Requires a consumer reporting agency, that experiences a data breach, to: (1) Automatically place a security freeze on the credit report of each affected consumer within seven days of discovery of the data breach;

(2) Notify the consumer of the automatic security freeze on his or her credit report;

(3) Provide the consumer with a unique personal identification number or password to be used when providing authorization to temporarily lift or remove the freeze; and

(4) Notify the attorney general of the data breach.