Data Security Act of 2007
Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.
Data Security Act of 2007 - Prescribes security procedures which an entity that maintains or communicates sensitive account or personal information must implement and enforce in order to protect the information from an unauthorized use likely to result in substantial harm or inconvenience to the consumer.
Grants exclusive enforcement powers to specified federal regulatory agencies with oversight of financial institutions.
Denies a private right of action, including a class action, regarding any act or practice regulated under this Act.
Prohibits any civil or criminal action in state court or under state law relating to any act or practice governed under this Act.
Prescribes data security standards to be implemented by federal agencies.
Preempts state law with respect to the responsibilities of any person to protect against and investigate such data security breaches and mitigate any losses or harm resulting from them.
Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.
- Introduced in Senate Formatted Text PDF Formatted XML
Cite this page
U.S. Congress. (2026). S. 1260: Data Security Act of 2007. 110th Congress. Open America. https://openamerica.io/bill/110-S-1260/
"S. 1260: Data Security Act of 2007." 110th Congress, 2026, Open America, https://openamerica.io/bill/110-S-1260/.
S. 1260, 110th Cong. (2026), https://openamerica.io/bill/110-S-1260/.
[S. 1260: Data Security Act of 2007](https://openamerica.io/bill/110-S-1260/)