Sign Up
S 1066 Idaho Senate · 68th Legislature, 1st Regular Session (2025)

IDENTITY THEFT – Amends existing law to revise provisions regarding disclosure of breach of personally identifiable information and to require that agencies, individuals, and commercial entities offer free credit monitoring services in certain situations.

S 1066 amends Idaho law to update how organizations must handle security breaches involving Idaho residents' personal information. It revises key definitions (like "breach" and "personal information") and requires agencies, individuals, and businesses to notify affected residents promptly after a breach, with state agencies mandated to report breaches to the Attorney General within 24 hours. The bill also mandates that in certain situations, organizations must offer free credit monitoring services to affected Idaho residents. These changes apply to any entity maintaining computerized data containing personally identifiable information about Idaho residents.
Issues: ✓ TechnologySupports TechnologyBill strengthens data privacy protections by mandating breach notifications and free credit monitoring for affected Idaho residents, directly advancing consumer data security under technology policy.95% confidence
Bill status passed 3 of 5 stages cleared
Introduction
Feb 2025
Committee Review
Mar 2025
Senate Passage
Mar 2025
House Passage
Governor
Introduced Feb 7, 2025 Last action Apr 4, 2025
Maddy AI version diff · 1 comparison

What changed between versions

Bill Text → Engrossment 1 · 4 edits
MODERATE
The bill was amended to add a new section 28-51-107 to correct a code reference, add a new definition for 'Encryption' to clarify what counts as encrypted data, and renumber existing definitions to fix numbering errors. These technical corrections ensure the law's definitions are clear and properly organized.
DEFINITION

Added a new definition for 'Encryption' to clarify that it includes standard encryption methods and other techniques that translate or substitute unusable data for personal information.

Added language to the 'Breach of the security of the system' definition to clarify that breaches do not include data acquisition from sources other than systems maintained by the agency, individual, or commercial entity, or their service providers.

TECHNICAL

Corrected numbering errors in the definitions section by renumbering items and fixing the sequence from (4) to (5) and (5) to (6).

Added a new section 28-51-107 to provide a correct code reference that was missing from the original bill text.

Floor votes · Senate Mar 10, 2025

How they voted

27–5
Passed · 2 other
Total votes 34
Mar 10, 2025
D Democratic5
5 Yea
100% Yea
R Republican29
22 Yea 5 Nay 2
75% Yea
Vote distribution
All Yea All Nay Mixed No data
Full legislative history

Actions timeline

Total actions
22
Key actions
5
Committee
6
Amendments
1
Mar 17, 2025
Lower · Passed
Reported out of Committee with Do Pass Recommendation, Filed for Second Reading
lower
Mar 10, 2025
Senate · Passed
Senate Vote: pass (27-5-2)
senate
Mar 4, 2025
Introduced
Amendments reported printed
upper
Mar 4, 2025
Committee
Amendments ordered printed; referred for engrossment
upper
Mar 4, 2025
Upper · Passed
Reported out without recommendation, as amended
upper
Mar 4, 2025
Upper · Passed
Placed in the Committee of the Whole
upper
Feb 14, 2025
Upper · Passed
Reported out of committee; to 14th Order for amendment
upper
Feb 10, 2025
Committee
Reported Printed; referred to Commerce & Human Resources
upper
Feb 7, 2025
Introduced
Introduced; read first time; referred to JR for Printing
upper
0 primary · 0 co-sponsors

Sponsors

No sponsor information available.