Skip to main content
HR 3806 115th Congress House

Personal Data Notification and Protection Act of 2017

Official title: To establish a national data breach notification standard, and for other purposes.

Introduced: January 17, 2018 See on congress.gov
Science, Technology, Communications Computer security and identity theftConsumer affairsConsumer creditCriminal investigation, prosecution, interrogation
More subjectsShow fewer subjects
Fraud offenses and financial crimesGovernment employee pay, benefits, personnel managementJurisdiction and venuePublic contracts and procurementRight of privacy
Sign in to write a letter Sign in to watch
This bill died when the 115th Congress ended
It never became law before the 115th Congress (2017–2018) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 3 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Sep 22, 2017
Referred to the Subcommittee on Digital Commerce and Consumer Protection.
Sep 18, 2017
Referred to the Committee on Energy and Commerce, and in addition to the Committee on the Judiciary, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Sep 18, 2017
Introduced in House
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action September 22, 2017

Referred to the Subcommittee on Digital Commerce and Consumer Protection.

 Plain-English summary Congressional Research Service

Personal Data Notification and Protection Act of 2017

This bill requires certain businesses that use, access, transmit, store, dispose of, or collect sensitive personally identifiable information to notify individuals whose information is believed to have been accessed or acquired through a discovered security breach. In addition, the businesses must meet specified requirements for notifying certain federal agencies, credit reporting agencies, and the media regarding a security breach. The bill also sets forth requirements for the notification process, exemptions from the requirements, and enforcement authorities for the Federal Trade Commission and the states.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 3
 Cosponsors 8
All 8 Democratic 7
D
Jayapal, Pramila
Washington · Mar 20, 2018
 D
Moore, Gwen
Wisconsin · Jan 17, 2018
BRADY, ROBERT
· Dec 14, 2017
 D
Evans, Dwight
Pennsylvania · Dec 5, 2017
 D
Thompson, Bennie G.
Mississippi · Nov 28, 2017
 D
Takano, Mark
California · Oct 3, 2017
 D
Khanna, Ro
California · Sep 25, 2017
 D
Lieu, Ted
California · Sep 18, 2017
Cite this page click to expand
APA
U.S. Congress. (2026). H.R. 3806: Personal Data Notification and Protection Act of 2017. 115th Congress. Open America. https://openamerica.io/bill/115-HR-3806/
MLA
"H.R. 3806: Personal Data Notification and Protection Act of 2017." 115th Congress, 2026, Open America, https://openamerica.io/bill/115-HR-3806/.
Bluebook (legal)
H.R. 3806, 115th Cong. (2026), https://openamerica.io/bill/115-HR-3806/.
Markdown link
[H.R. 3806: Personal Data Notification and Protection Act of 2017](https://openamerica.io/bill/115-HR-3806/)
Report a problem