Data Security Act of 2015
Do you support it?
Want to know if it passes?
We'll email you when HR 2205 moves — a committee vote, a floor vote, or a signature. Nothing else.
Free forever · unsubscribe in one click.
Your answer was recorded either way.
Which district are you in?
Your ZIP is all we need to match you to your own representatives — so we can tell you how they voted on HR 2205.
You're tracking HR 2205
We'll email you the moment it moves.
HR 2205 — Data Security Act of 2015
Last action — Reported (Amended) by the Committee on Financial Services. H. Rept. 114-867, Part I.
No card. One bill, free forever — alerts when it moves.
-
✓Introduced
-
✓In Committee
-
Died in session
This bill died with 114th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.
Summary
Data Security Act of 2015 Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Directs entities to require their third-party service providers by contract to implement appropriate safeguards for sensitive information. Allows an entity to delay notifications upon the request of a law enforcement agency. Provides special notification procedures for: (1) third-party service providers that maintain data in electronic form on behalf of another entity, and (2) certain electronic data carriers. Allows financial institutions to communicate with account holders regarding breaches at third-party entities with access to their account information. Sets forth alternative compliance procedures for: (1) financial institutions and affiliates under the Gramm-Leach-Bliley Act, and (2) entities complying with certain health record privacy laws. Requires this Act to be enforced by the Federal Trade Commission, the Comptroller of the Currency, the Federal Reserve System, the Federal Deposit Insurance Corporation, the National Credit Union Administration Board, the Securities and Exchange Commission, the Commodity Futures Trading Commission, the Office of Federal Housing Enterprise Oversight, or a state insurance authority depending on the type of entity handling the sensitive information. Prohibits certain state laws from being imposed for information security and breach notification purposes. Sets forth requirements concerning the application of this Act to entities regulated by the Federal Communications Commission.
Bill Text
We don't have the full text on file for this bill yet.
Read HR 2205 on the official United States source →Action History
-
Reported (Amended) by the Committee on Financial Services. H. Rept. 114-867, Part I.
-
Ordered to be Reported (Amended) by the Yeas and Nays: 46 - 9.
-
Committee Consideration and Mark-up Session Held.
-
Committee Consideration and Mark-up Session Held.
-
Referred to the Subcommittee on Commerce, Manufacturing, and Trade.
-
Referred to House Financial Services
-
Referred to House Energy and Commerce
-
Referred to the Committee on Energy and Commerce, and in addition to the Committee on Financial Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
-
Introduced in House
Sponsors
- Randy Neugebauer · Primary
Sponsorship breakdown
Export CSV (upgrade) →1 sponsors · 0 co-sponsors · 546 not signed on
Sponsors (1)
Co-sponsors (0)
None.
Not signed on (546)
546 members have not signed on to this bill.
Show all 546 →"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.
Subjects
Frequently asked questions
- What does HR 2205 do?
- Data Security Act of 2015 Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Directs entities to require their third-party service providers by contract to implement appropriate safeguards for sensitive information. Allows an entity to delay notifications upon the request of a law enforcement agency. Provides special notification procedures for: (1) third-party service providers that maintain data in electronic form on behalf of another entity, and (2) certain electronic data carriers. Allows financial institutions to communicate with account holders regarding breaches at third-party entities with access to their account information. Sets forth alternative compliance procedures for: (1) financial institutions and affiliates under the Gramm-Leach-Bliley Act, and (2) entities complying with certain health record privacy laws. Requires this Act to be enforced by the Federal Trade Commission, the Comptroller of the Currency, the Federal Reserve System, the Federal Deposit Insurance Corporation, the National Credit Union Administration Board, the Securities and Exchange Commission, the Commodity Futures Trading Commission, the Office of Federal Housing Enterprise Oversight, or a state insurance authority depending on the type of entity handling the sensitive information. Prohibits certain state laws from being imposed for information security and breach notification purposes. Sets forth requirements concerning the application of this Act to entities regulated by the Federal Communications Commission.
- Who sponsors HR 2205?
- HR 2205 is sponsored by Randy Neugebauer (R).
- What is the current status of HR 2205?
- This bill died with 114th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
- Where can I track HR 2205?
- Track HR 2205 free on One Click Politics — get push/email alerts when it moves.
Make your voice heard on HR 2205
Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.
Stay ahead of HR 2205
Last checked for changes about 13 hours ago · updated continuously
One Click Politics tracks every bill in Congress and all 50 states.
Track this bill →