Notification of Risk to Personal Data Act

H.R. 1069, the Notification of Risk to Personal Data Act, would require businesses and government agencies to notify individuals whenever their personal electronic information is compromised in a security breach. Under this bill, financial institutions would be required to report such breaches to affected customers, credit reporting agencies, and law enforcement. Additionally, the bill would empower State Attorneys General to sue companies that fail to protect data and would require credit bureaus to place fraud alerts on the accounts of impacted consumers to help prevent identity theft.