Skip to main content
S. 2289 115th Congress Senate

Data Breach Prevention and Compensation Act of 2018

Official title: A bill to create an Office of Cybersecurity at the Federal Trade Commission for supervision of data security at consumer reporting agencies, to require the pro… Show full official titleShow less

Official title: A bill to create an Office of Cybersecurity at the Federal Trade Commission for supervision of data security at consumer reporting agencies, to require the promulgation of regulations establishing standards for effective cybersecurity at consumer reporting agencies, to impose penalties on credit reporting agencies for cybersecurity breaches that put sensitive consumer data at risk, and for other purposes.

Introduced: January 10, 2018 Introduced by: Elizabeth Warren Democratic · Massachusetts See on congress.gov
Finance and Financial Sector Administrative law and regulatory proceduresCivil actions and liabilityComputer security and identity theftConsumer Financial Protection Bureau
More subjectsShow fewer subjects
Consumer creditDepartment of CommerceDepartment of Homeland SecurityExecutive agency funding and structureFederal Trade Commission (FTC)Government employee pay, benefits, personnel managementGovernment studies and investigations
Sign in to write a letter Sign in to watch
This bill died when the 115th Congress ended
It never became law before the 115th Congress (2017–2018) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 3 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jul 12, 2018
Committee on Banking, Housing, and Urban Affairs. Hearings held. Hearings printed: S.Hrg. 115-361.
Jan 10, 2018
Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.
Jan 10, 2018
Introduced in Senate
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action July 12, 2018

Committee on Banking, Housing, and Urban Affairs. Hearings held. Hearings printed: S.Hrg. 115-361.

 Plain-English summary Congressional Research Service

Data Breach Prevention and Compensation Act of 2018

This bill creates the Office of Cybersecurity within the Federal Trade Commission (FTC) that, in part, must:

  • supervise, evaluate, and regulate specified agencies' management of data security;
  • examine agencies annually for compliance with regulations;
  • investigate an agency in the event of a breach covered by the bill or suspected noncompliance with regulations, and report on any findings of such investigation; and
  • coordinate with the National Institute of Standards and Technology and the National Cybersecurity and Communications Integration Center of the Department of Homeland Security.

The office is authorized to: (1) investigate an agency's compliance with regulations regarding any data breach, and (2) enjoin an agency from violating specified regulations.

Specified consumer reporting agencies, in part, must:

  • provide the office with information relating to security measures,
  • demonstrate reasonable data protection measures, and
  • notify the FTC of a covered breach.

The bill establishes civil penalties for violations and directs the FTC to enforce compliance.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
 Cosponsors 2
All 2 Democratic 2
D
Shaheen, Jeanne
New Hampshire · Feb 28, 2018
 D
Warner, Mark R.
Virginia · Jan 10, 2018
Cite this page click to expand
APA
U.S. Congress. (2026). S. 2289: Data Breach Prevention and Compensation Act of 2018. 115th Congress. Open America. https://openamerica.io/bill/115-S-2289/
MLA
"S. 2289: Data Breach Prevention and Compensation Act of 2018." 115th Congress, 2026, Open America, https://openamerica.io/bill/115-S-2289/.
Bluebook (legal)
S. 2289, 115th Cong. (2026), https://openamerica.io/bill/115-S-2289/.
Markdown link
[S. 2289: Data Breach Prevention and Compensation Act of 2018](https://openamerica.io/bill/115-S-2289/)
Report a problem