VA HB2793 | 2019 | Regular Session


Spectrum: Partisan Bill (Democrat 1-0)
Status: Introduced on January 18 2019 - 25% progression
Action: 2019-02-05 - Left in Commerce and Labor
Pending: House Commerce and Labor Committee
Text: Latest bill text (Introduced) [HTML]


Cybersecurity; care and disposal of customer records; Cybersecurity; care and disposal of customer records; security for connected devices. Requires any business to take all reasonable steps to dispose of, or arrange for the disposal of, customer records within its custody or control containing personal information when the records are no longer to be retained by the business by shredding, erasing, or otherwise modifying the personal information in those records to make it unreadable or undecipherable. The measure requires any business that owns or licenses personal information about a customer to implement and maintain reasonable security procedures and practices appropriate to the nature of the information in order to protect the personal information from unauthorized access, destruction, use, modification, or disclosure. The measure also requires a manufacturer of a device or other physical object that is capable of connecting directly or indirectly to the Internet to (i) equip the device with reasonable security features, (ii) demonstrate conformity with industry standards for cybersecurity and resiliency, (iii) provide an opt-in forum or registration capability to allow consumers to know when a vulnerability or breach is discovered, (iv) make patch notification and end-of-life support events easily obtainable by registered users of the manufacturer's connected devices, and (v) when it is aware of existing vulnerabilities that put more than 500 users at risk, notify the office of the Chief Information Officer of the Commonwealth and provide remediation steps to consumers without

Tracking Information

Register now for our free OneVote public service or GAITS Professional trial account and you can begin tracking this and other legislation, all driven by the real-time data of the LegiScan API. Providing tools allowing you to research pending legislation, stay informed with email alerts, content feeds, and share dynamic reports. Use our new PolitiCorps to join with friends and collegaues to monitor & discuss bills through the process.

Monitor Legislation or view this same bill number from multiple sessions or take advantage of our national legislative search.


Cybersecurity; care and disposal of customer records, security for connected devices.


Roll Calls

2019-01-29 - House - House: Subcommittee recommends passing by indefinitely (5-Y 2-N) (Y: 5 N: 2 NV: 1 Abs: 1) [PASS]


2019-02-05HouseLeft in Commerce and Labor
2019-01-29HouseSubcommittee recommends passing by indefinitely (5-Y 2-N)
2019-01-22HouseAssigned C & L sub: Subcommittee #1
2019-01-18HouseReferred to Committee on Commerce and Labor
2019-01-18HousePresented and ordered printed 19104706D

Code Citations

ChapterArticleSectionCitation TypeStatute Text
591443.4(n/a)See Bill Text
591444.10(n/a)See Bill Text
591444.4(n/a)See Bill Text

Virginia State Sources

Bill Comments