Protecting Investors’ Personally Identifiable Information Act

Bill: 118-hr-4551
Sponsor: full_name: Rep. Loudermilk, Barry [R-GA-11]
Introduced: 2023-07-11
Policy area: Finance and Financial Sector
Subjects: Financial services and investments

Government information and archives

Government studies and investigations

Right of privacy

Securities
Latest action: action_date: 2024-11-01
text: Placed on the Union Calendar, Calendar No. 611.

Summaries:
action_date: 2023-07-11
action_desc: Introduced in House
text: <p><strong>Protecting Investors' Personally Identifiable Information Act </strong></p> <p>This bill prohibits the Securities and Exchange Commission (SEC) from requiring a national securities exchange, association, or a member of either to provide a market participant's personally identifiable information to satisfy the reporting requirements of the Consolidated Audit Trail (i.e., data used to track market activity). However, this information must be provided to the SEC upon request if the information is related to a securities investigation. The SEC must destroy the information not later than one day after the conclusion of the matter for which this information was required. </p>

tv_txt: IB Union Calendar No. 611 118th CONGRESS 2d Session H. R. 4551 [Report No. 118–724] IN THE HOUSE OF REPRESENTATIVES July 11, 2023 Mr. Loudermilk (for himself, Mr. Hill , Mr. Huizenga , Mrs. Wagner , Mr. Meuser , Mrs. Kim of California , and Mr. Nunn of Iowa ) introduced the following bill; which was referred to the Committee on Financial Services November 1, 2024 Additional sponsors: Mr. Self , Mr. Norman , Mr. Lawler , Mr. Flood , Mr. Fitzgerald , Mr. Sessions , Mr. Mooney , and Mr. Emmer November 1, 2024 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed Strike out all after the enacting clause and insert the part printed in italic For text of introduced bill, see copy of bill as introduced on July 11, 2023 A BILL To prohibit the Securities and Exchange Commission from requiring that personally identifiable information be collected under consolidated audit trail reporting requirements, and for other purposes.

1. Short title This Act may be cited as the Protecting Investors’ Personally Identifiable Information Act . 2. Personally identifiable information excluded from consolidated audit trail reporting requirements (a) In general The Securities and Exchange Commission may not require a national securities exchange, a national securities association, or a member of such an exchange or association to provide personally identifiable information with respect to a market participant to meet the requirements relating to an order or a reportable event under section 242.613(c)(7) of title 17, Code of Federal Regulations (or successor regulations). (b) Definition of personally identifiable information In this section, the term personally identifiable information — (1) means information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other personal or identifying information that is linked or linkable to a specific individual, including an individual’s name, address, date or year of birth, Social Security number, telephone number, email, and IP-address; and (2) does not include a CAT-Order-ID or CAT-Reporter-ID, as such terms are defined in section 242.613(j) of title 17, Code of Federal Regulations (or successor regulations).

November 1, 2024 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

tv_txt: I 118th CONGRESS 1st Session H. R. 4551 IN THE HOUSE OF REPRESENTATIVES July 11, 2023 Mr. Loudermilk (for himself, Mr. Hill , Mr. Huizenga , Mrs. Wagner , Mr. Meuser , Mrs. Kim of California , and Mr. Nunn of Iowa ) introduced the following bill; which was referred to the Committee on Financial Services A BILL To prohibit the Securities and Exchange Commission from requiring that personally identifiable information be collected under consolidated audit trail reporting requirements, and for other purposes.

1. Short title This Act may be cited as the Protecting Investors’ Personally Identifiable Information Act . 2. Personally identifiable information excluded from consolidated audit trail reporting requirements (a) In general Except as provided in subsection (b), the Securities and Exchange Commission may not require a national securities exchange, a national securities association, or a member of such an exchange or association to provide personally identifiable information with respect to a market participant to meet the requirements relating to an order or a reportable event under section 242.613(c)(7) of title 17, Code of Federal Regulations (or successor regulations). (b) Exception The Securities and Exchange Commission may only require a national securities exchange, a national securities association, or a member of such an exchange or association to provide personally identifiable information with respect to a market participant if— (1) the Commission makes a request for such information; and (2) the information is related to an investigation of a violation of the Federal securities laws, a regulation issued thereunder, or an enforcement action with respect to such a violation. (c) Request for extension At the request of the Securities and Exchange Commission under subsection (b), a national securities exchange, a national securities association, or a member of such an exchange or association shall provide the personally identifiable information subject to such request not later than 24 hours after receiving such request, unless, at the request of such national securities exchange, a national securities association, or a member of such an exchange or association, the Securities and Exchange Commission provides a reasonable extension. (d) Destruction of personally identifiable information In the case of personally identifiable information provided to the Securities and Exchange Commission under subsection (b), the Securities and Exchange Commission shall destroy such information not later than 1 day after the investigation or other matter for which such information was required is concluded. (e) Definition of personally identifiable information In this section, the term personally identifiable information — (1) means information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other personal or identifying information that is linked or linkable to a specific individual, including an individual’s name, address, date or year of birth, Social Security number, telephone number, email, and IP-address; and (2) does not include a CAT-Order-ID or CAT-Reporter-ID, as such terms are defined in section 242.613(j) of title 17, Code of Federal Regulations (or successor regulations).