S 5217: RECOVER PII Act

S 5217 in plain English: This bill would amend existing law to require that credit monitoring services provided to individuals whose personal information was exposed in a data breach include at least $5,000,000 in identity theft insurance coverage for the lifetime of the affected individual.

Stated purpose

This bill aims to extend identity protection coverage to people whose personal information was exposed in data breaches at federal agencies, and to allow federal agencies to reimburse employees and contractors for tools that help protect their personal information from privacy risks.

Key points

• Requires identity theft insurance of at least $5,000,000 for individuals affected by data breaches
• Extends credit monitoring protections to cover the lifetime of the affected individual

Arguments supporters make

• People whose government-held data was stolen face identity theft risks for the rest of their lives, so protection that expires leaves them permanently vulnerable through no fault of their own.
• Helping federal workers and contractors use privacy-protecting tools reduces the chance of future breaches, protecting both government systems and ordinary citizens.
• The federal government holds vast amounts of sensitive personal data and has a responsibility to make people whole when it fails to protect that data.

Arguments opponents make

• Lifetime coverage and $5,000,000 insurance per affected individual could cost taxpayers enormous sums, especially as the number of breach victims grows over time with no end date on the obligation.
• Allowing agencies to reimburse employees for personal privacy tools using general salary-and-expenses funds could blur the line between personal expenses and legitimate government costs, and may be difficult to oversee.
• Extending benefits indefinitely without a defined funding mechanism or cost estimate risks creating an open-ended federal liability without proper congressional budget review.

Tradeoffs

Providing stronger and permanent protections for breach victims increases the government's long-term financial obligation to taxpayers, while limiting or ending that coverage leaves affected individuals exposed to ongoing identity theft risks they did not choose.

Current status in Congress: In committee.

NewsClear — neutral news & congressional tracking · Bill of the Week