Introduced
by
To require a public or private entity that maintains computerized data with personalized information on individuals to notify those individuals if a breach of security allows unencrypted personal identifying information to be acquired by an unauthorized person. The bill specifies what the notice must contain, and requires that it offer a toll-free phone number from which an individual can get more details. Also, to require the notification of credit reporting agencies and news media outlets of the breach. A person damaged by a failure to provide timely notice could sue for actual damages and costs, and this failure could also be prosecuted as a crime.
Referred to the Committee on Judiciary
