,i #aaf? ,,congress #a/ ,session ,h4 ,r4 #cbg ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,janu>y #h1 #bjai,mr4 ,t$ ,lieu ( ,cali=nia introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,en]gy & ,comm]ce ,a ,,bill ,to prohibit entities f requir+ individuals to submit to arbitration = disputes aris+ f a security brea*1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,end+ ,=c$ ,arbitration = ,victims ( ,data ,brea*es ,act ( #bjai4 #b4 ,protection ( data security brea* victims ,an entity may n require1 z "p ( a cu/om] or o!r simil> agreem5t1 an individual to agree to submit any dispute relat$ to a security brea*1 includ+ any dispute relat$ to id5tity !ft1 to arbitration4 #c4 ,applicability ,a provision ( an agreem5t ent]$ into prior to ! date ( ! enactm5t ( ?is ,act1 t violates section #b1 is void4 #d4 ,en=cem5t by ! ,f$]al ,trade ,commission 7a7 ,unfair or deceptive acts or practices ,a violation ( section #b %all be treat$ z an unfair & deceptive act or practice 9 violation ( a regulation "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b77 reg>d+ unfair or deceptive acts or practices4 7b7 ,p[]s ( commission ,! ,commission %all en=ce ?is ,act 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is ,act4 ,any p]son :o violates section #b %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 t ,act4 7c7 ,rules ,! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 su* rules z may be necess>y to c>ry out ! provisions ( ?is ,act4 #e4 ,en=cem5t by ,/ates 7a7 ,9 g5]al ,if ! attorney g5]al ( a ,/ate has reason to believe t an int]e/ ( ! resid5ts ( ! ,/ate has be5 or is be+ ?reat5$ or adv]sely affect$ by a practice t violates section #b1 ! attorney g5]al ( ! ,/ate may1 z p>5s patriae1 br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to obta9 appropriate relief4 7b7 ,rights ( ,f$]al ,trade ,commission 7#a7 ,notice to ,f$]al ,trade ,commission 7,a7 ,9 g5]al ,except z provid$ 9 clause 7iii71 ! attorney g5]al ( a ,/ate1 be=e initiat+ a civil action "u p>agraph 7#a71 %all provide writt5 notification to ! ,f$]al ,trade ,commission t ! attorney g5]al int5ds to br+ su* civil action4 7,b7 ,cont5ts ,! notification requir$ "u clause 7i7 %all include a copy ( ! compla9t to be fil$ to initiate ! civil action4 7,c7 ,exception ,if x is n feasible = ! attorney g5]al ( a ,/ate to provide ! notification requir$ "u clause 7i7 be=e initiat+ a civil action "u p>agraph 7#a71 ! attorney g5]al %all notify ! ,commission imm$iately ^u in/itut+ ! civil action4 7#b7 ,int]v5tion by ,f$]al ,trade ,commission ,! ,commission may-- 7,a7 int]v5e 9 any civil action br\ght by ! attorney g5]al ( a ,/ate "u p>agraph 7#a72 & 7,b7 ^u int]v5+-- 7i7 be he>d on all matt]s aris+ 9 ! civil action2 & 7ii7 file petitions = appeal ( a decision 9 ! civil action4 7c7 ,inve/igatory p[]s ,no?+ 9 ?is subsection may be con/ru$ to prev5t ! attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on ! attorney g5]al by ! laws ( ! ,/ate to conduct inve/igations1 to adm9i/] oa?s or affirmations1 or to compel ! att5dance ( witnesses or ! production ( docum5t>y or o!r evid5ce4 7d7 ,preemptive action by ,f$]al ,trade ,commission ,if ! ,f$]al ,trade ,commission in/itutes a civil action or an adm9i/rative action ) respect to a violation ( section #b1 ! attorney g5]al ( a ,/ate may n1 dur+ ! p5d5cy ( su* action1 br+ a civil action "u p>agraph 7#a7 aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = ! violation ) respect to :i* ! ,commission in/itut$ su* action4 7e7 ,v5ue2 s]vice ( process 7#a7 ,v5ue ,any action br\ght "u p>agraph 7#a7 may be br\ght 9-- 7,a7 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code2 or 7,b7 ano!r c\rt ( compet5t jurisdiction4 7#b7 ,s]vice ( process ,9 an action br\ght "u p>agraph 7#a71 