HR 4081 115th Congress House Crime and Law Enforcement Administrative law and regulatory procedures Civil actions and liability Computer security and identity theft Congressional oversight Consumer affairs Consumer credit Criminal investigation, prosecution, interrogation Criminal justice information and records Federal Trade Commission (FTC) Federal preemption Fraud offenses and financial crimes Right of privacy State and local government operations Telephone and wireless communication

Consumer Privacy Protection Act of 2017

Introduced: October 19, 2017 See on congress.gov

Everywhere this bill has been 4 steps

Introduced

In committee

Reported out

Passed House

Passed Senate

To President

Became law

Nov 1, 2017

Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.

Oct 20, 2017

Referred to the Subcommittee on Digital Commerce and Consumer Protection.

Oct 19, 2017

Referred to the Committee on the Judiciary, and in addition to the Committees on Energy and Commerce, Financial Services, and the Budget, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

Oct 19, 2017

Introduced in House

Plain-English summary Congressional Research Service

Consumer Privacy Protection Act of 2017

This bill amends the federal criminal code to make it a crime to intentionally and willfully conceal knowledge of a security breach that results in economic harm of at least $1,000 to any individual.

It imposes criminal penalties on a violator and authorizes the U.S. Secret Service and the Federal Bureau of Investigation to investigate offenses.

The bill authorizes the Department of Justice (DOJ) to file a civil action: (1) to prevent ongoing conduct that damages 100 or more protected computers (e.g., government computers); and (2) to prevent the disposition of unlawfully obtained property.

The bill also adds to the list of money laundering predicate offenses financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices.

Finally, the bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program.

A commercial entity must notify a U.S. resident whose sensitive personally identifiable information (PII) has been, or is reasonably believed to have been, accessed or acquired. Sensitive PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos.

It establishes civil penalties for violations and authorizes DOJ, the Federal Trade Commission, and states to enforce compliance.

What's happening now November 1, 2017

Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.

Committees of jurisdiction 6