,i  #aaeth ,,congress  #ast ,session    
,h4 ,r4 #cgff  ,,in ,,the ,,house ,,of  
,,representatives  ,september #ac1      
#bjag,mr4 ,himes introduced the         
following bill2 which was referred to   
the ,committee on ,financial ,services  
,a ,,bill  ,to amend the ,fair ,credit  
,reporting ,act to require consumer     
reporting agencies to place a security  
freeze on a consumer report without a   
fee if the consumer reporting agency is 
subject to a breach of data security1   
and for other purposes4  #a4 ,short     
title ,this ,act may be cited as the    
,credit ,information ,protection ,act of
 #bjag4  #b4 ,security freezes on       
consumer reports ,section #fje;,a of the
 ,fair ,credit ,reporting ,act 7#ae     
,u4,s4,c4 #afha;c-#a7 is amended by     
adding at the end the following3  7i7   
,security freezes  7#a7 ,in general ,a  
consumer reporting agency described in  
section #fjc7p7 shall provide to a      
consumer1 upon request1 a security      
freeze on the consumer report of such   

consumer after a breach of data security
 at such a consumer reporting agency4   
7#b7 ,types of security freezes ,a      
consumer reporting agency shall-- 7,a7  
place a security freeze on a consumer   
report without a fee to any consumer2   
and  7,b7 with respect to a consumer    
that has been specifically notified by  
the consumer reporting agency that the  
consumer was affected by the breach of  
data security1 place or remove an       
unlimited amount of security freezes1   
upon request1 without a fee4  7#c7      
,definitions ,in this subsection3 7,a7  
,breach of data security  7i7 ,in       
general ,the term breach of data        
security means the unauthorized         
acquisition of sensitive financial      
account information or sensitive        
personal information4  7ii7 ,exception  
for data that is not in usable form ,the
 term breach of data security does not  
include the unauthorized acquisition of 
sensitive financial account information 
or sensitive personal information that  

is encrypted1 redacted1 or otherwise    
protected by another method that renders
 the information unreadable and unusable
 if the encryption1 redaction1 or       
protection process or key is not also   
acquired without authorization4  7,b7   
,security freeze ,the term security     
freeze means a notice placed in a       
consumer report1 at the request of a    
consumer1 that prohibits the credit     
reporting agency from releasing the     
consumer report or any information in   
the consumer report without the express 
authorization of the consumer4  7,c7    
,sensitive financial account information
 ,the term sensitive financial account  
information means a financial account   
number relating to a consumer1 including
 a credit card number or debit card     
number1 in combination with any security
 code1 access code1 password1 or other  
personal identification information     
required to access the financial        
account4  7,d7 ,sensitive personal      
information  7i7 ,in general ,the term  

sensitive personal information          
includes-- 7,i7 a ,social ,security     
number2 and  7,,ii7 the first and last  
name of a consumer in combination with--
 7aa7 the consumer's driver's license   
number1 passport number1 military       
identification number1 or other similar 
number issued on a government document  
used to verify identity2  7bb7          
information that could be used to access
 a consumer's account1 such as a user   
name and password or e-mail and         
password2 or  7cc7 biometric data of the
 consumer used to gain access to        
financial accounts of the consumer4     
7ii7 ,exception ,the term sensitive     
personal information does not include   
publicly available information that is  
lawfully made available to the general  
public and obtained from--  7,i7        
,federal1 ,state1 or local government   
records2 or  7,,ii7 widely distributed  
media4  4