SB 307 Identity theft; notice of database breach.
W. Roscoe Reynolds | all patrons    ...    notes
| add to my profiles

Summary as passed: (all summaries)
Database breach notification. Requires an individual or entity that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach to the Office of the Attorney General and any affected resident of the Commonwealth whose unencrypted and unredacted personal information was, or is reasonably believed to have been accessed and acquired by an unauthorized person. A breach is defined as the unauthorized access and acquisition of unencrypted and unredacted computerized data that compromises the security or confidentiality of personal information maintained by an individual or entity as part of a database of personal information regarding multiple individuals and that causes, or the individual or entity reasonably believes has caused, or will cause, identity theft or other fraud to any resident of the Commonwealth. Violations by a state-charted or licensed financial institution shall be enforceable exclusively by the financial institution's primary state regulator. Violations by an entity regulated by the State Corporation Commission shall be enforceable exclusively by the Commission. All other violations shall be enforced by the Office of the Attorney General, which may impose a civil penalty not to exceed $150,000 per breach or series of breaches of a similar nature that are discovered in a single investigation. The bill specifies that its provisions do not limit an individual from recovering direct economic damages. This bill is identical to HB 1469.

Full text:
01/08/08  Senate: Prefiled and ordered printed; offered 01/09/08 085678810  pdf | impact statement
02/07/08  Senate: Committee substitute printed 081553316-S1  pdf | impact statement
02/26/08  House: Committee substitute printed 085712316-H1  pdf | impact statement
03/05/08  Senate: Bill text as passed Senate and House (SB307ER)  pdf | impact statement
03/17/08  Governor: Acts of Assembly Chapter text (CHAP0566)  pdf

01/08/08  Senate: Prefiled and ordered printed; offered 01/09/08 085678810
01/08/08  Senate: Referred to Committee for Courts of Justice
01/10/08  Senate: Assigned Courts sub: Criminal
02/06/08  Senate: Reported from Courts of Justice with substitute (15-Y 0-N)
02/07/08  Senate: Committee substitute printed 081553316-S1
02/08/08  Senate: Constitutional reading dispensed (40-Y 0-N)
02/11/08  Senate: Read second time
02/11/08  Senate: Reading of substitute waived
02/11/08  Senate: Committee substitute agreed to 081553316-S1
02/11/08  Senate: Engrossed by Senate - committee substitute SB307S1
02/11/08  Senate: Constitutional reading dispensed (40-Y 0-N)
02/11/08  Senate: Passed Senate (40-Y 0-N)
02/11/08  Senate: Communicated to House
02/12/08  House: Placed on Calendar
02/12/08  House: Read first time
02/12/08  House: Referred to Committee on Science and Technology
02/25/08  House: Reported from Science and Technology with substitute (18-Y 0-N)
02/26/08  House: Committee substitute printed 085712316-H1
02/27/08  House: Read second time
02/28/08  House: Passed by for the day
02/29/08  House: Read third time
02/29/08  House: Committee substitute agreed to 085712316-H1
02/29/08  House: Engrossed by House - committee substitute SB307H1
02/29/08  House: Passed House with substitute BLOCK VOTE (98-Y 0-N)
02/29/08  House: VOTE: BLOCK VOTE PASSAGE (98-Y 0-N)
03/04/08  Senate: House substitute agreed to by Senate (40-Y 0-N)
03/05/08  Senate: Bill text as passed Senate and House (SB307ER)
03/05/08  Senate: Enrolled
03/05/08  House: Signed by Speaker
03/06/08  Senate: Signed by President
03/11/08  Governor: Approved by Governor-Chapter 566 (effective 7/1/08)
03/17/08  Governor: Acts of Assembly Chapter text (CHAP0566)