President Barack Obama wants Congress to pass legislation requiring companies to inform customers within 30 days if their data has been hacked, a move that follows high-profile breaches at retailers including Target, Home Depot and Neiman Marcus.
A White House official said Mr. Obama would announce the proposed legislation on Monday, along with a measure aimed at preventing companies from selling student data to third parties and from using information collected in school to engage in targeted advertising.
Mr. Obama’s proposals are part of a White House effort to preview parts of the President’s State of the Union address ahead of the January 20 speech. The official, who insisted on anonymity, was not authorized to discuss the proposed legislation by name ahead of Mr. Obama’s speech Monday at the Federal Trade Commission.
If passed by Congress, the Personal Data Notification and Protection Act could require U.S. companies to notify customers within 30 days of their personal information being compromised. Recent hackings have exposed the lack of uniform practices for alerting customers in the event of a breach.
The legislation would also make it a crime to sell customers’ identities overseas.
Mr. Obama’s proposals also follow last month’s hacking at Sony Pictures Entertainment. The White House has blamed the cyberattack on North Korea and responded with new sanctions against the reclusive nation.
In addition to the customer notification legislation, Mr. Obama will also ask lawmakers to pass the Student Digital Privacy Act. The measure would prohibit companies from selling student data to third parties, a move spurred by the increased use of technology in schools that can scoop up personal information.
It’s unclear whether the new Republican-led Congress will take up either of Mr. Obama’s legislative proposals.