process may be s]v$ 9 any di/rict 9 :i*-- 7,a7 ! def5dant is an inhabitant1 may be f\nd1 or transacts bus9ess2 or 7,b7 v5ue is prop] "u section #acia ( title #bh1 ,unit$ ,/ates ,code4 #f4 ,private "r ( action 7a7 ,9 g5]al ,an individual :o is injur$ by a violation ( section #b may br+ a private "r ( action 9 any c\rt ( appropriate jurisdiction = rescission & re/itution1 z well z = all damages & may be aw>d$ injunctive relief aga9/ a violation ( su* section4 ,! individual %all also be entitl$ to recov] its co/s ( litigation & reasonable attorney's fees & exp]t witness fees1 aga9/ any entity or p]son f\nd to be liable = su* violation4 7b7 ,liability ,e p]son :o directly or indirectly controls a p]son liable "u subsection 7a71 e p>tn] 9 a firm s liable1 e pr9cipal executive (fic] or director ( a corporation s liable1 e p]son occupy+ a simil> /atus or p]=m+ simil> functions & e employee ( a p]son s liable :o mat]ially aids 9 ! act or transaction con/itut+ ! violation is also liable jo9tly & sev]ally ) & to ! same ext5t z su* p]son1 unless ! p]son :o w\ld o!rwise be liable h]eund] _h no k ( or reasonable gr\nds to "k ( ! exi/5ce ( ! facts by reason ( :i* ! liability is alleg$ to exi/4 7c7 ,/atute ( limitations ,no action may be comm5c$ pursuant to ?is section m ?an ! lat] (-- 7#a7 #b ye>s aft] ! date on :i* ! violation occurs2 or 7#b7 #b ye>s aft] ! date on :i* ! violation is discov]$ or %\ld h be5 discov]$ ?r\gh ex]cise ( reasonable dilig5ce4 7d7 ,v5ue ,an action "u ?is section may be br\ght 9-- 7#a7 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code2 or 7#b7 ano!r c\rt ( compet5t jurisdiction4 7e7 ,cumulative "r ,! private rights provid$ = 9 ?is section are 9 addition to & n 9 lieu ( o!r rights or rem$ies creat$ by ,f$]al or ,/ate law4 #g4 ,def9itions ,9 ?is ,act-- 7#a7 ! t]m security brea*-- 7,a7 means a compromise ( ! security1 confid5tiality1 or integrity (1 or ! loss (1 comput]iz$ data t results 91 or !re is a reasonable basis to conclude has result$ 9-- 7i7 ! unau?oriz$ acquisition ( s5sitive p]sonally id5tifiable in=mation2 or 7ii7 access to s5sitive p]sonally id5tifiable in=mation t is = an unau?oriz$ purpose1 or 9 excess ( au?orization2 7,b7 does n include any lawfully au?oriz$ inve/igative1 protective1 or intellig5ce activity ( a law en=cem5t ag5cy ( ! ,unit$ ,/ates1 a ,/ate1 or a political subdivision ( a ,/ate1 or ( an elem5t ( ! intellig5ce community2 & 7#b7 ! t]m s5sitive p]sonally id5tifiable in=mation means any in=mation or compilation ( in=mation1 9 electronic or digital =m t includes "o or m ( ! foll[+3 7,a7 ,an individual's fir/ & la/ "n or fir/ initial & la/ "n 9 comb9ation ) any two ( ! foll[+ data elem5ts3 7i7 ,home address or telephone numb]4 7ii7 ,"m's maid5 "n4 7iii7 ,mon?1 day1 & ye> ( bir?4 7,b7 ,a ,social ,security numb] 7b n includ+ only ! la/ f\r digits ( a ,social ,security numb]71 driv]'s lic5se numb]1 passport numb]1 or ali5 regi/ration numb] or o!r ,gov]nm5t-issu$ unique id5tification numb]4 7,c7 ,unique biometric data su* z a f+] pr9t1 voice pr9t1 a ret9a or iris image1 or any o!r unique physical repres5tation4 7,d7 ,a unique acc\nt id5tifi]1 includ+ a f9ancial acc\nt numb] or cr$it or debit c>d numb]1 electronic id5tification numb]1 us] "n1 or r\t+ code4 7,e7 ,a us] "n or electronic mail address1 9 comb9ation ) a password or security "q & answ] t w\ld p]mit access to an onl9e acc\nt4 7,f7 ,any comb9ation ( ! foll[+ data elem5ts3 7i7 ,an individual's fir/ & la/ "n or fir/ initial & la/ "n4 7ii7 ,a unique acc\nt id5tifi]1 includ+ a f9ancial acc\nt numb] or cr$it or debit c>d numb]1 electronic id5tification numb]1 us] "n1 or r\t+ code4 7iii7 ,any security code1 access code1 or password1 or s\rce code t c\ld be us$ to g5]ate su* codes or passwords4