HB997

Further providing for definitions, for notification of the breach of the security of the system, for exceptions and for notice exemption; repealing provisions relating to civil relief; providing for protection of personal information, for civil relief, for information security and for applicability; and repealing provisions relating to applicability.

Chamber Passed·10/1/25

Pennsylvania HB997 amends the Breach of Personal Information Notification Act to redefine personal information, establish notification requirements.

HB997 amends the Breach of Personal Information Notification Act to redefine personal information to include Social Security numbers, driver's license numbers, financial account numbers, and other identifiers. It mandates entities to notify residents of data breaches within a reasonable time, with exceptions for high costs or large affected classes. The act allows for substitute notice methods and requires entities to implement security measures. It provides civil relief for residents affected by breaches, including compensation for identity theft and fraudulent charges.

Included in complete analysis

  • Overview
  • Core Provisions
  • Implementation
  • Impact
  • Legal Framework
  • Critical Issues

See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.

Where it stands

Last
Passed the House · 112–91 · Oct 1, 2025
Current
Communications & Technology Committee
Next
Senate floor vote

Sponsors

DDDDDDDDDDDDDDDDDDDDDDDD
24
1
R
Democratic CaucusRepublican Caucus

Roll Call Votes

112 Yea

DDRDDDDDDDDRDDDDDDDDDDDDDDDDDDDDDDDDDDDDRDDRDDDDDDDDDRDDDRDDDDRDDDDDDDDDDDDRDDDDDDDDDDDDDDDDDDDDDDDDDDDRDDDDRDDD

91 Nay

RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR

Calendar

May 6, 2025

10:00 AM

Commerce (h) Hearing

History

Oct 3, 2025

Senate

Referred to Communications & Technology

Oct 1, 2025

House

Re-reported as committed

Oct 1, 2025

House

Third consideration and final passage (112-91)