H.R. 4791, to amend title 44, United States Code, to strengthen requirements for ensuring the effectiveness of information security controls over information resources that support Federal operations and assets, with an amendment (H. Rept. 110-664);

SEC. 2. PURPOSE.

The purpose of this Act is to protect personally identifiable information of individuals that is maintained in or transmitted by Federal agency information systems.

SEC. 3. DEFINITIONS.

(a) Personally Identifiable Information and Mobile Digital Device Definitions- Section 3542(b) of title 44, United States Code, is amended by adding at the end the following new paragraphs:

`(4) The term `personally identifiable information', with respect to an individual, means any information about the individual maintained by an agency, including information--

`(A) about the individual's education, finances, or medical, criminal, or employment history;

`(B) that can be used to distinguish or trace the individual's identity, including name, social security number, date and place of birth, mother's maiden name, or biometric records; or

`(C) that is otherwise linked or linkable to the individual.

The Rat-   Meanwhile, all that same information is on record with insurance
           companies whose records are maintained and processed in India -
           a place with no security controls at all.