Consumer Information Notification Requirement Act
This bill requires federal financial regulators to set forth rules regarding data breaches. Specifically, these rules must require financial institutions, banks, and other specified entities to notify customers of breaches likely to result in identity theft, fraud, or economic loss.
To amend the Gramm-Leach-Bliley Act to provide a national standard for 
 financial institution data security and breach notification on behalf 
               of all consumers, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Consumer Information Notification 
Requirement Act''.

SEC. 2. BREACH NOTIFICATION STANDARDS.

    Section 501 of the Gramm-Leach-Bliley Act (15 U.S.C. 6801) is 
amended--
            (1) in subsection (b)(3) by striking the period at the end 
        and inserting ``, including through the provision of a breach 
        notice in the event of unauthorized access that is reasonably 
        likely to result in identity theft, fraud, or economic loss.''; 
        and
            (2) by adding at the end the following:
    ``(c) Standards With Respect to Breach Notification.--Subject to 
section 504(a)(2) and sections 505(b) and 505(c), within 6 months after 
the date of enactment of this subsection, each agency or authority 
required to establish standards described under subsection (b)(3) with 
respect to the provision of a breach notice shall ensure that such 
standards are in compliance with subsection (b).''.

SEC. 3. PREEMPTION WITH RESPECT TO FINANCIAL INSTITUTION SAFEGUARDS.

    Section 507 of the Gramm-Leach-Bliley Act (15 U.S.C. 6807) is 
amended to read as follows:

``SEC. 507. RELATION TO STATE LAWS.

    ``This subtitle preempts any law, rule, regulation, requirement, 
standard, or other provision having the force and effect of law of any 
State, or political subdivision of a State, with respect to a financial 
institution (other than a financial institution engaged in providing 
insurance) or affiliate thereof securing personal information from 
unauthorized access or acquisition, including notification of 
unauthorized access or acquisition of data.''.
                                 <all>
Consumer Information Notification Requirement Act
To amend the Gramm-Leach-Bliley Act to provide a national standard for financial institution data security and breach notification on behalf of all consumers, and for other purposes.
Consumer Information Notification Requirement Act
Rep. Luetkemeyer, Blaine