During the First Session of the 110 th Congress, three data security bills were reported favorably out of Senate committeesâ S. 239 (Feinstein), a bill to require federal agencies, and persons engaged in interstate commerce, in possession of data containing sensitive personally identifiable information, to disclose any breach of such information; S. 495 (Leahy), a bill to prevent and mitigate identity theft, to ensure privacy, to provide notice of security breaches, and to enhance criminal penalties, law enforcement assistance, and other protections against security breaches, fraudulent access, and misuse of personally identifiable information; and S. 1178 (Inouye), a bill to strengthen data protection and safeguards, require data breach notification, and further prevent identity theft. 4791 (Clay), a bill to strengthen requirements for ensuring the effectiveness of information security controls over information resources that support federal operations and assets, was passed by the House by voice vote under suspension of the rules. H.R. H.R. 958 preempts state information security laws. H.R. The bill prescribes data security standards to be implemented by federal agencies. H.R. H.R. H.R. On June 3, 2008, H.R. S. 1260 (Carper)

Data Security Act of 2007. S. 1558 (Coleman)

Federal Agency Data Breach Protection Act.
During the First Session of the 110 th Congress, three data security bills were reported favorably out of Senate committeesâ S. 239 (Feinstein), a bill to require federal agencies, and persons engaged in interstate commerce, in possession of data containing sensitive personally identifiable information, to disclose any breach of such information; S. 495 (Leahy), a bill to prevent and mitigate identity theft, to ensure privacy, to provide notice of security breaches, and to enhance criminal penalties, law enforcement assistance, and other protections against security breaches, fraudulent access, and misuse of personally identifiable information; and S. 1178 (Inouye), a bill to strengthen data protection and safeguards, require data breach notification, and further prevent identity theft. On June 3, 2008, H.R. 4791 (Clay), a bill to strengthen requirements for ensuring the effectiveness of information security controls over information resources that support federal operations and assets and to protect personally identifiable information of individuals that is maintained in or transmitted by federal agency information systems, was passed by the House by voice vote under suspension of the rules.
Other data security bills were also introduced including S. 1202 (Sessions), S. 1260 (Carper), S. 1558 (Coleman), H.R. 516 (Davis), H.R. 836 (Smith), H.R. 958 (Rush), H.R. 1685 (Price), H.R. 2124 (Davis), and H.R. 4175 (Conyers).
This report discusses the core areas addressed in federal legislation. For related reports, see CRS Report RL34120, Federal Information Security and Data Breach Notification Laws , by [author name scrubbed]. Also see the Current Legislative Issues web page for "Privacy and Data Security" available at http://apps.crs.gov/ cli/ cli.aspx?PRDS_CLI_ITEM_ID=2105 . This report will be updated as warranted.