S. 1027: Data Breach Notification and Punishing Cyber Criminals Act of 2015

114th Congress · introduced 2015-04-21 · Commerce · Latest: Read twice and referred to the Committee on Commerce, Science, and Transportation. (Sponsor introductory remarks on measure: CR S2304)

federal

Follow this bill, step by step

Where it came from: introduced 2015-04-21 · official record
Who proposed it: Sen. Kirk, Mark Steven [R-IL] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Read twice and referred to the Committee on Commerce, Science, and Transportation. (Sponsor introductory remarks on measure: CR S2304) Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Data Breach Notification and Punishing Cyber Criminals Act of 2015

Plain summary

Data Breach Notification and Punishing Cyber Criminals Act of 2015 Requires certain commercial entities that acquire, maintain, store, or utilize individuals' nonpublic personal information to protect and secure any such data that is held unencrypted in electronic form. Directs entities that own or license such data, following discovery of a security breach, to notify each individual U.S. citizen or resident: (1) whose personal information is reasonably believed to have been accessed and acquired by an unauthorized person; or (2) who may be at risk of identity theft, fraud, actual financial harm, or other unlawful conduct. Requires the Department of Homeland Security (DHS) to designate a federal entity to receive information from commercial entities regarding breaches, incidents, threats, and vulnerabilities. Requires the DHS-designated entity to provide such information to: (1) the U.S. Secret Service and the Federal Bureau of Investigation; (2) the Federal Trade Commission (FTC) for civil law enforcement purposes; and (3) other federal agencies for law enforcement, national security, or data security purposes. Directs entities to notify the DHS-designated entity if a breach involves: (1) the personal information of more than 1,000 individuals, (2) a data system containing the personal information of more than 250,000 individuals, (3) federal databases, or (4) the personal information of primarily federal employees and contractors involved in national security or law enforcement. Provides alternative compliance procedures for: (1) third parties that maintain personal data in electronic form on behalf of another entity, and (2) certain electronic data service providers. Sets forth FTC enforcement authority. Exempts from the requirements of this Act: (1) financial institutions subject to the Gramm-Leach-Bliley Act, and (2) entities subject to health information privacy regulations. Provides for the requirements of this Act to apply to certain entities in place of security practices and notification standards currently enforced by the Federal Communications Commission. Increases maximum fines or terms of imprisonment for certain cyber-related criminal offenses involving identity theft or fraud. Directs the Department of State to consult with governments of countries in which international cyber criminals are physically present (if the countries do not have a mutual legal assistance or an extradition treaty with the United States) to determine what actions those governments have taken to prosecute and prevent cyber or intellectual property crimes against U.S. interests or citizens. Preempts certain state data security laws.

Congressional Research Service summary (Introduced in Senate), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Data Breach Notification and Punishing Cyber Criminals Act of 2015

Source: Congressional Research Service summary (Introduced in Senate)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Sen. Kirk, Mark Steven [R-IL] · 1 cosponsors

Cost estimate: No cost estimate published yet.

Cosponsors on this site

Kirsten E. Gillibrand (D-NY)

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (2)

Rulemaking: The process agencies use to write regulations that carry out laws passed by Congress or a legislature. Usually an agency publishes a proposed rule, takes public comments, then publishes a final rule.
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Introduced in Senate)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-114s1027.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/114/s>

Record fed-us-cong114-s1027 · catalog fed-us-congress-bills-cong114 · updated 2026-11-15 by psicol fed-bills-cong114