Personal Data Privacy and Security Act of 2014
The source supplies the latest action, but no lifecycle stage.
Latest action (20 Mar 2014): Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.
What this bill does
The Personal Data Privacy and Security Act of 2014, H.R. 3990, aims to enhance protections against identity theft and the misuse of personal information. The bill defines "sensitive personally identifiable information" broadly, including combinations of name with other data like birthdate, full Social Security numbers, biometric data, and account or security codes. It proposes increased criminal penalties for fraud related to computer access, including longer prison sentences and fines. The bill also makes the concealment of security breaches that result in economic harm of $1,000 or more a federal crime, punishable by up to five years in prison.
This legislation would affect individuals by strengthening protections for their personal data and potentially increasing penalties for those who misuse it. It would also impact business entities that collect, store, or transmit sensitive personal information on 10,000 or more individuals. These businesses would be required to implement comprehensive data privacy and security programs, including administrative, technical, and physical safeguards. However, financial institutions already subject to specific regulations like Gramm-Leach-Bliley and certain healthcare providers covered by HIPAA would be exempted.
H.R. 3990 was introduced in the House of Representatives on February 4, 2014, and was referred to multiple committees. Its current status is "Introduced," meaning it has not advanced further in the legislative process. For the bill to become law, it would need to be passed by both the House of Representatives and the Senate, and then signed by the President.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Personal Data Privacy and Security Act of 2014 - Defines "sensitive personally identifiable information" to include: (1) specified combinations of data elements in electronic or digital form, such as an individual's name, home address or telephone number, mother's maiden name, and date of birth; (2) a non-truncated social security number, driver's license number, passport number, or government-issued unique identification number; (3) unique biometric data; (4) a unique account identifier; and (5) any security code, access code, password, or secure code that could be used to generate such codes or passwords.
Title I: Enhancing Punishment for Identity Theft and Other Violations of Data Privacy and Security - Amends the federal criminal code to make fraud in connection with the unauthorized access of personally identifiable information (in electronic or digital form) a predicate for instituting a prosecution for racketeering.
Imposes a prison term of up to five years and/or a fine on any individual who has knowledge of and intentionally and willfully conceals a security breach and such breach results in economic harm of $1,000 or more to any individual. Grants the Secret Service and the Federal Bureau of Investigation (FBI) authority to investigate criminal concealments of security breaches.
Increases penalties for fraud and related activity, and imposes criminal penalties for attempts and conspiracies to commit fraud and related activity, in connection with computers.
Expands the prohibition against trafficking in passwords to include trafficking through any means by which a protected computer may be accessed without authorization.
Modifies criminal and civil forfeiture provisions, including requiring certain civil forfeiture seizures and forfeitures to be performed by persons designated for that purpose by the Secretary of Homeland Security (DHS) or the Attorney General (DOJ).
Prohibits civil actions involving unauthorized use of a protected computer if a violation of a contractual obligation or agreement constitutes the sole basis for determining that access to the computer is unauthorized.
Directs the Attorney General to report the number of criminal cases that involve: (1) unauthorized access to a nongovernmental computer, and (2) conduct in which the sole basis for such a determination was that the defendant violated a contractual obligation or agreement with a service provider or employer.
Timeline
20 Mar 2014
Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.
Common questions
- What does H.R. 3990 do?
- The Personal Data Privacy and Security Act of 2014, H.R. 3990, aims to enhance protections against identity theft and the misuse of personal information. The bill defines "sensitive personally identifiable information" broadly, including combinations of name with other data like birthdate, full Social Security numbers, biometric data, and account or security codes. It proposes increased criminal penalties for fraud related to computer access, including longer prison sentences and fines. The bill also makes the concealment of security breaches that result in economic harm of $1,000 or more a federal crime, punishable by up to five years in prison. This legislation would affect individuals by strengthening protections for their personal data and potentially increasing penalties for those who misuse it. It would also impact business entities that collect, store, or transmit sensitive personal information on 10,000 or more individuals. These businesses would be required to implement comprehensive data privacy and security programs, including administrative, technical, and physical safeguards. However, financial institutions already subject to specific regulations like Gramm-Leach-Bliley and certain healthcare providers covered by HIPAA would be exempted. H.R. 3990 was introduced in the House of Representatives on February 4, 2014, and was referred to multiple committees. Its current status is "Introduced," meaning it has not advanced further in the legislative process. For the bill to become law, it would need to be passed by both the House of Representatives and the Senate, and then signed by the President.
- Has H.R. 3990 become law?
- The source does not supply a confirmed lifecycle stage for H.R. 3990. Check the latest action and official source below.
- Who sponsored H.R. 3990?
- H.R. 3990 was sponsored by Rep. Shea-Porter, Carol [D-NH-1] (D-NH), with 0 cosponsors.
- What's the latest action on H.R. 3990?
- Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations. (20 Mar 2014).
Related bills in Crime and Law Enforcement
Enhancing Detection of Human Trafficking Act
National Coordination Center and Commercial Cyber Capabilities Codification Act
Supporting the goals and ideals of "National Nonviolence Week" to raise awareness of youth violence in the United States.
Anthony Amoros Law Right to Know Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.