Sec. 4. Data protection standards for credit reporting agencies that use Department of Defense personnel data
193 words·~1 min read·
/bill/115/s/3334/is/section-4·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than one year after the date of the enactment of this Act, the Secretary of Defense shall, in consultation with the Federal Trade Commission, determine whether or not each entity that downloads Military Lender Act bulk data from the Defense Manpower Data Center uses adequate safeguards to protect the downloaded data against breach or other potential misuse. The Secretary shall make the determination using a study of the practices of such entities conducted by the Secretary for purposes of this subsection.
If pursuant to subsection (a), the Secretary determines that the safeguards of an entity described in that subsection are not adequate as described in that subsection, the Secretary shall terminate the access of the entity to bulk data described in that subsection by not later than 30 days after the date of the determination. If access of an entity to bulk data is terminated pursuant to subsection (b), the Secretary may subsequently restore access of the entity to bulk data if the Secretary determines that the entity has taken remedial measures to ensure that any data downloaded from such bulk data is adequately protected against breach or other potential misuse.