Veterans Privacy Protection Act of 2006
Latest action (25 May 2006): Introduced
What this bill does
The Veterans Privacy Protection Act of 2006 was introduced in response to a May 3, 2006 security breach at the Department of Veterans Affairs. It would direct the Federal Trade Commission, working with the VA, to create a toll-free counseling program for veterans and their spouses at risk of identity theft from the breach, including help placing extended fraud alerts or credit security freezes. It would amend the Fair Credit Reporting Act to let affected veterans and spouses obtain automatic extended fraud alerts and a new type of credit security freeze without the usual documentation requirements, with related fees paid by the VA rather than the individual. It would also double federal criminal penalties for identity theft offenses involving information obtained from this specific breach.
The bill primarily affects veterans and their spouses whose personal data may have been exposed, as well as credit reporting agencies, which would face new notification, response-time, and fee obligations. The VA and FTC would bear administrative and funding responsibilities, and the Comptroller General would be required to study VA data-protection practices, the breach investigation, the counseling program's effectiveness, and federal agencies' data-security compliance, reporting results to Congress within 18 months.
The bill was introduced by Senator Rockefeller on May 25, 2006, and referred to the Senate Committee on Banking, Housing, and Urban Affairs. It did not receive a vote and did not become law during the 109th Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Veterans Privacy Protection Act of 2006 - Directs the Federal Trade Commission (FTC) to develop and implement a program of financial counseling and support to any veteran (and spouse of a veteran) who may be a victim of identity theft as a result of the security breach at the Department of Veterans Affairs (VA) on May 3, 2006.
Amends the Fair Credit Reporting Act to direct each consumer reporting agency (CRA), upon the request of such a veteran or spouse, to provide automatic extended fraud alerts to such individuals. Authorizes the placement in the files of such a veteran or spouse of a security freeze by a CRA, after which the CRA may not release information from their file for consumer credit purposes to a third party without prior express written authorization from such veteran or spouse. Requires notification to the spouse or veteran by a CRA before the removal of a security freeze. Provides security freeze exceptions.
Amends the federal criminal code to double the penalties for identity theft when the victim is a veteran or their spouse.
Requires Comptroller General studies on: (1) VA data protection; (2) VA security breach investigation; (3) an FTC program for veterans and spouses at risk of identity theft; and (4) federal agency compliance with personal data protection requirements.
Common questions
- What does S. 3176 do?
- The Veterans Privacy Protection Act of 2006 was introduced in response to a May 3, 2006 security breach at the Department of Veterans Affairs. It would direct the Federal Trade Commission, working with the VA, to create a toll-free counseling program for veterans and their spouses at risk of identity theft from the breach, including help placing extended fraud alerts or credit security freezes. It would amend the Fair Credit Reporting Act to let affected veterans and spouses obtain automatic extended fraud alerts and a new type of credit security freeze without the usual documentation requirements, with related fees paid by the VA rather than the individual. It would also double federal criminal penalties for identity theft offenses involving information obtained from this specific breach. The bill primarily affects veterans and their spouses whose personal data may have been exposed, as well as credit reporting agencies, which would face new notification, response-time, and fee obligations. The VA and FTC would bear administrative and funding responsibilities, and the Comptroller General would be required to study VA data-protection practices, the breach investigation, the counseling program's effectiveness, and federal agencies' data-security compliance, reporting results to Congress within 18 months. The bill was introduced by Senator Rockefeller on May 25, 2006, and referred to the Senate Committee on Banking, Housing, and Urban Affairs. It did not receive a vote and did not become law during the 109th Congress.
- Has S. 3176 become law?
- Not yet. As of 25 May 2006, S. 3176 is introduced.
- Who sponsored S. 3176?
- S. 3176 was sponsored by Sen. John “Jay” Rockefeller [D-WV, 1985-2014] (Democrat-WV), with 4 cosponsors.
- What's the latest action on S. 3176?
- Introduced (25 May 2006).
Related bills in Finance and Financial Sector
Terrorism Risk Insurance Program Reauthorization Act of 2026
Small Business Audit Correction Act of 2026
Bankruptcy Threshold Adjustment Act
Consumer Financial Protection Accountability and Reform Act of 2026
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.