FISMA amendment could redefine personally identifiable info

Federal Agency Data Breach Protection Act

A new Senate bill could redefine how agencies report and handle breaches of sensitive information.

Sen. Norm Coleman (R-Minn.) introduced the Federal Agency Data Breach Protection Act June 7. An amendment to the Federal Information Security Management Act, the bill would give more policy-defining power to the Office of Management and Budget and broaden the definition of personally identifiable information.

Coleman’s bill is a companion bill to Rep. Tom Davis’ (R-Va.) amendment, introduced in early May.

Coleman wants OMB to establish specific policies, procedures and standards for agencies to follow in the event of a data breach. Also, the bill would broaden the powers of agency chief information and chief human capital officers to enforce compliance and assess damage to federal personal property, respectively.

The bill also would broaden the definition of personally identifiable information to include education; criminal, medical and employment history; and financial transactions. Sensitive information would also include name, Social Security number, birth date and place, mother’s maiden name, biometric records and “any other personal information that is linked or linkable to the individual,” according to the bill.

FISMA defines the information security requirements of government entities. It requires agencies to develop  risk-based information technology security programs, which are graded on an annual basis.

Coleman said he penned the bill as a response to the numerous data breaches at federal agencies such as the Veterans Affairs, Commerce and Agriculture departments, and the Transportation Security Administration and Internal Revenue Service.

“We must ensure that federal agencies are taking the necessary preventative security measures to protect our citizens’ personal information,” said Coleman, in a statement.

Featured

  • Cybersecurity
    malware detection (Alexander Yakimov/Shutterstock.com)

    Microsoft targets copycat influence websites

    Microsoft went to court to take down websites it believes to be part of a foreign intelligence operation targeting conservative think tanks and the U.S. Senate.

  • Cybersecurity
    secure network

    FAA explores shifting its network to FISMA high

    The Federal Aviation Administration is exploring an upgrade to the information security categorization of IT systems as part of air traffic control modernization.

  • Cybersecurity
    Shutterstock photo id 669226093 By Gorodenkoff

    The disinformation game

    The federal government is poised to bring new tools and strategies to bear in the fight against foreign-backed online disinformation campaigns, but how and when they choose to act could have ramifications on the U.S. political ecosystem.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.