1. Short title This Act may be cited as the Data Breach Prevention and Compensation Act of 2018 . 2. Definitions In this Act: (1) Career appointee The term career appointee has the meaning given the term in section 3132(a) of title 5, United States Code. (2) Commission The term Commission means the Federal Trade Commission. (3) Covered breach The term covered breach means any instance in which at least 1 piece of personally identifying information is exposed or is reasonably likely to have been exposed to an unauthorized party. (4) Covered consumer reporting agency The term covered consumer reporting agency means— (A) a consumer reporting agency described in section 603(p) of the Fair Credit Reporting Act ( 15 U.S.C. 1681a(p) ); or (B) a consumer reporting agency that earns not less than $7,000,000 in annual revenue from the sales of consumer reports. (5) Director The term Director means the Director of the Office of Cybersecurity. (6) Detail The term detail means a temporary assignment of an employee to a different position for a specified period, with the employee returning to his or her regular duties at the end of the detail. (7) Personally identifying information The term personally identifying information means— (A) a Social Security number; (B) a driver’s license number; (C) a passport number; (D) an alien registration number or other government-issued unique identification number; (E) unique biometric data, such as faceprint, fingerprint, voice print, iris image, or other unique physical representations; (F) an individual’s first and last name or first initial and last name in combination with any information that relates to the individual’s past, present, or future physical or mental health or condition, or to the provision of health care to or diagnosis of the individual; (G) (i) a financial account number, debit card number, or credit card number of the consumer; or (ii) any passcode required to access an account described in clause (i)