,,ii  #aae? ,,congress  #a/ ,session    
,s4 #bahh  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,decemb] #d1 #bjag ,mr4
 ,m55dez introduc$ ! foll[+ bill2 :i* 0 
read twice & ref]r$ to ! ,committee on  
,bank+1 ,h\s+1 & ,urban ,affairs  ,a    
,,bill  ,to am5d ! ,fair ,cr$it ,report+
 ,act to provide protections = consum]s 
aft] a data brea* at a consum] report+  
ag5cy1 & = o!r purposes4  #a4 ,%ort     
title  ,?is ,act may be cit$ z !        
,consum] ,data ,protection ,act4  #b4   
,data security  7a7 ,9 g5]al ,! ,fair   
,cr$it ,report+ ,act 7#ae ,u4,s4,c4     
#afha et seq47 is am5d$ by ins]t+ aft]  
section #fje;,b 7#ae ,u4,s4,c4          
#afha;c-#b7 ! foll[+3  #fje;,c4 ,data   
security at consum] report+ ag5cies  7a7
 ,def9itions ,9 ?is section-- 7#a7 ! t]m
 affect$ individual means an individual1
 ! s5sitive p]sonal in=mation ( :om is  
lo/1 /ol51 or access$ )\t au?orization  
because ( a data brea*2  7#b7 ! t]m     
appropriate committees ( ,congress      
means-- 7,a7 ! ,committee on ! ,judici>y

 ( ! ,s5ate2  7,b7 ! ,committee on      
,bank+1 ,h\s+1 & ,urban ,affairs ( !    
,s5ate2  7,c7 ! ,committee on !         
,judici>y ( ! ,h\se ( ,repres5tatives2 &
  7,d7 ! ,committee on ,f9ancial        
,s]vices ( ! ,h\se ( ,repres5tatives2   
7#c7 ! t]m cov]$ action means an action 
t re/ricts ! legal rights available to a
 consum]1 includ+-- 7,a7 requir+ !      
consum] to--  7i7 waive ! "r ( ! consum]
 to-- 7,i7 file a civil action 9 an     
appropriate c\rt2 or  7,,ii7 br+1 or    
p>ticipate 91 a class action2 or  7ii7  
engage 9 settlem5t negotiations be=e    
br++ an action "u subsection 7c77#c72 & 
7,b7 (f]+ a f9ancial inducem5t 9 ex*ange
 = ! consum] waiv+ any "r ( ! consum]2  
7#d7 ! t]m cr$it freeze--  7,a7 except z
 provid$ 9 subp>agraph 7,b71 means a    
re/riction plac$ on ! consum] report ( a
 consum] at ! reque/ ( ! consum]1 or a  
p]sonal repres5tative ( ! consum]1 t    
prohibits a consum] report+ ag5cy f     
releas+ ! consum] report = any purpose2 
&  7,b7 ) respect to ! consum] report ( 

a consum]1 %all n apply to ! use ( !    
consum] report by--  7i7 a p]son1 or a  
subsidi>y1 affiliate1 ag5t1             
subcontractor1 or assignee ( ! p]son1 ) 
:i* ! consum] has1 or be=e assignm5t _h1
 an acc\nt1 contract1 or debtor-cr$itor 
relation%ip = ! purposes (--  7,i7      
review+ ! active acc\nt2 or  7,,ii7     
collect+ ! f9ancial obligation ow$ on ! 
acc\nt1 contract1 or debt2  7ii7 any    
p]son act+ "u a c\rt ord]1 w>rant1 or   
subpo5a2  7iii7 a ,f$]al1 ,/ate1 or     
local gov]nm5t or an ag5t or assignee ( 
a ,f$]al1 ,/ate1 or local gov]nm5t2     
7iv7 any p]son = ! sole purpose (       
provid+ a cr$it monitor+ or id5tity !ft 
protection s]vice to :i* ! consum] has  
subscrib$2  7v7 any p]son = ! purpose ( 
provid+ a consum] ) a copy ( ! consum]  
report1 cr$it score1 or educational     
cr$it score ( ! consum] ^u reque/ by !  
consum]2  7vi7 any p]son or entity =    
insurance purposes1 includ+ use 9 sett+ 
or adju/+ a rate1 adju/+ a claim1 or    
und]writ+2 &  7vii7 any p]son act+ "u an

