SAFE-ID Act
The source supplies the latest action, but no lifecycle stage.
Latest action (8 Apr 2004): Read twice and referred to the Committee on Commerce, Science, and Transportation.
What this bill does
The SAFE-ID Act would regulate how U.S. businesses send personally identifiable information, like names and medical records, to foreign affiliates or subcontractors. If a business wants to send this information to a country that the Federal Trade Commission (FTC) has not certified as having adequate privacy protections, the business must first inform the U.S. citizen that the country lacks these protections. The citizen would then need to give their consent, and this consent would have to be renewed every year before the information is transmitted.
This bill specifically addresses health care businesses, making them liable for any damages resulting from the misuse of a consumer's personally identifiable health care information by themselves or any foreign entities that received it. It also prevents health care businesses from ending a patient relationship simply to avoid getting consent for data transmission. The FTC would be responsible for certifying countries with adequate privacy laws.
The bill was introduced in the Senate in April 2004 and referred to the Committee on Commerce, Science, and Transportation. As of now, its latest action is simply that it has been introduced, meaning it has not yet been passed by either chamber of Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
SAFE-ID Act - Authorizes a business to transmit personally identifiable information regarding a U.S. citizen to any foreign affiliate or subcontractor located in a country certified by the Federal Trade Commission (FTC) as having adequate privacy protection for such information. Prohibits such business from transmitting such information to an affiliate or subcontractor in a country without such privacy protection unless: (1) the business discloses to the citizen that the country does not have such privacy protection; (2) the business obtains the citizen's consent to transmit such information; and (3) the consent is renewed by the citizen within one year before the information is transmitted. Provides liability for businesses improperly transmitting such information.
Makes any business or organization that collects or retains personally identifiable health care information about consumers (health care business) liable for any damages caused by improper storage, duplication, sharing, or other misuse of such information by the health care business or any foreign affiliate or subcontractor that received such information. Prohibits a health care business from terminating an existing relationship with a consumer of health care services in order to avoid the consent requirement.
Directs the FTC to certify, and make a list of, those countries that have legal systems that provide adequate privacy protection for such information.
Timeline
8 Apr 2004
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Common questions
- What does S. 2312 do?
- The SAFE-ID Act would regulate how U.S. businesses send personally identifiable information, like names and medical records, to foreign affiliates or subcontractors. If a business wants to send this information to a country that the Federal Trade Commission (FTC) has not certified as having adequate privacy protections, the business must first inform the U.S. citizen that the country lacks these protections. The citizen would then need to give their consent, and this consent would have to be renewed every year before the information is transmitted. This bill specifically addresses health care businesses, making them liable for any damages resulting from the misuse of a consumer's personally identifiable health care information by themselves or any foreign entities that received it. It also prevents health care businesses from ending a patient relationship simply to avoid getting consent for data transmission. The FTC would be responsible for certifying countries with adequate privacy laws. The bill was introduced in the Senate in April 2004 and referred to the Committee on Commerce, Science, and Transportation. As of now, its latest action is simply that it has been introduced, meaning it has not yet been passed by either chamber of Congress.
- Has S. 2312 become law?
- The source does not supply a confirmed lifecycle stage for S. 2312. Check the latest action and official source below.
- Who sponsored S. 2312?
- S. 2312 was sponsored by Sen. Clinton, Hillary Rodham [D-NY] (D-NY), with 1 cosponsor.
- What's the latest action on S. 2312?
- Read twice and referred to the Committee on Commerce, Science, and Transportation. (8 Apr 2004).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Cybersecurity for Small Businesses Act of 2026
Small Business Payment for Performance Act of 2026
Combating Foreign Threats to Main Street Act of 2026
More bills from Sen. Clinton, Hillary Rodham [D-NY]
Providing Real Outreach for Veterans Act of 2008
Coordinated Environmental Public Health Network Act of 2007
PROTECT Act
Coordinated Environmental Health Network Act of 2005
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.