Consumer Privacy Protection Act of 2015
The source supplies the latest action, but no lifecycle stage.
Latest action (29 Jul 2015): Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.
What this bill does
This bill, H.R. 2977, titled the Consumer Privacy Protection Act of 2015, aims to strengthen protections for sensitive personal information. It would make it a crime to intentionally hide knowledge of a security breach involving such data, with potential penalties of fines or up to five years in prison if the breach causes at least $1,000 in economic harm to an individual. The bill also provides law enforcement with tools to pursue cybercrimes, including the ability to seek court orders to stop ongoing conduct that damages 100 or more government or commerce-related computers annually.
The legislation would affect commercial entities that handle sensitive personally identifiable information (PII) of at least 10,000 U.S. residents. These entities would be required to implement comprehensive data security programs and to notify U.S. residents if their PII has been accessed or acquired. PII is broadly defined to include government-issued identifiers, financial and account information, unique electronic identifiers, biometric data, health information, geographic location data, and password-protected digital photos and videos. Certain financial institutions and entities covered by HIPAA are exempt from these requirements.
H.R. 2977 was introduced in the House of Representatives in July 2015 and referred to multiple committees. Its current status is "Introduced," meaning it has not yet been passed by either chamber of Congress. For the bill to become law, it would need to be considered and passed by the House, then sent to the Senate for consideration, and finally signed by the President.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Consumer Privacy Protection Act of 2015
This bill makes it a crime to intentionally and willfully conceal knowledge of a security breach involving sensitive personally identifiable information (PII). If the breach results in economic harm of at least $1,000 to any individual, then a violator is subject to a fine and/or five years in prison.
The legislation authorizes the Department of Justice (DOJ) to seek a civil injunction to prevent ongoing conduct that damages 100 or more protected computers during any one-year period. A protected computer is a government computer, a bank computer, or a computer used in or affecting interstate or foreign commerce or communication.
It also authorizes DOJ to seek an injunction or restraining order to prevent disposition of property obtained as a result of such a violation.
The legislation expands the list of money laundering predicate offenses to include financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices.
This bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program.
Commercial entities must notify any U.S. resident whose PII has been, or is reasonably believed to have been, accessed or acquired. PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos.
It sets forth provisions regarding: (1) methods and content of notification of a security breach; (2) entities exempt from notification requirements; and (3) notification to consumer credit reporting agencies, law enforcement entities, and the Federal Trade Commission (FTC).
Timeline
29 Jul 2015
Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations.
Common questions
- What does H.R. 2977 do?
- This bill, H.R. 2977, titled the Consumer Privacy Protection Act of 2015, aims to strengthen protections for sensitive personal information. It would make it a crime to intentionally hide knowledge of a security breach involving such data, with potential penalties of fines or up to five years in prison if the breach causes at least $1,000 in economic harm to an individual. The bill also provides law enforcement with tools to pursue cybercrimes, including the ability to seek court orders to stop ongoing conduct that damages 100 or more government or commerce-related computers annually. The legislation would affect commercial entities that handle sensitive personally identifiable information (PII) of at least 10,000 U.S. residents. These entities would be required to implement comprehensive data security programs and to notify U.S. residents if their PII has been accessed or acquired. PII is broadly defined to include government-issued identifiers, financial and account information, unique electronic identifiers, biometric data, health information, geographic location data, and password-protected digital photos and videos. Certain financial institutions and entities covered by HIPAA are exempt from these requirements. H.R. 2977 was introduced in the House of Representatives in July 2015 and referred to multiple committees. Its current status is "Introduced," meaning it has not yet been passed by either chamber of Congress. For the bill to become law, it would need to be considered and passed by the House, then sent to the Senate for consideration, and finally signed by the President.
- Has H.R. 2977 become law?
- The source does not supply a confirmed lifecycle stage for H.R. 2977. Check the latest action and official source below.
- Who sponsored H.R. 2977?
- H.R. 2977 was sponsored by Rep. Cicilline, David N. [D-RI-1] (D-RI), with 13 cosponsors.
- What's the latest action on H.R. 2977?
- Referred to the Subcommittee on Crime, Terrorism, Homeland Security, and Investigations. (29 Jul 2015).
Related bills in Crime and Law Enforcement
Enhancing Detection of Human Trafficking Act
National Coordination Center and Commercial Cyber Capabilities Codification Act
Supporting the goals and ideals of "National Nonviolence Week" to raise awareness of youth violence in the United States.
Anthony Amoros Law Right to Know Act
More bills from Rep. Cicilline, David N. [D-RI-1]
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.