2018 House Bill 6406 / Public Act 649

Expand data breach response requirements

Introduced in the House

Sept. 27, 2018

Introduced by Rep. Joseph Graves (R-51)

To revise a state identity theft protection law so it conforms with the proposal in House Bill 6405 to establish detailed personal information data breach rules, guidelines, notice requirements, reporting requirements and more for businesses, associations and state agencies.

Referred to the Committee on Financial Services

Nov. 28, 2018

Reported without amendment

Without amendment and with the recommendation that the bill pass.

Dec. 4, 2018

Amendment offered by Rep. Joseph Graves (R-51)

To replace the previous version of the bill with one that revises details but does not change the substance as previously described.

The amendment passed by voice vote

Dec. 6, 2018

Passed in the House 103 to 6 (details)

Received in the Senate

Dec. 11, 2018

Referred to the Committee on Finance

Dec. 18, 2018

Reported without amendment

With the recommendation that the substitute (S-1) be adopted and that the bill then pass.

Dec. 19, 2018

Substitute offered by Sen. Jack Brandenburg (R-8)

To replace the previous version of the bill with one that revises details but does not change the substance as previously described.

The substitute passed by voice vote

Passed in the Senate 38 to 0 (details)

To revise a state identity theft protection law so it conforms with the proposal in House Bill 6491 to establish detailed personal information data breach rules for insurance companies.

Received in the House

Dec. 20, 2018

Dec. 21, 2018

Passed in the House 103 to 4 (details)

To concur with the Senate-passed version of the bill.

Signed by Gov. Rick Snyder

Dec. 28, 2018