request from an appropriate law enforce-
ment agency indicating that such a writ-
ten request will be provided within 2 busi-
ness days— 
‘‘(A) the consumer reporter shall 
delay, or in the case of a foreign law 
enforcement agency may delay, pro-
viding such notice until— 
‘‘(i) the law enforcement agen-
cy informs the consumer reporter 
that such notice will no longer im-
pede the investigation; or 
‘‘(ii) 
the 
law 
enforcement 
agency fails to— 
‘‘(I) provide within 10 days 
a written request to continue 
such delay for a specific time 
that is approved by a court of 
competent jurisdiction; or 
‘‘(II) in the case of an oral 
request for a delay, provide a 
written request within 2 busi-
ness days, and if such delay is 
requested for more than 10 ad-
ditional days, such request 
VerDate Aug 31 2005 
02:49 Jun 03, 2006
Jkt 049200
PO 00000
Frm 00089
Fmt 6652
Sfmt 6204
E:\BILLS\H4127.RH
H4127
bajohnson on PROD1PC72 with BILLS
must be approved by a court of 
competent jurisdiction; and 
‘‘(B) the consumer reporter may— 
‘‘(i) conduct appropriate secu-
rity measures that are not incon-
sistent with such request; and 
‘‘(ii) contact such law enforce-
ment agency to determine whether 
any such inconsistency would be 
created by such measures. 
‘‘(2) 
HOLD
HARMLESS
PROVISION.—A 
consumer reporter shall not be liable for 
any fraud mitigation costs or for any 
losses that would not have occurred but 
for notice to or the provision of sensitive 
financial personal information to law en-
forcement, or the delay provided for under 
this subsection, except that— 
‘‘(A) nothing in this subparagraph 
shall be construed as creating any in-
ference with respect to the establish-
ment or existence of any such liability; 
and 
‘‘(B) this subparagraph shall not 
apply if the costs or losses would not 
VerDate Aug 31 2005 
02:49 Jun 03, 2006
Jkt 049200
PO 00000
Frm 00090
Fmt 6652
Sfmt 6204
E:\BILLS\H4127.RH
H4127
bajohnson on PROD1PC72 with BILLS
have occurred had the consumer re-
porter undertaken reasonable system 
restoration requirements to the extent 
required under subsection (d), or 
other similar provision of law, except 
to the extent that such system restora-
tion was delayed at the request of law 
enforcement. 
‘‘(3) CONTENT OF CONSUMER NOTICE.— 
Any notice required to be provided by a 
consumer reporter to a consumer under 
subsection (f)(1), and any notice required 
in accordance with subsection (e)(2)(A), 
shall be provided in a standardized trans-
mission or exclusively colored envelope, 
and shall include the following in a clear 
and conspicuous manner: 
‘‘(A) An appropriate heading or 
notice title. 
‘‘(B) A description of the nature 
and types of information and ac-
counts as appropriate that were, or 
are reasonably believed to have been, 
subject to the breach of data security. 
VerDate Aug 31 2005 
02:49 Jun 03, 2006
Jkt 049200
PO 00000
Frm 00091
Fmt 6652
Sfmt 6204
E:\BILLS\H4127.RH
H4127
bajohnson on PROD1PC72 with BILLS
‘‘(C) A statement identifying the 
party responsible, if known, that suf-
fered the breach, including an expla-
nation of the relationship of such 
party to the consumer. 
‘‘(D) If known, the date, or the best 
reasonable approximation of the pe-
riod of time, on or within which sen-
sitive financial personal information 
related to the consumer was, or is rea-
sonably believed to have been, subject 
to a breach. 
‘‘(E) A general description of the 
actions taken by the consumer re-
porter to restore the security and con-
fidentiality of the breached informa-
tion. 
‘‘(F) A telephone number by which 
a consumer to whom the breached in-
formation relates may call free of 
charge to obtain additional informa-
tion about how to respond to the 
breach. 
‘‘(G) With respect to notices involv-
ing sensitive financial identity infor-
VerDate Aug 31 2005 
02:49 Jun 03, 2006
Jkt 049200
PO 00000
Frm 00092
Fmt 6652
Sfmt 6204
E:\BILLS\H4127.RH
H4127
bajohnson on PROD1PC72 with BILLS