The House has passed a bill that would introduce national rules surrounding the need to notify potential victims of identity theft following data breaches.
According to the bill, companies that possess personal data will be required to notify any U.S. citizens and residents along with the FTC if a data breach occurs that may have compromised personal data.
Notification would be required within sixty days of discovering the issue. However, data that is encrypted would be considered secure under the law and would not require notification. A national law would trump and local or state regulations.
The bill passed earlier this week and was introduced in April by Rep. Bobby Rush. The bill is presently in the Senate.