Skip to main content
HR 3140 109th Congress House

Consumer Data Security and Notification Act of 2005

Official title: To expand the protections for sensitive personal information in Federal law to cover the information collection and sharing practices of unregulated informatio… Show full official titleShow less

Official title: To expand the protections for sensitive personal information in Federal law to cover the information collection and sharing practices of unregulated information brokers, to enhance information security requirements for consumer reporting agencies and information brokers, and to require consumer reporting agencies, financial institutions, and other entities to notify consumers of data security breaches involving sensitive consumer information, and for other purposes.

Introduced: June 30, 2005 See on congress.gov
Finance and Financial Sector Administrative procedureBank accountsBank recordsCivil Rights and Liberties, Minority Issues
More subjectsShow fewer subjects
CommerceComputer security measuresConfidential communicationsConsumer creditConsumer educationConsumer protectionCrime and Law EnforcementCriminal investigationCriminal justice informationData banksDepartment of the TreasuryDriver licensesElectronic data interchangeEncryptionFederal Deposit Insurance Corporation
This bill died when the 109th Congress ended
It never became law before the 109th Congress (2005–2006) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 2 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jun 30, 2005
Referred to the House Committee on Financial Services.
Jun 30, 2005
Introduced in House
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action June 30, 2005

Referred to the House Committee on Financial Services.

 Plain-English summary Congressional Research Service

Consumer Data Security and Notification Act of 2005 - Amends the Fair Credit Reporting Act (FCRA) to cover communication of personally identifiable information by certain unregulated information brokers who, for compensation, regularly assemble or evaluate personally identifiable information for the purpose of furnishing reports to third parties (thereby bringing them within the scope of FCRA coverage).

Imposes an affirmative, continuing obligation upon each consumer reporting agency to respect the privacy of consumers and to protect the security and confidentiality of their nonpublic personal information.

Instructs the Federal Trade Commission to promulgate safeguards for the protection of nonpublic consumer information.

Amends the Gramm-Leach-Bliley Act to direct federal oversight agencies to include certain data security notification requirements within the regulations governing financial institutions.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
Cite this page click to expand
APA
U.S. Congress. (2026). H.R. 3140: Consumer Data Security and Notification Act of 2005. 109th Congress. Open America. https://openamerica.io/bill/109-HR-3140/
MLA
"H.R. 3140: Consumer Data Security and Notification Act of 2005." 109th Congress, 2026, Open America, https://openamerica.io/bill/109-HR-3140/.
Bluebook (legal)
H.R. 3140, 109th Cong. (2026), https://openamerica.io/bill/109-HR-3140/.
Markdown link
[H.R. 3140: Consumer Data Security and Notification Act of 2005](https://openamerica.io/bill/109-HR-3140/)
Report a problem