Skip to main content
S 2289 115th Congress Senate Finance and Financial Sector Administrative law and regulatory procedures Civil actions and liability Computer security and identity theft Consumer Financial Protection Bureau Consumer credit Department of Commerce Department of Homeland Security Executive agency funding and structure Federal Trade Commission (FTC) Government employee pay, benefits, personnel management Government studies and investigations

Data Breach Prevention and Compensation Act of 2018

Introduced: January 10, 2018 Introduced by: Warren, Elizabeth Democratic · Massachusetts See on congress.gov
Sign in to write a letter Sign in to watch
This bill died when the 115th Congress ended
It never became law before the 115th Congress (2017–2018) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 3 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jul 12, 2018
Committee on Banking, Housing, and Urban Affairs. Hearings held. Hearings printed: S.Hrg. 115-361.
Jan 10, 2018
Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.
Jan 10, 2018
Introduced in Senate
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Plain-English summary Congressional Research Service

Data Breach Prevention and Compensation Act of 2018

This bill creates the Office of Cybersecurity within the Federal Trade Commission (FTC) that, in part, must:

  • supervise, evaluate, and regulate specified agencies' management of data security;
  • examine agencies annually for compliance with regulations;
  • investigate an agency in the event of a breach covered by the bill or suspected noncompliance with regulations, and report on any findings of such investigation; and
  • coordinate with the National Institute of Standards and Technology and the National Cybersecurity and Communications Integration Center of the Department of Homeland Security.

The office is authorized to: (1) investigate an agency's compliance with regulations regarding any data breach, and (2) enjoin an agency from violating specified regulations.

Specified consumer reporting agencies, in part, must:

  • provide the office with information relating to security measures,
  • demonstrate reasonable data protection measures, and
  • notify the FTC of a covered breach.

The bill establishes civil penalties for violations and directs the FTC to enforce compliance.

What's happening now July 12, 2018

Committee on Banking, Housing, and Urban Affairs. Hearings held. Hearings printed: S.Hrg. 115-361.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
 Cosponsors 2
All 2 Democratic 2
D
Shaheen, Jeanne
New Hampshire · Feb 28, 2018
 D
Warner, Mark R.
Virginia · Jan 10, 2018
Cite this page click to expand
APA
U.S. Congress. (2026). S. 2289: Data Breach Prevention and Compensation Act of 2018. 115th Congress. Open America. https://openamerica.io/bill/115-S-2289/
MLA
"S. 2289: Data Breach Prevention and Compensation Act of 2018." 115th Congress, 2026, Open America, https://openamerica.io/bill/115-S-2289/.
Bluebook (legal)
S. 2289, 115th Cong. (2026), https://openamerica.io/bill/115-S-2289/.
Markdown link
[S. 2289: Data Breach Prevention and Compensation Act of 2018](https://openamerica.io/bill/115-S-2289/)
Report a problem