I 
114TH CONGRESS 
1ST SESSION H. R. 3360 
To provide for identity protection coverage and other services for individuals 
exposed to the OPM security breaches, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
JULY 29, 2015 
Mr. KILMER (for himself and Mr. RIGELL) introduced the following bill; which 
was referred to the Committee on Oversight and Government Reform 
A BILL 
To provide for identity protection coverage and other services 
for individuals exposed to the OPM security breaches, 
and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Defense Against Dig-
ital Theft Act’’. 
SEC. 2. IDENTITY PROTECTION COVERAGE FOR INDIVID-
UALS 
EXPOSED 
TO 
OPM 
SECURITY 
BREACHES. 
(a) IDENTITY PROTECTION COVERAGE.—The Direc-
tor of the Office of Personnel Management shall provide 
VerDate Sep 11 2014 
07:03 Aug 05, 2015
Jkt 049200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H3360.IH
H3360
emcdonald on DSK67QTVN1PROD with BILLS
to each affected individual complimentary identity protec-
tion coverage that— 
(1) is not less comprehensive than the com-
plimentary identify protection coverage that the Di-
rector provided to affected individuals before the 
date of enactment of this Act; 
(2) is effective for a period of not less than 10 
years; and 
(3) includes not less than $5,000,000 in iden-
tity theft insurance. 
(b) LIMITATION ON USE OF CREDIT SCORE.—The 
Director shall issue such regulations as are necessary to 
provide that no affected individual whose credit score was 
negatively impacted as a result of a data breach described 
under paragraph (1) or (2) of subsection (d) may be dis-
qualified from eligibility for access to classified informa-
tion pursuant to Executive Order 12968 (50 U.S.C. 3161 
note), or any other similar authority, solely on the basis 
of a credit score of such individual. 
(c) TASK FORCE.— 
(1) ESTABLISHMENT.—Not later than 180 days 
after the date of enactment of this Act, the Director 
shall establish a task force to develop specific rec-
ommendations on how to mitigate any adverse con-
sequences relating to the OPM data breaches de-
VerDate Sep 11 2014 
07:03 Aug 05, 2015
Jkt 049200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H3360.IH
H3360
emcdonald on DSK67QTVN1PROD with BILLS
scribed under paragraphs (1) and (2) of subsection 
(d) to affected individuals and the employing enti-
ties, or former employing entities, of such individ-
uals. 
(2) MEMBERSHIP.—The members of the task 
force established under paragraph (1) shall in-
clude— 
(A) the head of any agency that employs 
an affected individual; 
(B) information technology security ex-
perts; and 
(C) representatives of organizations rep-
resenting— 
(i) collective bargaining organizations; 
(ii) veteran service organizations; 
(iii) Federal employees; 
(iv) former Federal employees; and 
(v) military associations. 
(d) DEFINITION.—In this section, the term ‘‘affected 
individual’’ means any individual whose personally identi-
fiable information was compromised during— 
(1) the data breach of personnel records of cur-
rent and former Federal employees, at a network 
maintained by the Department of the Interior, that 
VerDate Sep 11 2014 
07:03 Aug 05, 2015
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H3360.IH
H3360
emcdonald on DSK67QTVN1PROD with BILLS
was announced by the Office of Personnel Manage-
ment on June 4, 2015; or 
(2) the data breach of systems of the Office of 
Personnel Management containing information re-
lated to the background investigations of current, 
former, and prospective Federal employees, and of 
other individuals. 
Æ 
VerDate Sep 11 2014 
07:03 Aug 05, 2015
Jkt 049200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H3360.IH
H3360
emcdonald on DSK67QTVN1PROD with BILLS