United States 114th Congress Status: Died 1 D cosponsors

HR 2977 — Consumer Privacy Protection Act of 2015

Last action — Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. ✓
    In Committee
  3. Died in session

This bill died with 114th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

Summary

Consumer Privacy Protection Act of 2015 This bill makes it a crime to intentionally and willfully conceal knowledge of a security breach involving sensitive personally identifiable information (PII). If the breach results in economic harm of at least $1,000 to any individual, then a violator is subject to a fine and/or five years in prison. The legislation authorizes the Department of Justice (DOJ) to seek a civil injunction to prevent ongoing conduct that damages 100 or more protected computers during any one-year period. A protected computer is a government computer, a bank computer, or a computer used in or affecting interstate or foreign commerce or communication. It also authorizes DOJ to seek an injunction or restraining order to prevent disposition of property obtained as a result of such a violation. The legislation expands the list of money laundering predicate offenses to include financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices. This bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program. Commercial entities must notify any U.S. resident whose PII has been, or is reasonably believed to have been, accessed or acquired. PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos. It sets forth provisions regarding: (1) methods and content of notification of a security breach; (2) entities exempt from notification requirements; and (3) notification to consumer credit reporting agencies, law enforcement entities, and the Federal Trade Commission (FTC). It authorizes DOJ, the FTC, and states to enforce civil violations. DOJ and states may seek monetary or injunctive relief, and the FTC may seek monetary relief. The bill does not establish a private right of action.

Bill Text

We don't have the full text on file for this bill yet.

Read HR 2977 on the official United States source →

Action History

  1. Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.

  2. Referred to the Subcommittee on Commerce, Manufacturing, and Trade.

  3. Referred to House Budget

  4. Referred to House Financial Services

  5. Referred to House Energy and Commerce

  6. Referred to House Judiciary

  7. Referred to the Committee on the Judiciary, and in addition to the Committees on Energy and Commerce, Financial Services, and the Budget, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

  8. Introduced in House

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 546 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (546)

546 members have not signed on to this bill.

Show all 546 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does HR 2977 do?
Consumer Privacy Protection Act of 2015 This bill makes it a crime to intentionally and willfully conceal knowledge of a security breach involving sensitive personally identifiable information (PII). If the breach results in economic harm of at least $1,000 to any individual, then a violator is subject to a fine and/or five years in prison. The legislation authorizes the Department of Justice (DOJ) to seek a civil injunction to prevent ongoing conduct that damages 100 or more protected computers during any one-year period. A protected computer is a government computer, a bank computer, or a computer used in or affecting interstate or foreign commerce or communication. It also authorizes DOJ to seek an injunction or restraining order to prevent disposition of property obtained as a result of such a violation. The legislation expands the list of money laundering predicate offenses to include financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices. This bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program. Commercial entities must notify any U.S. resident whose PII has been, or is reasonably believed to have been, accessed or acquired. PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos. It sets forth provisions regarding: (1) methods and content of notification of a security breach; (2) entities exempt from notification requirements; and (3) notification to consumer credit reporting agencies, law enforcement entities, and the Federal Trade Commission (FTC). It authorizes DOJ, the FTC, and states to enforce civil violations. DOJ and states may seek monetary or injunctive relief, and the FTC may seek monetary relief. The bill does not establish a private right of action.
Who sponsors HR 2977?
HR 2977 is sponsored by David Cicilline (D).
What is the current status of HR 2977?
This bill died with 114th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track HR 2977?
Track HR 2977 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on HR 2977

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Stay ahead of HR 2977

Last checked for changes about 9 hours ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →