Data Accountability and Trust Act
Latest action · May 6, 2011 Referred to the Subcommittee on Commerce, Manufacturing, and Trade.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedMay 4, 2011
- Passed HouseNot reached
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Data Accountability and Trust Act - Requires the Federal Trade Commission (FTC) to promulgate regulations requiring each person engaged in interstate commerce that owns or possesses data containing personal information to establish specified security policies and procedures to treat and protect such information.
Requires the regulations to include methods for disposing of both electronic and nonelectronic data.
Requires information brokers to submit their security policies to the FTC in conjunction with a notification of a security breach notification or on FTC request. Authorizes the FTC to conduct information security practices audits of brokers who have had a security breach or require such brokers to conduct independent audits.
Requires information brokers to: (1) establish procedures to verify the accuracy of information that identifies individuals, (2) provide to individuals whose personal information it maintains a means to review it, (3) place a conspicuous notice on the Internet instructing individuals how to request access to such information, and (4) correct inaccurate information.
Directs the FTC to require information brokers to establish measures which facilitate the auditing or retracing of access to, or transmissions of, any data containing personal information.
Makes it unlawful for information brokers to obtain or disclose personal information by false pretenses (pretexting).
Requires such person to notify the FTC and affected individuals of information security breaches. Sets forth requirements concerning such notification, including method of notification requirements and timeliness requirements. Allows an exemption from notification requirements if such person determines that there is no reasonable risk of identity theft, fraud, or other unlawful conduct.
Preempts state information security laws.
Cosponsors 4
Members who signed on, in the order they did. Signatures ran from May 4, 2011 to Dec 12, 2011, with 2 there on the day it was introduced.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| D-IL | Janice D. Schakowsky | Original | May 4, 2011 |
| R-TX | Joe Barton | Original | May 4, 2011 |
| D-IL | Daniel Lipinski | Jul 11, 2011 | |
| D-RI | David N. Cicilline | Dec 12, 2011 |
Actions 3
Everything that happened, newest first.
- May 6, 2011Referred to the Subcommittee on Commerce, Manufacturing, and Trade.
- May 4, 2011Introduced in House
- May 4, 2011Referred to the House Committee on Energy and Commerce.
Related bills 2
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| S 1207 | Data Security and Breach Notification Act of 2011 | Related bill | Jun 15, 2011 |
| HR 2577 | SAFE Data Act | Related bill | Jul 29, 2011 |
Subjects
Assigned by the Library of Congress. Policy area: Commerce.
- Administrative law and regulatory procedures
- Business records
- Commerce
- Computer security and identity theft
- Computers and information technology
- Consumer affairs
- Consumer credit
- Federal preemption
- Federal Trade Commission (FTC)
- Fraud offenses and financial crimes
- Internet and video services
- Internet, web applications, social media
- Marketing and advertising
- Right of privacy
Text 1
Each version as it was printed, newest first.
- May 4, 2011Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.