Code · BILL · 115th Congress · S. 2187 (Introduced in Senate) — To establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis... · Sec. 111

Sec. 111. Security

122 words·~1 min read·/bill/115/s/2187/is/section-111

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Not later than 180 days after the date of enactment of this Act, the Commission shall initiate a rulemaking proceeding to require each covered entity to carry out security measures to protect the covered information it collects and maintains. The requirements prescribed under subsection

(a)shall provide for security measures that are proportional to the size, type, nature, and sensitivity of the covered information a covered entity collects. The requirements prescribed under subsection

(a)shall be consistent with guidance provided by the Commission and recognized industry practices for safety and security on the day before the date of enactment of this Act. In a rule prescribed under subsection (a), the Commission may not require a specific technological means of meeting a requirement.