Section 1 Short title
This Act may be cited as the “Defense Against Digital Theft Act”.
Defense Against Digital Theft Act
A BILL
To provide for identity protection coverage and other services for individuals exposed to the OPM security breaches, and for other purposes.
Sec. 2 Identity protection coverage for individuals exposed to OPM security breaches
Identity Protection Coverage— The Director of the Office of Personnel Management shall provide to each affected individual complimentary identity protection coverage that—
is not less comprehensive than the complimentary identify protection coverage that the Director provided to affected individuals before the date of enactment of this Act;
is effective for a period of not less than 10 years; and
includes not less than $5,000,000 in identity theft insurance.
Limitation on use of credit score— The Director shall issue such regulations as are necessary to provide that no affected individual whose credit score was negatively impacted as a result of a data breach described under paragraph (1) or (2) of subsection (d) may be disqualified from eligibility for access to classified information pursuant to Executive Order 12968 (50 U.S.C. 3161 note), or any other similar authority, solely on the basis of a credit score of such individual.
Task force—
Establishment— Not later than 180 days after the date of enactment of this Act, the Director shall establish a task force to develop specific recommendations on how to mitigate any adverse consequences relating to the OPM data breaches described under paragraphs (1) and (2) of subsection (d) to affected individuals and the employing entities, or former employing entities, of such individuals.
Membership— The members of the task force established under paragraph (1) shall include—
the head of any agency that employs an affected individual;
information technology security experts; and
representatives of organizations representing—
collective bargaining organizations;
veteran service organizations;
Federal employees;
former Federal employees; and
military associations.
Definition— In this section, the term “affected individual” means any individual whose personally identifiable information was compromised during—
the data breach of personnel records of current and former Federal employees, at a network maintained by the Department of the Interior, that was announced by the Office of Personnel Management on June 4, 2015; or
the data breach of systems of the Office of Personnel Management containing information related to the background investigations of current, former, and prospective Federal employees, and of other individuals.