Tracking Virginia’s General Assembly
since 2007.
HB1469: Identity theft; notice of database breach.
Chief Patron
Del.
Kathy Byron (R-22)
Kathy Byron
(R-22)
Lynchburg, VA
Served: 1998–
Progress
| Introduced | |
| Passed Committee | |
| Passed House | |
| Passed Senate | |
| Signed by Governor | |
| Became Law |
Status
04/02/2008: signed by governor
Summary
Database breach notification. Requires an individual or entity that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach to any resident of the Commonwealth whose unencrypted and unredacted personal information was, or is reasonably believed to have been accessed and acquired by an unauthorized person. A breach is defined as the unauthorized access and acquisition of unencrypted and unredacted computerized data that compromises the security or confidentiality of personal information maintained by an individual or entity as part of a database of personal information regarding multiple individuals and that causes, or the individual or entity reasonably believes has caused, or will cause, identity theft or other fraud to any resident of the Commonwealth. Violations by a state-charted or licensed financial institution shall be enforceable exclusively by the financial institution's primary state regulator. All other violations shall be enforced by the Office of the Attorney General, which may obtain either actual damages or a civil penalty not to exceed $150,000 per breach or series of breaches of a similar nature that are discovered in a single investigation.
View Full Text »Video
Votes were cast on this bill on the following dates for which Richmond Sunlight has video: 01/24/2008, 01/24/2008, 01/29/2008, 01/29/2008, 02/05/2008, 02/06/2008, 02/06/2008, 02/07/2008, 02/07/2008, 02/08/2008, 02/08/2008, 02/11/2008, 02/29/2008, 03/07/2008 and 03/07/2008.
Poll Results
No Richmond Sunlight visitors voted on this bill while voting was open.
Tags
Bill Text
Related Bills
Status: In Committee
Status: signed by governor
Status: Failed to Pass in Committee
Status: in subcommittee
Status: in subcommittee

Comments
Requires an individual or entity that owns or licenses computerized data that includes personal information to disclose any breach of the security of the system following discovery or notification of the breach to any resident of the Commonwealth whose unencrypted and unredacted personal information was, or is reasonably believed to have been accessed and acquired by an unauthorized person.