,i #aafth ,,congress #ast ,session ,h4 ,r4 #cca ,,in ,,the ,,house ,,of ,,representatives ,january #h1 #bjai,mr4 ,ted ,lieu of ,california introduced the following bill2 which was referred to the ,committee on ,financial ,services1 and in addition to the ,committee on ,energy and ,commerce1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,a ,,bill ,to direct the ,federal ,trade ,commission to review and potentially revise its standards for safeguarding customer information to ensure that such standards require certain consumer reporting agencies and service providers of such agencies to maintain sufficient safeguards against cyber attacks and related threats1 to provide for additional authority to enforce such standards with respect to such agencies and providers1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,protecting ,consumer ,information ,act of #bjai4 #b4 ,standards for cybersecurity safeguards for certain consumer reporting agencies and service providers 7a7 ,review of standards2 potential revision 7#a7 ,review ,not later than #ij days after the date of the enactment of this ,act1 the ,commission shall complete a review of the standards contained in the regulations issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja7 to determine whether such standards require covered consumer reporting agencies and covered service providers to maintain sufficient safeguards to protect customer records and information against cyber attacks and related threats4 7#b7 ,revision ,if the ,commission determines in the review completed under paragraph 7#a7 that the standards contained in the regulations issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja7 do not require covered consumer reporting agencies and covered service providers to maintain sufficient safeguards to protect customer records and information against cyber attacks and related threats1 not later than #ahj days after the date of the completion of the review1 the ,commission shall1 pursuant to section #eec of title #e1 ,united ,states ,code1 revise such regulations so as to provide for standards applicable to covered consumer reporting agencies and covered service providers that require such agencies and providers to maintain sufficient safeguards to protect customer records and information against cyber attacks and related threats4 7b7 ,investigations 7#a7 ,initial investigation 7,a7 ,in general ,not later than #ah months after the date described in subparagraph 7,b71 the ,commission shall complete an investigation of each person or entity that1 as of the date described in such subparagraph1 is a covered consumer reporting agency or covered service provider1 to determine whether such agency or provider is in compliance with the regulations issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja74 7,b7 ,date described ,the date described in this subparagraph is-- 7i7 if no revision of such regulations is required by paragraph 7#b7 of subsection 7a71 the date of the completion of the review required by paragraph 7#a7 of such subsection2 or 7ii7 if revision of such regulations is required by paragraph 7#b7 of such subsection1 the date on which the ,commission issues the revised regulations4 7#b7 ,subsequent investigations ,from time to time after the date that is #ah months after the date described in paragraph 7#a77;,b71 the ,commission shall complete an investigation of each covered consumer reporting agency and each covered service provider to determine whether such agency or provider is in compliance with the regulations issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja74 #c4 ,enforcement by ,federal ,trade ,commission 7a7 ,unfair or deceptive acts or practices ,a violation of a regulation issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja7 by a covered consumer reporting agency or a covered service provider shall be treated as a violation of a rule under section #ah7;a77#a77;,b7 of the ,federal ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b77 regarding unfair or deceptive acts or practices4 7b7 ,powers of ,commission ,the ,commission shall enforce1 with respect to covered consumer reporting agencies and covered service providers1 the regulations issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja7 in the same manner1 by the same means1 and with the same jurisdiction1 powers1 and duties as though all applicable terms and provisions of the ,federal ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 were incorporated into and made a part of such section4 ,any covered consumer reporting agency or covered service provider that violates such a regulation shall be subject to the penalties and entitled to the privileges and immunities provided in the ,federal ,trade ,commission ,act4 #d4 ,enforcement by ,state attorneys general 7a7 ,in general ,in any case in which the attorney general of a ,state1 or an official or agency of a ,state1 has reason to believe that an interest of the residents of such ,state has been or is threatened or adversely affected by an act or practice by a covered consumer reporting agency or covered service provider in violation of a regulation issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja71 the ,state1 as parens patriae1 may bring a civil action on behalf of the residents of the ,state in an appropriate district court of the ,united ,states to-- 7#a7 enjoin such act or practice2 7#b7 enforce compliance with such regulation2 7#c7 obtain damages1 restitution1 or other compensation on behalf of residents of the ,state2 or 7#d7 obtain such other legal and equitable relief as the court may consider to be appropriate4 7b7 ,notice ,before filing an action under this section1 the attorney general1 official1 or agency of the ,state involved shall provide to the ,commission a written notice of such action and a copy of the complaint for such action4 ,if the attorney general1 official1 or agency determines that it is not feasible to provide the notice described in this subsection before the filing of the action1 the attorney general1 official1 or agency shall provide written notice of the action and a copy of the complaint to the ,commission immediately upon the filing of the action4 7c7 ,authority of ,commission 7#a7 ,in general ,on receiving notice under subsection 7b7 of an action under this section1 the ,commission shall have the right-- 7,a7 to intervene in the action2 7,b7 upon so intervening1 to be heard on all matters arising therein2 and 7,c7 to file petitions for appeal4 7#b7 ,limitation on ,state action while ,federal action is pending ,if the ,commission or the ,attorney ,general of the ,united ,states has instituted a civil action for violation of a regulation issued by the ,commission under section #eja of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja7 by a covered consumer reporting agency or covered service provider 7referred to in this paragraph as the ,federal action71 no ,state attorney general1 official1 or agency may bring an action under this section during the pendency of the ,federal action against any defendant named in the complaint in the ,federal action for any violation of such regulation alleged in such complaint4 7d7 ,rule of construction ,for purposes of bringing a civil action under this section1 nothing in this ,act shall be construed to prevent an attorney general1 official1 or agency of a ,state from exercising the powers conferred on the attorney general1 official1 or agency by the laws of such ,state to conduct investigations1 administer oaths and affirmations1 or compel the attendance of witnesses or the production of documentary and other evidence4 #e4 ,definitions ,in this ,act3 7#a7 ,commission ,the term ,commission means the ,federal ,trade ,commission4 7#b7 ,covered consumer reporting agency ,the term covered consumer reporting agency means a consumer reporting agency that compiles and maintains files on consumers on a nationwide basis 7as defined in section #fjc7p7 of the ,fair ,credit ,reporting ,act 7#ae ,u4,s4,c4 #afha;a7p7774 7#c7 ,covered service provider ,the term covered service provider means any person or entity that is a service provider 7as defined in section #cad4b of title #af1 ,code of ,federal ,regulations7 through provision of services to a covered consumer reporting agency4