BNA's Web Watch -Data Security

Federal Legislation - Pending
Dianne Feinstein - Notification of Risk to Personal Data Act, - (S. 115)
S.116, Privacy Act of 2005
Sen. Dianne Feinstein (D-Calif.) has introduced a measure (S. 29)
Markey has also introduced the "Information Protection and Security Act" (H.R. 1080)

Congressional Hearings

House Financial Services Committee

Senate Banking, Housing, and Urban Affairs Committee
Identity Theft: Recent Developments Involving the Security of Sensitive Consumer Information (March 15, 2005)

Witness Testimony
Panel 1
Mr. Don McGuffey , Vice President, ChoicePoint Services, Inc.
Mr. Evan Hendricks , Editor, Privacy Times
Ms. Barbara J. Desoer , Executive Vice President, Global Technology, Service and Fulfillment Executive, Bank of America Corporate Center

Senate Banking, Housing, and Urban Affairs Committee
Identity Theft: Recent Developments Involving the Security of Sensitive Consumer Information (March 10, 2005)

Member Statements
Senator Richard Shelby
Senator Jon S. Corzine
Senator Elizabeth Dole

Witness Testimony
Panel 1
Honorable Patrick J. Leahy (D-VT), Unites States Senator

Panel 2
Honorable Deborah Platt Majoras, Chairman, Federal Trade Commission
Mr. Larry Johnson , Special Agent in Charge - Criminal Investigative Division, United States Secret Service Ms. Amy S. Friend, Assistant Chief Counsel, Office of the Comptroller of the Currency

House Congressional Hearings
House Energy and Commerce Subcommittee on Commerce, Trade and Consumer Protection.
Committee Hearing - Protecting Consumer’s Data: Policy Issues Raised by Choice Point (March 15, 2005)

Witness Testimony
Panel 1
The Honorable Deborah Platt Majoras - Chairman - Federal Trade Commission

Panel 2
Mr. Kurt P. Sanford - President and CEO, U.S. Corporate and Federal Government Markets - LexisNexis

Mr. Derek Smith - Chairman and Chief Executive Officer ChoicePoint, Inc.

Panel 3
Mr. Joseph Ansanelli - Chief Executive Officer Vontu, Inc.

Mr. Marc Rotenberg - Executive Director Electronic Privacy Information Center

Department of Treasury - Office of Comptroller of the Currency
Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice

State Congressional Investigations
California Senate Banking, Finance and Insurance Committee
Testimony of Chris Jay Hoofnagle - Director, Electronic Privacy Information Center West Coast Office
After the Breach: How secure and accurate is consumer information held by ChoicePoint and other data aggregators? Before the California Senate Banking, Finance and Insurance Committee Room 3191, State Capitol Wednesday, March 30, 2005 VERSION CORRECTED APRIL 5, 2005

Choicepoint's testimony
Don McGuffey Vice President Data Acquisition and Strategy - (March 30, 2005)

State Legislation

National Conference of State Legislatures
2005 Breach of Information Legislation

List of States and Territories Affected by ChoicePoint Info Breach - The Associated Press
Published: Feb 21, 2005

California
(S.B. 1386) requiring that citizens be notified in certain situations when their personal information is breached.

Connecticut
Legislative Panel Passes ID Theft, Security Breach Notification Bill S. 650

Georgia
(S.B. 230) that requires information brokers to inform Georgia residents when their personal information has been breached

North Carolina
North Carolina's pending Identity Theft Protection Act, including full text, is available at

North Dakota
North Dakota House Unanimously Passes Bill to Require Security Breach Notifications (S.B. 2251)

Ohio
The two measures—H.B. 104 and S.B. 89—would require state agencies, individuals and businesses to contact anyone whose unencrypted personal

Washington
Washington Senate Approves Spyware, Security Breach Notification, Phishing Bills
SEATTLE—The Senate March 8 approved legislation (S.B. 6043)

Nongovernment organizations

EPIC

EPIC letter calling upon Choicepoint to give victim access to their dossiers, February 18, 2005.
EPIC update to the complaint to the Federal Trade Commission, February 1, 2005
Choicepoint Letter Disputing EPIC's Claims, December 29, 2004
Initial Complaint to the Federal Trade Commission, December 16, 2004

A Model Regime of Privacy Protection (Version 1.1)
DANIEL J. SOLOVE
George Washington University Law School
CHRIS JAY HOOFNAGLE
Electronic Privacy Information Center West Coast Office March 8, 2005
(Abstract only)

Information Technology Association of America
ITAA Calls for More Law Enforcement Resources, Inter-Industry Action to Fight Data Breaches (March 23, 2005)

International Association of Privacy Professionals

Privacy Rights Clearinghouse
Online Data Brokers: How Consumers Can Opt Out of Directory Assistance and Non-public Information (Updated March 2005)

Criminal Identity Theft in California: Seeking Solutions to the “Worst Case Scenario”

The Wharton School
Knowledge@Wharton
Do You Know Where Your Identity Is? Personal Data Theft Eludes Easy Remedies (April 2005)