfeiture
- Fraud
- Government contractors
- Government Operations and Politics
- Government paperwork
- Identification devices
- Identity theft
- Information technology
- Internet
- Labor and Employment
- Larceny
- Law
- Obstruction of justice
- Official secrets
- Organized crime
- Personnel records
- Police training
- Prosecution
- Recruiting of employees
- Right of privacy
- Science, Technology, Communications
- Secret service
- Sentencing guidelines
- U.S. Sentencing Commission
Text 2
Each version as it was printed, newest first.
- Jun 22, 2006Reported in House
- May 9, 2006Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov; cost estimates are the Congressional Budget Office's, and the hearings are the printed hearings GovInfo publishes, which can appear months after the hearing.