Cyber Privacy Fortification Act of 2017

[AI summary unavailable — showing source text] Cyber Privacy Fortification Act of 2017 This bill amends the federal criminal code to provide criminal penalties for intentional failures to provide required notices regarding security breaches of computerized data that there is reason to believe resulted in improper access to specified sensitive personally identifiable information that is electronic or digital. A person who owns or possesses data in electronic form containing a means of identification, and who has knowledge of a major security breach of the system containing such data, must notify the U.S. Secret Service or the Federal Bureau of Investigation. A "major security breach" involves: (1) a means of identification pertaining to at least 10,000 individuals that is reasonably believed to have been acquired, (2) databases owned by the federal government, or (3) a means of identification of federal employees or contractors involved in national security matters or law enforcement. The Department of Justice and state attorneys general may bring civil actions and obtain injunctive relief for violations of federal laws relating to data security. Federal agencies must prepare and make available to the public privacy impact asses…