 au?orization f a consum] to use !      
consum] report ( ! consum] = employm5t  
purposes2  7#e7 ! t]m data brea* means !
 loss1 !ft1 or o!r unau?oriz$ access1   
o!r ?an access t is incid5tal to ! scope
 ( employm5t1 ( data conta9+ s5sitive   
p]sonal in=mation1 9 electronic or pr9t$
 =m1 t results 9 ! pot5tial compromise (
 ! confid5tiality or integrity ( ! data2
 &  7#f7 ! t]m s5sitive p]sonal         
in=mation means1 ) respect to an        
individual1 in=mation-- 7,a7 ab\t !     
individual relat+ to ! education1       
f9ancial transactions1 m$ical hi/ory1   
crim9al hi/ory1 or employm5t hi/ory ( ! 
individual2 &  7,b7 t c be us$ to       
di/+ui% or trace ! id5tity ( !          
individual1 includ+ ! "n1 social        
security numb]1 date & place ( bir?1    
"m's maid5 "n1 & biometric records ( !  
individual4  7b7 ,data brea*es at       
consum] report+ ag5cies ,) respect to a 
data brea* at a consum] report+ ag5cy1 !
 consum] report+ ag5cy-- 7#a7 %all      
notify--  7,a7 n lat] ?an #b days aft] !

 date on :i* ! consum] report+ ag5cy    
discov]s ! data brea*--  7i7 ! ,f$]al   
,trade ,commission2  7ii7 ! ,bureau2 &  
7iii7 appropriate law en=cem5t &        
intellig5ce ag5cies1 z id5tifi$ by !    
,secret>y ( ,homel& ,security2 &  7,b7  
subject to p>agraph 7#b71 n lat] ?an #c 
days aft] ! date on :i* ! consum]       
report+ ag5cy discov]s ! data brea*1 & z
 quickly & effici5tly z is practicable1 
ea* affect$ individual ) respect to !   
data brea*2  7#b7 may receive an        
ext5sion ( ! deadl9e describ$ 9 p>agraph
 7#a77;,b7 if ! ,f$]al ,trade           
,commission & ! intellig5ce ag5cies     
id5tifi$ "u p>agraph 7#a77;,a77iii7     
det]m9e t !re is a national security    
conc]n t requires grant+ su* an         
ext5sion2  7#c7 %all1 ^u reque/ by any  
affect$ individual ) respect to ! data  
brea*1 provide1 )\t *>ge to ! affect$   
individual & dur+ ! lifetime ( ! affect$
 individual--  7,a7 a cr$it freeze1     
includ+ ! co/ relat+ to impos+1 lift+1  
or p]man5tly remov+ a cr$it freeze1 )   

respect to ! consum] report ( ! affect$ 
individual at any consum] report+ ag5cy 
describ$ 9 section #fjc7p72 &  7,b7     
cr$it monitor+ s]vices = ! affect$      
individual at any consum] report+ ag5cy 
describ$ 9 section #fjc7p72 &  7#d7     
%all1 9 consultation ) ! ,bureau1       
e/abli% a consum] assi/ance unit-- 7,a7 
t %all--  7i7 be c>ri$ out1 & paid =1 by
 ! consum] report+ ag5cy2 &  7ii7       
provide assi/ance1 free ( *>ge & = a    
p]iod ( #aj ye>s beg9n+ on ! date on :i*
 ! consum] report+ ag5cy submits !      
notifications requir$ "u p>agraph       
7#a77;,a71 to any affect$ individual :o 
wants to dispute an item 9 ! file ( !   
affect$ individual t 0 ent]$ into t file
 aft] ! date on :i* ! data brea*        
occurr$2 &  7,b7 ) respect to :i* !     
consum] report+ ag5cy %all1 z soon z    
practicable aft] ! date on :i* ! consum]
 assi/ance unit is e/abli%$1 notify ea* 
affect$ individual ) respect to ! data  
brea* by mail & e-mail4  7c7 ,en=cem5t  
7#a7 ,9 g5]al ,subject to subtitle ,b ( 

