Data Security Act of 2006 - Prescribes security procedures which an entity that maintains or communicates sensitive account or personal information must implement and enforce in order to protect the information from an unauthorized use likely to result in substantial harm or inconvenience to the consumer.
Grants exclusive enforcement powers to specified federal regulatory agencies with oversight of financial institutions.
Prescribes data security standards to be implemented by federal agencies.
Preempts state law with respect to the responsibilities of any person to protect against and investigate such data security breaches and mitigate any losses or harm resulting from them.