1. Short title This Act may be cited as the Consumer Information Notification Requirement Act . 2. Breach notification standards Section 501 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 ) is amended— (1) in subsection (b)(3) by striking the period at the end and inserting , including through the provision of a breach notice in the event of unauthorized access that is reasonably likely to result in identity theft, fraud, or economic loss. ; and (2) by adding at the end the following: (c) Standards with respect to breach notification Each agency or authority required to establish standards described under subsection (b)(3) with respect to the provision of a breach notice shall establish the standards with respect to such notice that are contained in the interpretive guidance issued by the Comptroller of the Currency, the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation, and the Office of Thrift Supervision titled Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice , published March 29, 2005 (70 Fed. Reg. 15736), and for a financial institution that is not a bank, such standards shall be applied to the institution as if the institution was a bank to the extent appropriate and practicable. (d) Insurance (1) Enforcement Notwithstanding section 505(a)(6), with respect to an entity engaged in providing insurance, the standards under subsection (b) shall be enforced— (A) with respect to any such standards related to data security safeguards, by— (i) the State insurance authority of the State in which the entity is domiciled; or (ii) in the case of an insurance agent, agency, or brokerage, the State insurance authority of the State in which such agent, agency, or brokerage has its principal place of business