2017 Senate Bill 633

Criminalize failure to report database breach

Introduced in the Senate

Oct. 17, 2017

Introduced by Sen. Darwin Booher (R-35)

To make it a misdemeanor for a business or other person to collect personal identifying information in the regular course of business and store it in a computerized database in an unencrypted form. Also, to require a person or agency that owns or licenses data included in a database and discovers or gets notice of a security breach to notify each financial institution that issued a credit or debit card compromised by the breach, and to each individual who is likely to suffer loss or injury. The bill amends a <a href="http://www.michiganvotes.org/2009-SB-223">2010 identity theft law</a>.

Referred to the Committee on Banking and Financial Institutions