,i  #aag? ,,congress  #a/ ,session  ,h4 
,r4 #ciaa  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,june #ae1 #bjba,mr4  
,lyn* introduc$ ! foll[+ bill2 :i* 0    
ref]r$ to ! ,committee on ,f9ancial     
,s]vices  ,a ,,bill  ,to am5d !         
,gramm-,lea*-,bliley ,act to e/abli%    
proc$ures = disclosures by f9ancial     
in/itutions ( nonpublic p]sonal         
in=mation1 & = o!r purposes4  #a4 ,data 
brea*es  7a7 ,9 g5]al ,title ,v ( !     
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhja et seq47 is am5d$ by ins]t+ aft] 
section #ejb ! foll[+3  #ejb;,a4 ,data  
brea*es  7a7 ,9 g5]al ,a f9ancial       
in/itution %all submit to ! ,director ( 
! ,bureau ( ,consum] ,f9ancial          
,protection a report if ! f9ancial      
in/itution discloses nonpublic p]sonal  
in=mation ( a consum] 9 violation ( ?is 
subtitle4 ,su* report %all-- 7#a7 be    
submitt$ n lat] ?an #gb h\rs aft] !     
f9ancial in/itution discov]s su*        
violation2  7#b7 id5tify ! "n & contact 
in=mation ( an individual :o c provide m

 in=mation to ! ,bureau ab\t !          
violation2  7#c7 describe ! nature ( !  
violation1 includ+ 7if possible7 !      
categories & approximate numb] (        
consum]s affect$ & ! categories &       
approximate numb] ( records ( nonpublic 
p]sonal in=mation affect$2  7#d7        
describe ! likely consequ5ces ( !       
violation2 &  7#e7 describe ! measures  
tak5 or propos$ to be tak5 by ! f9ancial
 in/itution to address ! violation1     
includ+1 :]e appropriate1 measures to   
mitigate its possible adv]se effects4   
7b7 ,bureau det]m9ation  7#a7 ,9 g5]al  
,^u receipt ( a report "u subsection    
7a71 ! ,director ( ! ,bureau ( ,consum] 
,f9ancial ,protection %all assess :e!r  
any violation describ$ 9 su* report     
poses a high risk ( h>m to consum]s     
affect$ by su* a violation1 & if s1     
require ! f9ancial in/itution to        
disclose ! violation to su* consum]s4   
7#b7 ,requirem5ts ,! disclosure requir$ 
"u p>agraph 7#a7 %all-- 7,a7 describe ! 
nature ( ! violation1 includ+ 7if       

possible7 ! categories & approximate    
numb] ( consum]s affect$ & ! categories 
& approximate numb] ( records (         
nonpublic p]sonal in=mation affect$2    
7,b7 id5tify ! "n & contact in=mation ( 
an individual :o c provide m in=mation  
to consum]s ab\t ! violation2  7,c7     
describe ! likely consequ5ces ( ! ( !   
violation2 &  7,d7 describe ( ! measures
 tak5 or propos$ to be tak5 by !        
f9ancial in/itution to address !        
violation1 includ+1 :]e appropriate1    
measures to mitigate its possible adv]se
 effects4  7#c7 ,disclosure n requir$ ,a
 f9ancial in/itution is n requir$ to    
disclose a violation "u p>agraph 7#a7   
if-- 7,a7 ! f9ancial in/itution has     
implem5t$ appropriate measures to ensure
 t ! ! nonpublic p]sonal in=mation      
affect$ by ! violation w\ld n be usable 
by a ?ird p>ty2 &  7,b7 ! ,director ( ! 
,bureau ( ,consum] ,f9ancial ,protection
 has det]m9$ t ! f9ancial in/itution has
 tak5 action to prev5t h>m to consum]s z
 a result ( ! violation4  7c7 ,rulemak+ 

,n lat] ?an ! end ( ! #a-ye> p]iod      
beg9n+ on ! date ( enactm5t ( ?is       
section1 ! ,director ( ! ,bureau (      
,consum] ,f9ancial ,protection & !      
,f$]al ag5cies describ$ "u section      
#eje7;a7 %all1 jo9tly1 issue rules to   
c>ry out ?is section4  4