H.R. 4187: Secure and Protect Americans' Data Act

114th Congress · introduced 2015-12-08 · Commerce · Latest: Referred to the Subcommittee on Commerce, Manufacturing, and Trade.

federal

Follow this bill, step by step

Where it came from: introduced 2015-12-08 · official record
Who proposed it: Rep. Schakowsky, Janice D. [D-IL-9] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Referred to the Subcommittee on Commerce, Manufacturing, and Trade. Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Secure and Protect Americans' Data Act

Plain summary

Secure and Protect Americans' Data Act This bill requires the Federal Trade Commission (FTC) to promulgate regulations requiring entities regulated by the FTC, common carriers, and nonprofit organizations to establish information security practices for the treatment and protection of personal information. At least annually, such entities must evaluate their consumer privacy programs to make any appropriate adjustments for changing technologies, threats or vulnerabilities, or business arrangements. The bill sets forth special procedures for information brokers to: (1) submit security policies to the FTC, (2) provide for post-breach audits, and (3) establish procedures for individuals to review and correct inaccuracies in their personal information. In lieu of procedures that allow individuals to dispute information, an information broker may provide individuals a means of expressing a preference not to have their information used for marketing purposes. The bill prohibits information brokers from obtaining or disclosing personal information by false pretenses. Within 10 days following discovery of a security breach, entities must notify: the FTC; the Federal Bureau of Investigation; the U.S. Secret Service; for common carriers, the Federal Communications Commission (FCC); and attorneys general of affected states. Within 30 days following a breach, entities must notify individuals who are U.S. citizens or residents whose personal information was, or is reasonably believed to have been, acquired or accessed by an unauthorized person, or used for an unauthorized purpose. If an entity is required to notify more than 5,000 individuals, the entity must also notify major consumer reporting agencies. An entity must provide notices in print and broadcast media if the affected residents of a state exceed 5,000. Notices must include information on affected individuals' entitlement to consumer credit reports or credit monitoring services. The bill exempts entities from notification requirements if the data is unusable, unreadable, or indecipherable. Entities complying with other federal laws that require substantially similar information security procedures or breach notifications are deemed to be in compliance with the FTC's procedures or the notification requirements of this Act. Enforcement authority is provided to the FTC and states. States may obtain civil penalties for certain violations.

Congressional Research Service summary (Introduced in House), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Secure and Protect Americans' Data Act

Source: Congressional Research Service summary (Introduced in House)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Rep. Schakowsky, Janice D. [D-IL-9] · 8 cosponsors

Cost estimate: No cost estimate published yet.

Cosponsors on this site

Frank Pallone, Jr. (D-NJ), Paul Tonko (D-NY), Peter Welch (D-VT), Robin L. Kelly (D-IL)

Sponsor's campaign money: Rep. Schakowsky, Janice D. [D-IL-9] reported raising $415,385 (2025–2026). Details. Shown for context only; it does not mean any donor supported this bill.

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (4)

Appropriation: Money a legislature sets aside by law for a specific purpose. Government agencies may spend public money only as it has been appropriated.
Bill: A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Rulemaking: The process agencies use to write regulations that carry out laws passed by Congress or a legislature. Usually an agency publishes a proposed rule, takes public comments, then publishes a final rule.
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Introduced in House)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-114hr4187.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/114/hr>

Record fed-us-cong114-hr4187 · catalog fed-us-congress-bills-cong114 · updated 2026-11-15 by psicol fed-bills-cong114