H.R. 1770: Data Security and Breach Notification Act of 2015

Before you vote › Federal bills

H.R. 1770: Data Security and Breach Notification Act of 2015

114th Congress · introduced 2015-04-14 · Commerce · Latest: Placed on the Union Calendar, Calendar No. 719.

federal

Save to my notebook What does this mean? Print

Official title

Data Security and Breach Notification Act of 2015

Plain summary

Data Security and Breach Notification Act of 2015 This bill requires certain commercial entities regulated by the Federal Trade Commission (FTC), common carriers subject to the Communications Act of 1934, and nonprofit organizations that use, access, transmit, store, dispose of, or collect unencrypted nonpublic personal information to: (1) implement security measures to protect electronic information against unauthorized access and acquisition; (2) restore the integrity, security, and confidentiality of their data systems following the discovery of a security breach; and (3) determine whether there is a risk that a breach will result in identity theft, economic loss or harm, or financial fraud to individuals' personal information. Notification of a breach must be sent to: (1) affected U.S. residents; (2) the FTC and the U.S. Secret Service or the Federal Bureau of Investigation if an unauthorized person accesses and acquires the personal information of more than 10,000 individuals; and (3) consumer reporting agencies if notice must be provided to more than 10,000 individuals. The bill establishes special procedures to coordinate notices that must be provided when: (1) a breached entity processes personal data on behalf of a non-breached entity; or (2) a provider of electronic data transmission, storage, or network connection services becomes aware of a breach. The bill provides different sets of civil penalties that the FTC and states may impose to enforce against violations of this bill. The FTC must educate small businesses about data security and establish an Internet website containing non-binding best practices. The bill preempts state information security and notification laws, but does not exempt an entity from liability under common law. The bill applies to certain entities in place of security practices and notification standards currently enforced by the Federal Communications Commission (FCC), except for FCC regulations that pertain solely to 9-1-1 calls.

Congressional Research Service summary (Reported to House with amendment(s)), quoted unchanged (nonpartisan). Read the source.

What a vote does

PSI Sci description of the legislative step (not an opinion).

The strongest published arguments

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Rep. Blackburn, Marsha [R-TN-7] · 3 cosponsors

Cost estimate: CBO cost estimate: H.R. 1770, Data Security and Breach Notification Act of 2015 (2015-04-20)

Cosponsors on this site

Peter Welch (D-VT)

Sponsor's campaign money: Rep. Blackburn, Marsha [R-TN-7] reported raising $3.2 million (2025–2026). Details. Shown for context only; it does not mean any donor supported this bill.

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Sources

• Congressional Research Service summary (Reported to House with amendment(s))
• Congress.gov
• Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-114hr1770.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/114/hr>

Record fed-us-cong114-hr1770 · catalog fed-us-congress-bills-cong114 · updated 2026-11-15 by psicol fed-bills-cong114