Personal Data Privacy and Security Act of 2011
The source supplies the latest action, but no lifecycle stage.
Latest action (7 Nov 2011): By Senator Leahy from Committee on the Judiciary filed written report. Report No. 112-91. Additional and Minority views filed.
What this bill does
This bill, S. 1151, known as the Personal Data Privacy and Security Act of 2011, aims to enhance protections against identity theft and the misuse of personal information. It defines "sensitive personally identifiable information," which includes combinations of data like names with addresses or birthdates, non-truncated Social Security numbers, biometric data, and account access codes. The bill proposes increasing criminal penalties for fraud related to unauthorized access of electronic personal information and for intentionally concealing a security breach that results in economic harm of $1,000 or more. It also expands prohibitions on trafficking passwords and introduces criminal penalties for attempting or conspiring to commit computer-related fraud.
The legislation affects individuals whose personal data might be compromised and businesses that collect, store, or use sensitive personal information in electronic form. Specifically, businesses that handle such data for 10,000 or more U.S. persons would be subject to new program requirements for data privacy and security. However, certain entities like financial institutions covered by the Gramm-Leach-Bliley Act and healthcare providers subject to HIPAA are excluded.
S. 1151 was introduced in the Senate in June 2011 and has since been ordered reported with amendments by the Committee on the Judiciary. Following this committee action, the bill would move to the full Senate for further consideration. If passed by the Senate, it would then proceed to the House of Representatives for a similar legislative process.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Personal Data Privacy and Security Act of 2011 - (Sec. 3) Defines "sensitive personally identifiable information" for purposes of this Act to include: (1) specified combinations of data elements in electronic or digital form, such as an individual's first and last name or first initial and last name in combination with home address or telephone number, mother's maiden name, and date of birth; (2) a non-truncated social security number, driver's license number, passport number, or government-issued unique identification number; (3) unique biometric data, such as a fingerprint, voice print, retina or iris image, or other unique physical representation; (4) a unique account identifier; and (5) any security code, access code, password, or secure code that could be used to generate such codes or passwords.
Title I: Enhancing Punishment for Identity Theft and Other Violations of Data Privacy and Security - (Sec. 101) Amends the federal criminal code to make fraud in connection with the unauthorized access of personally identifiable information (in electronic or digital form) a predicate for instituting a prosecution for racketeering.
(Sec. 102) Imposes a prison term of up to five years and/or a fine on any individual who has knowledge of and intentionally and willfully conceals a security breach and such breach results in economic harm of $1,000 or more to any individual. Grants the U.S. Secret Service and the Federal Bureau of Investigation (FBI) authority to investigate criminal concealments of security breaches.
(Sec. 103) Increases penalties for fraud and related activity in connection with computers.
(Sec. 104) Expands the prohibition against trafficking in passwords to include trafficking through any means by which a protected computer may be accessed without authorization.
(Sec. 105) Imposes criminal penalties for attempts and conspiracies to commit fraud and related activity in connection with computers.
(Sec. 106) Modifies criminal and civil forfeiture provisions, including requiring certain civil forfeiture seizures and forfeitures to be performed by persons designated for that purpose by the Secretary of Homeland Security (DHS) or the Attorney General (DOJ).
(Sec. 107) Prohibits civil actions involving unauthorized use of a protected computer if a violation of a contractual obligation or agreement, such as an acceptable use policy or terms of service agreement, constitutes the sole basis for determining that access to the computer is unauthorized or in excess of authorization.
Timeline
7 Nov 2011
By Senator Leahy from Committee on the Judiciary filed written report. Report No. 112-91. Additional and Minority views filed.
Common questions
- What does S. 1151 do?
- This bill, S. 1151, known as the Personal Data Privacy and Security Act of 2011, aims to enhance protections against identity theft and the misuse of personal information. It defines "sensitive personally identifiable information," which includes combinations of data like names with addresses or birthdates, non-truncated Social Security numbers, biometric data, and account access codes. The bill proposes increasing criminal penalties for fraud related to unauthorized access of electronic personal information and for intentionally concealing a security breach that results in economic harm of $1,000 or more. It also expands prohibitions on trafficking passwords and introduces criminal penalties for attempting or conspiring to commit computer-related fraud. The legislation affects individuals whose personal data might be compromised and businesses that collect, store, or use sensitive personal information in electronic form. Specifically, businesses that handle such data for 10,000 or more U.S. persons would be subject to new program requirements for data privacy and security. However, certain entities like financial institutions covered by the Gramm-Leach-Bliley Act and healthcare providers subject to HIPAA are excluded. S. 1151 was introduced in the Senate in June 2011 and has since been ordered reported with amendments by the Committee on the Judiciary. Following this committee action, the bill would move to the full Senate for further consideration. If passed by the Senate, it would then proceed to the House of Representatives for a similar legislative process.
- Has S. 1151 become law?
- The source does not supply a confirmed lifecycle stage for S. 1151. Check the latest action and official source below.
- Who sponsored S. 1151?
- S. 1151 was sponsored by Sen. Leahy, Patrick J. [D-VT] (D-VT), with 4 cosponsors.
- What's the latest action on S. 1151?
- By Senator Leahy from Committee on the Judiciary filed written report. Report No. 112-91. Additional and Minority views filed. (7 Nov 2011).
Related bills in Crime and Law Enforcement
Enhancing Detection of Human Trafficking Act
National Coordination Center and Commercial Cyber Capabilities Codification Act
Supporting the goals and ideals of "National Nonviolence Week" to raise awareness of youth violence in the United States.
Anthony Amoros Law Right to Know Act
More bills from Sen. Leahy, Patrick J. [D-VT]
A bill to place restrictions on searches and seizures of electronic devices at the border.
A bill to place restrictions on searches and seizures of electronic devices at the border.
Consumer Privacy Protection Act of 2017
Consumer Privacy Protection Act of 2015
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.