! ,consum] ,f9ancial ,protection ,act ( 
#bjaj 7#ab ,u4,s4,c4 #eeaa et seq471 !  
,f$]al ,trade ,commission or ! ,bureau  
may br+ a civil action to recov] a civil
 p5alty 9 an appropriate di/rict c\rt ( 
! ,unit$ ,/ates aga9/ any p]son t       
neglig5tly1 kn[+ly1 or will+ly causes a 
data brea* at a consum] report+ ag5cy4  
7#b7 ,p5alty am\nt  7,a7 ,9 g5]al ,9 a  
successful action br\ght "u p>agraph    
7#a71 ! p]son aga9/ :i* ! action is     
br\ght %all be liable = a civil p5alty (
 n m ?an--  7i7 #b1ejj = ea* affect$    
individual ) respect to ! data brea*    
caus$ by ! p]son2 &  7ii7 #be1jjj1jjj 9 
total4  7,b7 ,consid]ations ,9 det]m9+ !
 am\nt ( a civil p5alty 9 a successful  
action br\ght "u p>agraph 7#a71 ! c\rt  
%all consid]1 ) respect to ! p]son aga9/
 :i* ! action is br\ght--  7i7 ! degree 
( culpability ( ! p]son2  7ii7 any      
hi/ory ( simil> prior conduct by !      
p]son2  7iii7 ! ability ( ! p]son to    
pay2  7iv7 ! effect ( ! p5alty on !     
ability ( ! p]son to cont9ue to d       

bus9ess2 &  7v7 any o!r factor z ju/ice 
may require4  7#c7 ,private cause (     
action  7,a7 ,def9ition ,9 ?is p>agraph1
 ! t]m actual loss means ! total co/ to 
an affect$ individual z a result ( a    
data brea* at a consum] report+ ag5cy1  
includ+--  7i7 ! co/s incurr$ by !      
affect$ individual-- 7,i7 9 respond+ to 
! data brea*2 &  7,,ii7 z a result (--  
7aa7 review+ acc\nts ( ! affect$        
individual = fraudul5t *>ges2  7bb7     
clos+ acc\nts ( ! affect$ individual t  
may h be5 compromis$ by ! data brea*2 & 
7cc7 impos+ cr$it freezes & obta9+ cr$it
 monitor+ s]vices2 &  7ii7 any rev5ue   
lo/1 or co/ or consequ5tial damage      
incurr$1 by ! affect$ individual relat+ 
to ! int]ruption ( ! ability ( ! affect$
 individual to obta9 cr$it4  7,b7 ,cause
 ( action  7i7 ,9 g5]al ,an affect$     
individual may br+ an action 9 an       
appropriate di/rict c\rt ( ! ,unit$     
,/ates aga9/ any p]son t neglig5tly1    
kn[+ly1 or will+ly caus$ a data brea* at
 a consum] report+ ag5cy 9 :i* !        

s5sitive p]sonal in=mation ( ! affect$  
individual 0 lo/1 /ol51 or access$ )\t  
au?orization4  7ii7 ,damages ,9 a       
successful action br\ght by an affect$  
individual "u clause 7i71 ! affect$     
individual may recov]--  7,i7 ! great]  
(-- 7aa7 ! actual loss to ! affect$     
individual ) respect to ! data brea*    
describ$ 9 t clause2 or  7bb7 #a1jjj 9  
liquidat$ damages2  7,,ii7 punitive     
damages1 z ! c\rt may all[2 &  7,,iii7 !
 co/s ( ! action1 toge!r ) reasonable   
attorney's fees1 z det]m9$ by ! c\rt4   
7d7 ,review ( compliance ) /&>ds =      
safegu>d+ cu/om] in=mation  7#a7        
,def9ition ,9 ?is subsection1 ! t]m     
cov]$ p]son has ! mean+ giv5 ! t]m 9    
section #ajjb ( ! ,consum] ,f9ancial    
,protection ,act ( #bjaj 7#ab ,u4,s4,c4 
#edha74  7#b7 ,exam9ation ,! ,bureau may
 exam9e any consum] report+ ag5cy t is a
 cov]$ p]son subject to sup]vision "u   
section #ajbd ( ! ,consum] ,f9ancial    
,protection ,act ( #bjaj 7#ab ,u4,s4,c4 
#eead7 = compliance by t ag5cy ) ! /&>ds

