Pennsylvania 2019-2020 Regular Session Status: In Committee 4 R cosponsors

SB 308 — An Act amending the act of December 22, 2005 (P.L.474, No.94), known as the Breach of Personal Information Notification Act, further providing for definitions and for notification of breach; and providing for contents and nature of notice and for storage policies.

Last action — PN 0289 Referred to COMMUNICATIONS AND TECHNOLOGY

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. 2
    In Committee
  3. 3
    Passed Senate
  4. 4
    Passed House
  5. 5
    To Executive
  6. 6
    Enacted

This bill died with 2019-2020 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

In plain language

This bill updates Pennsylvania's breach notification requirements for personal information.

The bill amends the Breach of Personal Information Notification Act to include new definitions and requirements for breach notifications. It specifies how and when notifications must be provided to individuals affected by data breaches.

What this means for you
  • Consumers: Consumers will receive clearer notices about breaches involving their personal information.

Bill Text

How this bill changes current law

6 changes Share ↗

AI-generated reading aid from the bill's amendatory text — verify against the official bill.

The bill modifies the Breach of Personal Information Notification Act by expanding definitions and enhancing notification requirements after a data breach.

  • Section 2

    An → The term includes

    The definition of 'personal information' is clarified to include various data elements.

  • Section 2

    "Health insurance information." Any of the following regarding an individual: (1) The individual's health insurance policy number or subscriber identification number. (2) A unique identifier used by a health insurer to identify the individual. (3) Information in the individual's application and claims history, including any appeals records.

    A new definition for 'health insurance information' is added.

  • Section 2

    "Medical information." Information regarding an individual's medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional.

    A new definition for 'medical information' is added.

  • Section 3(a)

    to any resident of this Commonwealth whose unencrypted and unredacted personal information was or is reasonably believed to have been accessed and acquired by an unauthorized person. → to any resident of this Commonwealth whose unencrypted and unredacted personal information was or is reasonably believed to have been accessed and acquired by an unauthorized person; except as provided in subsection (d) or section 4 or in order to take any measures necessary to determine the scope of the breach and to restore the reasonable integrity of the data system, the notice shall be made without unreasonable delay.

    Clarifies that notification should occur without unreasonable delay while determining the breach's scope.

  • Section 3

    Section 3.1. Contents and nature of notice. (a) Mandatory contents.--Each written, e-mail or website notice under this act shall include, at a minimum, the following: (1) The name and contact information of the entity providing the notice. (2) The date of the notice... (9) An offer by the entity providing the notice to provide free credit reports, credit protection and identity theft protection for 12 months to each individual affected by the breach of the security of the system.

    Introduces mandatory contents and format for breach notification.

  • Section 9

    Section 9. Storage policies. (a) Development.--The head of each State agency... shall develop policies for the offices under their jurisdiction to govern the safe and proper storage of computerized data containing personal information and other sensitive personally identifiable information.

    Adds requirements for developing storage policies for personally identifiable information.

Action History

  1. PN 0289 Referred to COMMUNICATIONS AND TECHNOLOGY

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 5 co-sponsors · 247 not signed on

Sponsors (1)

Co-sponsors (5)

Not signed on (247)

247 members have not signed on to this bill.

Show all 247 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

civil-rights technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

Who sponsors SB 308?
SB 308 is sponsored by Judy Ward (Republican), Kim L. Ward (Republican), Kristin Phillips-Hill (Republican), Daniel Laughlin (Republican), Folmer, and Mensch.
What is the current status of SB 308?
This bill died with 2019-2020 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track SB 308?
Track SB 308 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on SB 308

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of SB 308

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →