House approves amended breach-notification bill after prolonged questioning over timing and liability protections

HARRISBURG, Pa. — The Pennsylvania House on Sept. 30 approved multiple amendments to House Bill 997, which updates the state’s Breach of Personal Information Notification Act, and then agreed to the bill as amended.

Lawmakers said the changes were intended to clarify when businesses must notify individuals about a data breach and to provide predictability for businesses while protecting consumers. The House adopted a technical cleanup, an amendment that narrows the circumstances that trigger notice, and a rebuttable presumption (safe harbor) for actors that meet specified duties. Each amendment passed on recorded votes before the chamber agreed to the bill.

The bill drew extended questioning and debate on the floor about the tension between rapid consumer notification and the time it can take for a forensic investigation to determine the scope of an intrusion. Representative Solomon, identified in the transcript as the majority chair of Veterans Affairs and Emergency Preparedness and a floor sponsor of amendments, described one measure as a technical correction and urged colleagues to support it, saying, “This is a technical amendment. I would ask the members for an affirmative vote.”

Representative Shalaba of Butler County pressed sponsors about the practical effects of immediate notice. In remarks entered into the record during floor interrogation she said that a hasty notification regime can “cause undue alarm and panic” and that consumers need specific information about what type of data — for example, Social Security numbers, driver’s license numbers or health information — was affected.

Prime sponsor Representative Solomon and other supporters pushed back that timely notice helps residents take protective steps. Representative Sowell, identified in the transcript as the prime sponsor of the underlying bill, said: “Let’s allow this information to flow to Pennsylvania residents to protect people’s privacy interests across the Commonwealth.”

Key floor actions and recorded votes tied to the bill included: - Amendment A0634 (technical cleanup) offered by Representative Solomon — agreed to (ayes 202, nays 0). The sponsor described it as removing an unintended duplication in the draft. - A subsequent amendment clarifying when notice is triggered (sponsor and amendment referenced on the floor) — agreed to on a recorded count (ayes 102, nays 101) after extended questioning and floor discussion. - Amendment A01772 (a rebuttable presumption/safe-harbor for actors who meet the bill’s provisions), offered by Representative Venkat — agreed to (ayes 203, nays 0).

After adopting the amendments, the House agreed to the bill as amended; the transcript records that “the bill as amended will be reprinted.” The bill’s final printed version will reflect the technical edits, notice-timing clarification and safe-harbor language adopted on the House floor.

Why it matters: The changes affect how and when Pennsylvanians are notified of potential compromises of personal information and how businesses may limit liability by meeting statutory requirements. Supporters framed the amendments as increased clarity for both consumers and the private sector; opponents cautioned that premature or vague notices could harm consumers and create unnecessary alarm.

What lawmakers said (selected quotes from the floor): - “This is a technical amendment. I would ask the members for an affirmative vote.” — Representative Solomon, majority chair, Veterans Affairs and Emergency Preparedness. - “If anything, it causes undue alarm and panic. What we do owe the people of this commonwealth is information about what happened, what was involved…” — Representative Shalaba (Butler County). - “Let’s allow this information to flow to Pennsylvania residents to protect people’s privacy interests across the Commonwealth.” — Representative Sowell, prime sponsor.

Next steps: The bill will be reprinted to reflect the floor amendments and proceed through the legislative process as the revised text is prepared. The House record shows the bill “agreed to” after the votes and reprinting direction was given on the floor.