By Gautham Nagesh - 08/06/10 04:14 PM EDT
Under the bill, organizations would have to notify every individual impacted by a data breach within 60 days. Affected consumers would be entitled to free consumer credit reports or credit monitoring services for two years and would be given instructions on how to request those services.
“An estimated 9 million Americans have their identities stolen each year, resulting in destroyed credit ratings and legal troubles,” Rockefeller said. “Companies and other entities who collect and maintain data on individuals should keep this information safe and notify consumers if it is compromised. That is what this common sense bill requires.”
Sens. Tom Carper (D-Del.) and Bob Bennett (R-Utah) re-introduced a bill last month that would require companies to notify consumers if their personal information has been breached. The pair have introduced similar legislation in the past but believe the current focus on cybersecurity and the Obama administration's awareness of the growing problem of identity theft make its passage more likely.