1. Short title; table of contents (a) Short title This Act may be cited as the Consumer Privacy Protection Act of 2017 . (b) Table of contents The table of contents for this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Findings. Sec. 3. Definitions. TITLE I—Punishment for concealment of security breaches and tools to combat cybercrime Sec. 101. Concealment of security breaches involving sensitive personally identifiable information. Sec. 102. Reporting of certain cybercrimes. Sec. 103. Authority to shut down botnets. Sec. 104. Deterring the development and sale of computer and cell phone spying devices. TITLE II—Consumer privacy and security of sensitive personally identifiable information Subtitle A—Consumer privacy and data security program Sec. 201. Purpose and applicability of consumer privacy and data security program. Sec. 202. Requirements for consumer privacy and data security program. Sec. 203. Federal enforcement. Sec. 204. Enforcement by State attorneys general. Sec. 205. Relation to other laws. Subtitle B—Security breach notification Sec. 211. Notice to individuals. Sec. 212. Exemptions. Sec. 213. Methods of notice. Sec. 214. Content of notification. Sec. 215. Coordination of notification with credit reporting agencies. Sec. 216. Notice to the Federal Trade Commission. Sec. 217. Notice to law enforcement. Sec. 218. Federal enforcement. Sec. 219. Enforcement by State attorneys general. Sec. 220. Effect on Federal and State law. Sec. 221. Reporting on exemptions. Sec. 222. Effective date. TITLE III—Compliance with statutory Pay-As-You-Go Act Sec. 301. Budget compliance. 2. Findings Congress finds that— (1) databases of sensitive personally identifiable information are increasingly prime targets of hackers, identity thieves, rogue employees, and other criminals, including organized and sophisticated criminal operations