H.R. 5318: Cyber-Security Enhancement and Consumer Data Protection Act of 2006

109th Congress · introduced 2006-05-09 · Crime and Law Enforcement · Latest: Placed on the Union Calendar, Calendar No. 292.

federal

Follow this bill, step by step

Where it came from: introduced 2006-05-09 · official record
Who proposed it: Rep. Sensenbrenner, F. James, Jr. [R-WI-5] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Placed on the Union Calendar, Calendar No. 292. Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Cyber-Security Enhancement and Consumer Data Protection Act of 2006

Plain summary

Cyber-Security Enhancement and Consumer Data Protection Act of 2006 - (Sec. 2) Amends the federal criminal code to prohibit obtaining without authorization: (1) a means of identification from a protected computer (a computer exclusively for the use of a financial institution or the federal government); or (2) the capability to gain access to or remotely control a protected computer. (Sec. 3) Revises the definition of "protected computer" to include a computer the use of which affects interstate or foreign commerce or communication. Eliminates the criminal law requirement that conduct constituting computer fraud involve an interstate or foreign communication. (Sec. 4) Includes computer fraud within the definition of racketeering for purposes of the Racketeer Influenced and Corrupt Organizations Act (RICO). (Sec. 5) Includes threats to access a protected computer without authorization or to exceed such authorized access within the definition of computer-related extortion. (Sec. 6) Expands the crime of computer fraud to include conspiracy to commit computer fraud. (Sec. 7) Imposes a fine and/or prison term of up to five years for failure to notify the U.S. Secret Service or Federal Bureau of Investigation (FBI) of a major security breach in a database containing identification information with the intent to prevent, obstruct, or impede a lawful investigation of such breach. Defines "major security breach" as any security breach that involves: (1) the acquisition of the identification information of 10,000 or more individuals causing a significant risk of identity theft; (2) databases owned by the federal government; and (3) data containing identification information of federal employees or contractors involved in national security matters or law enforcement. Directs the Attorney General and the Secretary of Homeland Security to jointly issue regulations on the form, content, and timing of notices of major security breaches. Requires that such regulations provide that notice of a security breach be provided to the Secret Service or FBI before notice is provided to consumers and within 14 days after discovery of such breach. Grants immunity to law enforcement entities or to any person who notifies law enforcement of a security breach. Imposes a civil penalty of $50,000 for each day any individual fails to provide notice of a major security breach (not to exceed $1 million). (Sec. 8) Increases the prison term for computer fraud to a maximum of 30 years. Requires forfeiture of any personal property used to commit computer fraud. (Sec. 9) Directs the U.S. Sentencing Commission to review and amend its guidelines and policy statements to reflect congressional intent to increase criminal penalties for computer fraud. (Sec. 10) Imposes criminal penalties for damage affecting ten or more protected computers during any one-year period. (Sec. 11) Authorizes additional funding in FY2007-FY2011 to the Director of the Secret Service, the Attorney General for the Criminal Division of the Department of Justice, and the Director of the FBI to investigate and prosecute crimes committed through the use of computers.

Congressional Research Service summary (Reported to House with amendment(s)), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Cyber-Security Enhancement and Consumer Data Protection Act of 2006

Source: Congressional Research Service summary (Reported to House with amendment(s))

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Rep. Sensenbrenner, F. James, Jr. [R-WI-5] · 6 cosponsors

Cost estimate: CBO cost estimate: H.R. 5318, Cyber-Security Enhancement and Consumer Data Protection Act of 2006 (2006-06-16); CBO cost estimate: H.R. 5318, Cyber-Security Enhancement and Consumer Data Protection Act of 2006 (2006-06-16)

Cosponsors on this site

Adam B. Schiff (D-CA)

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (3)

Authorization: A law that creates or continues a government program and says what it may do, often with a suggested spending ceiling. An authorization alone does not provide money; a separate appropriation does.
Rulemaking: The process agencies use to write regulations that carry out laws passed by Congress or a legislature. Usually an agency publishes a proposed rule, takes public comments, then publishes a final rule.
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Reported to House with amendment(s))
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-109hr5318.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/109/hr>

Record fed-us-cong109-hr5318 · catalog fed-us-congress-bills-cong109 · updated 2026-11-15 by psicol fed-bills-cong109