1. Short title This Act may be cited as the Data Breach Prevention and Compensation Act of 2019 . 2. Definitions In this Act: (1) Affected consumer The term affected consumer means any individual to whom personally identifying information pertains that was, or that may have been, affected by a covered breach. (2) Agency The term agency has the meaning given the term in section 551 of title 5, United States Code. (3) Career appointee The term career appointee has the meaning given the term in section 3132(a) of title 5, United States Code. (4) Commission The term Commission means the Federal Trade Commission. (5) Consumer report; consumer reporting agency The terms consumer report and consumer reporting agency have the meanings given the terms in section 603 of the Fair Credit Reporting Act ( 15 U.S.C. 1681a ). (6) Covered breach The term covered breach means any instance in which not less than 1 piece of personally identifying information held by a covered consumer reporting agency is exposed, or is reasonably likely to have been exposed, to an unauthorized party. (7) Covered consumer reporting agency The term covered consumer reporting agency means— (A) a consumer reporting agency described in section 603(p) of the Fair Credit Reporting Act ( 15 U.S.C. 1681a(p) ); or (B) a consumer reporting agency that earns not less than $7,000,000 in annual revenue from the sale of consumer reports. (8) Detail The term detail means a temporary assignment of an employee to a different position for a specified period, with the employee returning to the regular duties of the employee at the end of the specified period. (9) Director The term Director means the Director of the Office. (10) Office The term Office means the Office of Cybersecurity established under section 3(a). (11) Personally identifying information The term personally identifying information means, with respect to an individual— (A) the social security number of the individual; (B) a driver’s license number of the individual