Data Security and Breach Notification Act
This bill requires the Federal Trade Commission to require certain entities that own or possess data containing personal information, or that contract with a third-party to maintain or process such information, to implement certain information-security policies and procedures for the treatment and protection of the information.
Such entities must provide specified notice following the discovery of a security breach of such information.