Introduced
by
To make it a misdemeanor for a business or other person to collect personal identifying information in the regular course of business and store it in a computerized database in an unencrypted form. Also, to require a person or agency that owns or licenses data included in a database and discovers or gets notice of a security breach to notify each financial institution that issued a credit or debit card compromised by the breach, and to each individual who is likely to suffer loss or injury. The bill amends a 2010 identity theft law.
Referred to the Committee on Banking and Financial Institutions