Since no one has answered your question, maybe I can help you get
started. This (very general) information comes off of Consumer
Financial Services Law Report, Feb. 23, 2005.
Sen. Dianne Feinstein has proposed a three part legislative package
based on California's Database Security Law, Section 1798 of the
California Civil Code, comprising:
1. The Privacy Act - setting out a national standard of privacy
protection and requiring financial services companies to "opt-in"
before their information is shared.
2. The Social Security Number Misuse Prevention Act - regulating how
government agencies and private companies use Social Security numbers.
3. The Notification of Risk to Personal Data Act - requiring
government agencies and private companies to notify individuals when
their information has been compromised.
The California database law also requires companies to notify law
enforcement and immediately restore the integrity of the data, among
other things. The notification requirement can be allayed if law
enforcement authorities believe immediate compliance will jeopardize
an investigation. You will need to search thomas.loc.gov under the
current session (109th) for the text of these bills in order to find
out their specific requirements, and you may also want to go to
FindLaw.com or the California legislative website to read the
California statute on which they are based. Unfortunately I don't
have the bill numbers for Feinstein's bills, which would save you some
time. Google it. There may also be proposed amendments, etc., that
you'll need to look out for. Good luck! |