Defense Against Digital Theft Act

To provide for identity protection coverage and other services for individuals exposed to the OPM security breaches, and for other purposes. 1. Short title This Act may be cited as the Defense Against Digital Theft Act 2. Identity protection coverage for individuals exposed to OPM security breaches (a) Identity Protection Coverage The Director of the Office of Personnel Management shall provide to each affected individual complimentary identity protection coverage that— (1) is not less comprehensive than the complimentary identify protection coverage that the Director provided to affected individuals before the date of enactment of this Act; (2) is effective for a period of not less than 10 years; and (3) includes not less than $5,000,000 in identity theft insurance. (b) Limitation on use of credit score The Director shall issue such regulations as are necessary to provide that no affected individual whose credit score was negatively impacted as a result of a data breach described under paragraph (1) or (2) of subsection (d) may be disqualified from eligibility for access to classified information pursuant to Executive Order 12968 ( 50 U.S.C. 3161 (c) Task force (1) Establishment Not later than 180 days after the date of enactment of this Act, the Director shall establish a task force to develop specific recommendations on how to mitigate any adverse consequences relating to the OPM data breaches described under paragraphs (1) and (2) of subsection (d) to affected individuals and the employing entities, or former employing entities, of such individuals. (2) Membership The members of the task force established under paragraph (1) shall include— (A) the head of any agency that employs an affected individual; (B) information technology security experts; and (C) representatives of organizations representing— (i) collective bargaining organizations; (ii) veteran service organizations; (iii) Federal employees; (iv) former Federal employees; and (v) military associations. (d) Definition In this section, the term affected individual (1) the data breach of personnel records of current and former Federal employees, at a network maintained by the Department of the Interior, that was announced by the Office of Personnel Management on June 4, 2015; or (2) the data breach of systems of the Office of Personnel Management containing information related to the background investigations of current, former, and prospective Federal employees, and of other individuals.

Summary: Defense Against Digital Theft Act This bill directs the Office of Personnel Management (OPM) to provide individuals who have been affected by a breach of personnel records in a database network maintained by the Department of the Interior or OPM with complimentary identity protection coverage that: (1) is not less comprehensive than the complimentary identity protection coverage provided before the enactment date of this Act, (2) is effective for a period of not less than 10 years, and (3) includes not less than $5 million in identity theft insurance. The bill requires OPM to: (1) issue regulations to ensure that affected individuals whose credit scores have been negatively impacted by a data breach are not disqualified from access to classified information solely on the basis of a compromised credit score, and (2) establish a task force to develop specific recommendations on mitigating adverse consequences relating to data breaches.