mr. westmoreland. mr. westmoreland: mr. cordray, on data security, what system do you use to determine if somebody is fulfilling their commitment on data security. mr. cordray: there's a number of procedures that have been developed and actually really enhanced in the federal government other the last several years, you know the federal government has had some problems in this area and the private sector has had many problems in this area, it's something i think we're all very attentive to. nothing would -- mr. westmoreland: what standard to you use if you're going to evaluate a company and fine them for -- mr. cordray: i thought you were talking about our own data security. we're using the standards that we understand to be common in the industry, we're using the standards of best practices at different institutions. mr. westmoreland: wo what standard would that be? mr. cordray: we're taking we nce from the -- what did, when we engage in enforcement matter, we open an investigation, took a look at their own security protoc

mr. westmoreland. mr. westmoreland: mr. cordray, on data security, what system do you use to determine if somebody is fulfilling their commitment on data security? mr. cordray: there's a number of procedures that have been developed and actually really enhanced in the federal government other the last several years. you know the federal government has had some problems in this area and the private sector has had many problems in this area. it's something i think we're all very attentive to. nothing would -- mr. westmoreland: what standard to you use if you're going to evaluate a company and fine them for -- mr. cordray: i thought you were talking about our own data security. we're using the standards that we understand to be common in the industry. we're using the standards of best practices at different institutions. mr. westmoreland: what standard would that be? mr. cordray: we're taking guidance from the federal trade comission. what we did, when we engage in enforcement matter, we open an investigation, took a look at t

mr. westmoreland. >> thank you, chairman. director cordray what -- on data security what system do you use to determine if somebody is fulfilling their commitment on data security? . there's a number of procedures that have been developed and enhanced in the federal government over the last several years, you know the. from has had some problems in this area and the private sector has had many problems and i think it's something we're all very attentive to. nothing would more discredit -- what standards do you use if you're going to go out and ev evaluate a company and possibly fine them -- >> oh, i see, i thought you were talking about our own data security. we're using standards that we understand to be common in the industry, we're using the standards of best practices at different institutions. >> what standard that would be? >> we're taking guidance from the federal trade commission which is ahead of us on this issue. we had an enforcement action in this area. >> what did you use for that enforcement? what standard? >> w

mr. westmoreland so banks and financial institutions can draw their own conclusions, is that something you would be willing to do? mr. cordray: what purpose? mr. fitzpatrick: the data to formulate the rule on overdraft fees. mr. cordray: on small dollar loans or overdraft? i thought you were talking about on overdraft. we aren't releasing a proposal this spring. mr. fitzpatrick: you would be able to release the data that forms the basis of your conclusion? mr. cordray: we released white papers. mr. fitzpatrick: are you willing to release more information. h.r. 3131, are you familiar with that bill. what the bill would do is require the bureau when you make a report or recommendation and issue a rule that you release the underlying data which many times isn't released so banks can form their own conclusions. are you willing to release more of the data? mr. cordray: our orientation and our inclination is to release as much data publicly as we can because we want people to do their own conclusions. but some of the information we get is trade secret protected. although one institution might wa

mr. westmoreland, to preside over he committee of the whole. the chair: the house is in the committee of the whole house on the state of the union for consideration of h.r. 3797 which the clerk will report by title. the clerk: a bill to establish the bases by which the administrator of the environmental protection agency shall issue, implement, and enforce certain emission limitations and allocations for existing electric utility steam generating units that convert energy.use into the chair: pursuant to the rule, the bill is considered as read the first time. the gentleman from kentucky, mr. whitfield, and the gentleman from new jersey, mr. pallone, each will control 30 minutes. the chair recognizes the gentleman from kentucky. mr. whitfield: thank you, mr. speaker. it's not often that congress has the opportunity to help an industry that creates boith -- both jobs and energy while also improving the environment. and it is especially rare when we can do that at no cost to the taxpayer. h.r. 3797, the sense act, accomplishes all of this, and tha