Identity Theft Protection Act

[AI summary unavailable — showing source text] Identity Theft Protection Act - Requires: (1) a covered entity (i.e., any commercial entity or charitable, educational, or nonprofit organization that acquires, maintains, or utilizes sensitive personal information) to take reasonable steps to protect against security breaches and to prevent unauthorized access to sensitive personal information that the entity sells, maintains, collects, or transfers; and (2) the Federal Trade Commission (FTC) to promulgate regulations to implement that requirement. Requires a covered entity, upon discovering a breach of security, to: (1) report the breach to the FTC or other appropriate federal regulator and notify all consumer reporting agencies specified in the Fair Credit Reporting Act if it determines that the breach affects the sensitive personal information of 1,000 or more individuals; and (2) notify individuals if it determines that the breach has resulted in, or poses a reasonable risk of, theft of their identity. Authorizes a consumer to place a security freeze on his or her credit report by making a request to a consumer credit reporting agency in writing or by telephone, subject to specified requirements. Directs that any violation of …