 e/abli%$ by ! ,f$]al ,trade ,commission
 "u section #eja7;b7 ( !                
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhja7;b774  7e7 ,protection ( legal   
rights ( consum]s ,a consum] report+    
ag5cy may n take a cov]$ action-- 7#a7 z
 a condition ( provid+ any s]vice or    
product to1 or on behalf (1 a consum]2 &
  7#b7 t relates to ! rights ( a consum]
 aft] a data brea* at ! consum] report+ 
ag5cy 9 :i* ! s5sitive p]sonal in=mation
 ( ! consum] is lo/1 /ol51 or access$   
)\t au?orization4  7f7 ,annual /udy &   
report  7#a7 ,9 g5]al ,beg9n+ 9 ! fir/  
full ye> aft] ! date ( enactm5t ( ?is   
section1 & annually !reaft]1 ! ,bureau &
 ! ,f$]al ,trade ,commission1 9         
consultation ) ! ,attorney ,g5]al1 %all 
conduct a /udy reg>d+ ! co/s to affect$ 
individuals f data brea*es at consum]   
report+ ag5cies1 includ+--  7,a7 !      
economic co/s to ^? affect$ individuals2
  7,b7 ! effects on--  7i7 ! ability (  
^? affect$ individuals to obta9 cr$it & 
h\s+2 &  7ii7 ! reputations ( ^? affect$

 individuals2 &  7,c7 ! co/s relat+ to !
 emotional & psy*ological /ress ( ^?    
affect$ individuals f hav+ ! s5sitive   
p]sonal in=mation ( ^? affect$          
individuals lo/1 /ol51 or access$ )\t   
au?orization4  7#b7 ,submission to      
,congress ,n lat] ?an #cj days aft] !   
date on :i* ea* /udy conduct$ "u        
p>agraph 7#a7 is complet$1 ! ,bureau & !
 ,f$]al ,trade ,commission %all submit  
to ! appropriate committees ( ,congress 
a report t conta9s ! results ( ! /udy4  
7#c7 ,cont5ts ,ea* /udy conduct$ "u     
p>agraph 7#a7 & ea* report submitt$ "u  
p>agraph 7#b7 %all conta9 a survey (    
affect$ individuals :o 7 contact$ = !   
purposes ( conduct+ ! /udy4  7#d7       
,au?ority ,9 conduct+ any /udy "u       
p>agraph 7#a71 ! ,bureau1 ! ,f$]al      
,trade ,commission1 & ! ,attorney ,g5]al
 may compel a consum] report+ ag5cy to  
disclose nonpropriet>y in=mation4  7g7  
,rule ( con/ruction ,no?+ 9 ?is section 
may be con/ru$ z modify+1 limit+1 or    
sup]s$+ any provision ( ,/ate law if !  

protection t ! provision ( ,/ate law    
provides to consum]s is great] ?an !    
protection provid$ to consum]s "u ?is   
section4  4  7b7 ,te*nical & con=m+     
am5dm5t ,! table ( cont5ts = ! ,fair    
,cr$it ,report+ ,act 7#ae ,u4,s4,c4     
#afha et seq47 is am5d$ by ins]t+ aft] !
 item relat+ to section #fje;,b !       
foll[+3  #fje;,c4 ,data security at     
consum] report+ ag5cies4  4