,i #aacth ,,congress #b;d ,session ,h4 ,r4 #dfjd ,,in ,,the ,,house ,,of ,,representatives ,may #g1 #bjad ,mr4 ,westmoreland 7for himself1 ,mr4 ,duffy1 ,mrs4 ,bachmann1 ,mr4 ,long1 ,mr4 ,posey1 ,mr4 ,bentivolio1 and ,mr4 ,luetkemeyer7 introduced the following bill2 which was referred to the ,committee on ,financial ,services ,a ,,bill ,to amend the ,consumer ,financial ,protection ,act of #bjaj to create a consumer opt-out list for data collected by the ,bureau1 to put time limits on data held by the ,bureau1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,,cfpb ,data ,collection ,security ,act4 #b4 ,collection and disposal of consumer information ,section #ajbb7;c7 of the ,consumer ,financial ,protection ,act of #bjaj 7#ab ,u4,s4,c4 #eeab7;c77 is amended by adding at the end the following3 7#aj7 ,opt-out list for data collection 7,a7 ,in general ,the ,bureau shall establish an opt-out list1 which shall contain a list of consumers who have notified the ,bureau that they do not wish to allow the ,bureau to collect personally identifiable information about them4 7,b7 ,availability of list ,the ,bureau shall provide consumers with a method of adding and removing their names from the opt-out list both over the phone and on the website of the ,bureau4 7,c7 ,prohibition on data collection 7i7 ,in general ,the ,bureau may not collect personally identifiable information about a consumer if the consumer is listed on the opt-out list4 7ii7 ,exception for consumer complaints 7,i7 ,in general ,this subparagraph shall not apply with respect to consumer complaints4 7,,ii7 ,use of data ,personally identifiable information contained in a consumer complaint with respect to a consumer that is listed on the opt-out list may not be used for any purpose other than the consumer complaint1 including supervisory functions or market monitoring4 7#aa7 ,timing limitation on data held by the ,bureau ,the ,bureau shall delete or otherwise destroy-- 7,a7 any information related to a consumer complaint regarding consumer financial products or services1 not later than the end of the #fj-;day period following the completion of any review into such complaint where no further action will be taken2 7,b7 any reports issued by1 or data collected while conducting an examination of1 any covered person1 depository institution1 or credit union over which the ,bureau has supervisory authority1 after three examinations1 except for enforcement actions that specifically address payments to consumers2 and 7,c7 any information collected by the ,bureau about a particular consumer or other person not described under subparagraph 7,a7 or 7,b71 not later than the #fj-;day period following the date on which the ,bureau collected such information4 7#ab7 ,requirement in event of privacy breach ,if the ,bureau experiences a data breach that exposes personally identifiable information about a consumer1 the ,bureau shall provide such consumer with one year of free credit monitoring and publicly notify consumers of the breach on the front page of the ,bureau's website4 7#ac7 ,requirement for ,senate-confirmed ,director ,notwithstanding any other provision of law1 the ,bureau may not collect any data or perform any market monitoring unless the ,bureau has a ,senate-confirmed ,director4 4 #c4 ,personnel requirement ,section #ajac7;a7 of the ,consumer ,financial ,protection ,act of #bjaj 7#ab ,u4,s4,c4 #edic7;a77 is amended by adding at the end the following3 7#f7 ,confidential security clearance required for certain employees ,no employee of the ,bureau may access personally identifiable information collected by the ,bureau unless such employee holds a confidential security clearance4 4