,,ib  ,union ,cal5d> ,no4 #hdi  #aae?   
,,congress  #b;d ,session  ,h4 ,r4 #fgdc
  ,report ,no4 #aae-ajig  ,,9 ,,! ,,h\se
 ,,( ,,repres5tatives  ,septemb] #g1    
#bjah ,mr4 ,luetkemey] introduc$ !      
foll[+ bill2 :i* 0 ref]r$ to !          
,committee on ,f9ancial ,s]vices        
,decemb] #ba1 #bjah ,report$ ) an       
am5dm5t1 committ$ to ! ,committee ( !   
,:ole ,h\se on ! ,/ate ( ! ,union1 &    
ord]$ to be pr9t$ ,/rike out all aft] ! 
enact+ clause & ins]t ! "p pr9t$ 9      
italic ,= text ( introduc$ bill1 see    
copy ( bill z introduc$ on ,septemb] #g1
 #bjah  ,a ,,bill  ,to am5d !           
,gramm-,lea*-,bliley ,act to provide a  
national /&>d = f9ancial in/itution data
 security & brea* notification on behalf
 ( all consum]s1 & = o!r purposes4  #a4 
,%ort title ,?is ,act may be cit$ z !   
,consum] ,in=mation ,notification       
,requirem5t ,act4  #b4 ,brea*           
notification /&>ds ,section #eja ( !    
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhja7 is am5d$--  7#a7 9 subsection   

7b77#c7 by /rik+ ! p]iod at ! end &     
ins]t+ 1 includ+ ?r\gh ! provision ( a  
brea* notice 9 ! ev5t ( unau?oriz$      
access t is reasonably likely to result 
9 id5tity !ft1 fraud1 or economic loss42
 &  7#b7 by add+ at ! end ! foll[+3  7c7
 ,/&>ds ) respect to brea* notification 
,subject to section #ejd7;a77#b7 &      
sections #eje7;b7 & #eje7;c71 )9 #f     
mon?s aft] ! date ( enactm5t ( ?is      
subsection1 ea* ag5cy or au?ority       
requir$ to e/abli% /&>ds describ$ "u    
subsection 7b77#c7 ) respect to !       
provision ( a brea* notice %all ensure t
 su* /&>ds are 9 compliance ) subsection
 7b74  7d7 ,insurance  7#a7 ,en=cem5t   
,not)/&+ section #eje7;a77#f71 ) respect
 to an entity engag$ 9 provid+          
insurance1 ! /&>ds "u subsection 7b7    
%all be en=c$--  7,a7 ) respect to any  
su* /&>ds relat$ to data security       
safegu>ds1 by-- 7i7 ! ,/ate insurance   
au?ority ( ! ,/ate 9 :i* ! entity is    
domicil$2 or  7ii7 9 ! case ( an        
insurance ag5cy or brok]age1 ! ,/ate    

insurance au?ority ( ! ,/ate 9 :i* su*  
ag5cy or brok]age has its pr9cipal place
 ( bus9ess2 &  7,b7 ) respect to any su*
 /&>ds relat$ to notification ( ! brea* 
( data security1 by ! ,/ate insurance   
au?ority ( any ,/ate 9 :i* cu/om]s ( !  
entity are affect$ by su* a brea* ( data
 security4  7#b7 ,notification by assum+
 insur]  7,a7 ,9 g5]al ,not)/&+         
subsection 7b71 an assum+ insur] t      
exp]i5ces a brea* ( data security %all  
only be requir$ to notify ! ,/ate       
insurance au?ority ( ! ,/ate 9 :i* !    
assum+ insur] is domicil$4  7,b7 ,assum+
 insur] def9$ ,= purposes ( ?is         
p>agraph1 ! t]m assum+ insur] means an  
entity engag$ 9 provid+ insurance t     
acquires an insurance obligation or risk
 f ano!r entity engag$ 9 provid+        
insurance pursuant to a re9surance      
agreem5t4  7#c7 ,safegu>ds = insurance  
cu/om]s ,9 c>ry+ out subsection 7b7 )   
respect to an entity engag$ 9 provid+   
insurance1 a ,/ate insurance au?ority   
%all e/abli% ! /&>ds = safegu>d+ cu/om] 

in=mation ma9ta9$ by entities engag$ 9  
activities describ$ 9 section           
#d7k77#d77;,b7 ( ! ,bank ,hold+ ,company
 ,act ( #aief 7#ab ,u4,s4,c4            
#ahdc7d77k77#d77;,b77 t are ! same z !  
/&>ds conta9$ 9 ! int]ag5cy guidel9es   
issu$ by ! ,comptroll] ( ! ,curr5cy1 !  
,bo>d ( ,gov]nors ( ! ,f$]al ,res]ve    
,bo>d1 ! ,f$]al ,deposit ,insurance     
,corporation1 & ! ,(fice ( ,?rift       
,sup]vision titl$ ,int]ag5cy ,guidel9es 
,e/abli%+ ,/&>ds = ,safegu>d+ ,cu/om]   
,in=mation1 publi%$ ,febru>y #a1 #bjja  
7#ff ,f$4 ,reg4 #hfcc71 & su* /&>ds %all
 be appli$ z if ! entity engag$ 9       
provid+ insurance 0 a bank to ! ext5t   
appropriate & practicable4  4  #c4      
,preemption ) respect to f9ancial       
in/itution safegu>ds ,section #ejg ( !  
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhjg7 is am5d$ to read z foll[s3      
#ejg4 ,relation to ,/ate laws  7a7 ,9   
g5]al ,?is subtitle preempts any law1   
rule1 regulation1 requirem5t1 /&>d1 or  
o!r provision hav+ ! =ce & effect ( law 

( any ,/ate1 or political subdivision ( 
a ,/ate1 ) respect to a f9ancial        
in/itution or affiliate !re( secur+     
p]sonal in=mation f unau?oriz$ access or
 acquisition1 includ+ notification (    
unau?oriz$ access or acquisition ( data4
  7b7 ,insurance ,subsection 7a7 %all n 
prev5t a ,/ate or political subdivision 
( a ,/ate f e/abli%+ ! /&>ds = entities 
engag$ 9 provid+ insurance requir$ by   
sections #eja7;c7 & #eja7;d71 provid$ ! 
/&>ds e/abli%$ by su* ,/ate or political
 subdivision d n impose any requirem5t t
 is 9 addition to or diff]5t f ^? /&>ds1
 except :]e necess>y to effectuate !    
purposes ( ?is subtitle4  4  ,decemb]   
#ba1 #bjah ,report$ ) an am5dm5t1       
committ$ to ! ,committee ( ! ,:ole ,h\se
 on ! ,/ate ( ! ,union1 & ord]$ to be   
pr9t$