Personal Data Protection and Breach Accountability Act of 2011
Latest action. Placed on Senate legislative calendarThe list of measures reported out of committee and eligible for floor action. Being on the calendar is not a promise of a vote.Read the full definition (opens a new tab) under General Orders. Calendar No. 182.
Personal Data Protection and Breach Accountability Act of 2011 - Title I: Enhancing Punishment for Identity Theft and Other Violations of Data Privacy and Security - (Sec. 101) Amends the federal criminal code to impose a fine and/or prison term of up to five years for intentionally or willfully concealing a security breach involving sensitive personally identifiable information when such breach results in economic harm or substantial emotional distress to one or more persons.
(Sec. 102) Makes it unlawful for a service provider, as defined by this Act, to knowingly or intentionally redirect web searches or otherwise monitor, manipulate, aggregate, and market data from websites without the consent of the Internet user. Imposes a civil fine of up to $500,000 for a violation of this provision and an increased fine of up to $1 million for engaging in a pattern or practice of activity that violates this provision.
Title II: Privacy and Security of Sensitive Personally Identifiable Information - Subtitle A: Data Privacy and Security Program - (Sec. 201) Makes any interstate business entity that collects, accesses, transmits, uses, stores, or disposes of sensitive personally identifiable information on 10,000 or more U.S. persons subject to the requirements for a data privacy and security program under this Act. Exempts public records not otherwise subject to a confidentiality or nondisclosure requirement, certain financial institutions subject to the Gramm-Leach-Bliley Act, business entities subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and service providers exclusively engaged in the transmission, routing, or storage of data.
(Sec. 202) Requires business entities that are subject to personal data privacy and security requirements of this Act to implement a comprehensive program that: (1) ensures the privacy, security, and confidentiality of sensitive personally identifiable information; (2) protects against any anticipated vulnerabilities to the privacy, security, or integrity of such information; and (3) protects against unauthorized access to such information that could create a significant risk of harm.
The summary continues for 26 more paragraphs. Read it in full on Congress.gov
Written by analysts at the Congressional Research Service and published on Congress.gov, not by Civibrief. Summarized at the "Reported to Senate with amendment(s)" stage on September 22, 2011. It describes the bill, it is not the legal text.
Where is it in the process, and what happens next?
4 steps remain before this bill could become law.
The record's latest action, on September 22, 2011: Placed on Senate Legislative Calendar under General Orders. Calendar No. 182.
- Clearing the committees it was referred to, and being scheduled for a floor vote
- Passage by the Senate
- Passage by the House
- The President's signature. If the President vetoes it, two-thirds of both chambers must vote to override.
How likely is it to become law?
Civibrief does not forecast outcomes and this page has no opinion about this one. What the record supports is a base rate, which is a fact about the whole pile, not a prediction about this measure.
In the 112th Congress (2011-12), 283 of the 10,618 bills and joint resolutions introduced became law, about 2.7 percent. That count covers every measure at every stage, including the many that never left committee.
This one is not there yet: 4 steps are still outstanding, listed above.
Has anyone actually voted on it?
No. No roll call in this Congress cites this measure. That is the ordinary outcome: most measures never reach a recorded floor vote, and a committee ends most of them simply by not acting.
A vote is not the only thing that happens to a measure. Hearings, markups, and referrals are all recorded actions, and none of them is a vote of the full chamber.
Who is behind it?
Richard Blumenthal (D-CT) introduced it on September 8, 2011, and 1 member has since signed on as a cosponsor.
They are 1 Democrat.
Cosponsoring is a formal signature on the text. It is not a commitment to vote for the measure, it does not bind anyone's party, and a long list of cosponsors is a measure of attention rather than of prospects.
How long has it been in play?
It was introduced on September 8, 2011, 5481 days ago. The most recent recorded action was 5467 days ago, on September 22, 2011.
Measures do not carry over. Anything the 112th Congress has not finished by January 3, 2013 dies when the term ends, and has to be introduced again from the start in the next Congress.
Every answer above is assembled from this measure's own record on Congress.gov and from published counts of what Congress has passed before. Civibrief does not predict outcomes and takes no position on any measure.
Vote history
- SenateIn committee, no floor vote yet
- HouseAwaits Senate passage
- PresidentAwaits both chambers