(a)
Definitions— In this section:
(1)
Consumer reporting agency— The term consumer reporting agency has the meaning given the term in section 603 of the Fair Credit Reporting Act (
15 U.S.C. 1681a).
(2)
Small business concern— The term small business concern has the meaning given the term in section 3 of the Small Business Act (
15 U.S.C. 632).
(b)
Requirements— A consumer reporting agency—
(1)
shall disclose to a small business concern within 30 days if their nonpublic business data has been breached; and
(2)
may not charge a small business concern for their credit report within 180 days following a breach.
(c)
No preemption— Nothing in this Act shall preempt any State law with respect to consumer reporting agencies.