Consumer Privacy Protection Act of 2015
Latest action (8 Jul 2015): Introduced
What this bill does
Generate a neutral, plain-English explanation of what this bill does, who it affects and what happens next — grounded in the official text.
Official summary
Consumer Privacy Protection Act of 2015
This bill makes it a crime to intentionally and willfully conceal knowledge of a security breach involving sensitive personally identifiable information (PII). If the breach results in economic harm of at least $1,000 to any individual, then a violator is subject to a fine and/or five years in prison.
The legislation authorizes the Department of Justice (DOJ) to seek a civil injunction to prevent ongoing conduct that damages 100 or more protected computers during any one-year period. A protected computer is a government computer, a bank computer, or a computer used in or affecting interstate or foreign commerce or communication.
It also authorizes DOJ to seek an injunction or restraining order to prevent disposition of property obtained as a result of such a violation.
The legislation expands the list of money laundering predicate offenses to include financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices.
This bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program.
Commercial entities must notify any U.S. resident whose PII has been, or is reasonably believed to have been, accessed or acquired. PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos.
It sets forth provisions regarding: (1) methods and content of notification of a security breach; (2) entities exempt from notification requirements; and (3) notification to consumer credit reporting agencies, law enforcement entities, and the Federal Trade Commission (FTC).
Common questions
- What does H.R. 2977 do?
- Consumer Privacy Protection Act of 2015 This bill makes it a crime to intentionally and willfully conceal knowledge of a security breach involving sensitive personally identifiable information (PII). If the breach results in economic harm of at least $1,000 to any individual, then a violator is subject to a fine and/or five years in prison. The legislation authorizes the Department of Justice (DOJ) to seek a civil injunction to prevent ongoing conduct that damages 100 or more protected computers during any one-year period. A protected computer is a government computer, a bank computer, or a computer used in or affecting interstate or foreign commerce or communication. It also authorizes DOJ to seek an injunction or restraining order to prevent disposition of property obtained as a result of such a violation. The legislation expands the list of money laundering predicate offenses to include financial transactions that involve proceeds of unlawful manufacturing, distribution, possession, and advertising of wire, oral, or electronic communication intercepting devices. This bill requires certain commercial entities to implement a comprehensive consumer privacy and data security program. Commercial entities must notify any U.S. resident whose PII has been, or is reasonably believed to have been, accessed or acquired. PII includes electronic or digital forms of personal, financial, health, and biometric data, geographic location, and password-protected photographs and videos. It sets forth provisions regarding: (1) methods and content of notification of a security breach; (2) entities exempt from notification requirements; and (3) notification to consumer credit reporting agencies, law enforcement entities, and the Federal Trade Commission (FTC). It authorizes DOJ, the FTC, and states to enforce civil violations. DOJ and states may seek monetary or injunctive relief, and the FTC may seek monetary relief. The bill does not establish a private right of action.
- Has H.R. 2977 become law?
- Not yet. As of 8 Jul 2015, H.R. 2977 is introduced.
- Who sponsored H.R. 2977?
- H.R. 2977 was sponsored by Rep. David Cicilline [D-RI1, 2011-2023] (Democrat-RI), with 13 cosponsors.
- What's the latest action on H.R. 2977?
- Introduced (8 Jul 2015).
Related bills in Crime and Law Enforcement
Safe Cloud Storage Act
Prison Staff Safety Enhancement Act
BOP Direct-Hire Authority Act
Officer Leslie Coffelt U.S. Secret Service Police Act of 2026
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.