On the recordNovember 14, 2017
today, I am introducing the Consumer Privacy Protection Act of 2017. This legislation, if enacted, will help ensure that when Americans entrust corporations with their most sensitive personal information, these corporations take the right steps to keep this information secure, and do the right thing in the event of a data breach. In today's modern world, data security is no longer just about protecting our identities and our bank accounts; it is about protecting our privacy and even our National security. The need for this legislation has long been clear, and never more so than in the wake of the recent, massive Equifax data breach. After media investigations and multiple Congressional hearings, we learned that the Equifax breach exposed the sensitive personal information of almost half the American population. We also learned that Equifax failed to take basic steps to secure its databases, and waited an unjustifiably long period before notifying consumers and regulators. Clearly, it is past time for all corporations that hold our personal information to maintain some common-sense, baseline cybersecurity standards. Corporations make significant profits from our personal information, and they should be obligated to keep it safe. Yet too often, data breaches continue to plague American businesses and compromise the privacy of millions of consumers.…
Source
govinfo.gov




