Skip to main content
S. 1260 110th Congress Senate

Data Security Act of 2007

Official title: A bill to protect information relating to consumers, to require notice of security breaches, and for other purposes.

Introduced: June 18, 2007 See on congress.gov
Crime and Law Enforcement Administrative procedureBank recordsCivil actions and liabilityClass actions (Civil procedure)
More subjectsShow fewer subjects
CommerceCommodity Futures Trading CommissionComputer security measuresConsumer creditConsumer educationConsumer protectionCrime preventionData banksDepartment of the TreasuryFederal Deposit Insurance CorporationFederal Reserve SystemFederal Trade CommissionFederal home loan banksFederal preemptionFinance and Financial SectorFinancial statementsFraudGovernment Operations and PoliticsGovernment paperworkIdentification devicesIdentity theftIndependent regulatory commissionsLawNational Credit Union AdministrationScience, Technology, CommunicationsSecurities and Exchange CommissionState laws
This bill died when the 110th Congress ended
It never became law before the 110th Congress (2007–2008) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 2 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
May 1, 2007
Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.
May 1, 2007
Introduced in Senate
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action May 1, 2007

Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.

 Plain-English summary Congressional Research Service

Data Security Act of 2007 - Prescribes security procedures which an entity that maintains or communicates sensitive account or personal information must implement and enforce in order to protect the information from an unauthorized use likely to result in substantial harm or inconvenience to the consumer.

Grants exclusive enforcement powers to specified federal regulatory agencies with oversight of financial institutions.

Denies a private right of action, including a class action, regarding any act or practice regulated under this Act.

Prohibits any civil or criminal action in state court or under state law relating to any act or practice governed under this Act.

Prescribes data security standards to be implemented by federal agencies.

Preempts state law with respect to the responsibilities of any person to protect against and investigate such data security breaches and mitigate any losses or harm resulting from them.

 Related & companion bills 1
 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
Cite this page click to expand
APA
U.S. Congress. (2026). S. 1260: Data Security Act of 2007. 110th Congress. Open America. https://openamerica.io/bill/110-S-1260/
MLA
"S. 1260: Data Security Act of 2007." 110th Congress, 2026, Open America, https://openamerica.io/bill/110-S-1260/.
Bluebook (legal)
S. 1260, 110th Cong. (2026), https://openamerica.io/bill/110-S-1260/.
Markdown link
[S. 1260: Data Security Act of 2007](https://openamerica.io/bill/110-S-1260/)
Report a problem