Data Breach Insurance Act

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602, Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2687, To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138, The State and Local Cybersecurity Improvement Act H.R. 3223, CISA Cyber Exercise Act H.R. 3264, Domains Critical to Homeland Security Act H.R. 3797, (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 4350/S. 2792, National Defense Authorization Act for Fiscal Year 2022, including provisions relating to cybersecurity and incident reporting H.R. 5823, Pandemic Risk Insurance Act of 2021 H.R. 6032, (114th CONGRESS), Data Breach Insurance Act H.R. 6359, (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049, (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity S. 224, Promoting Digital Privacy Technologies Act. S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021; provisions relating to Sec. 302, Bureau of Cybersecurity Statistics S. 2875, Cyber Incident Reporting Act of 2021 Monitor H.R. 1996 / S. 910, SAFE Banking Act. Discussions regarding pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program including a focus on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity General discussions related to the Driver's Privacy Protection Act

Client expense: $500,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Labor, Dept of (DOL), Natl Security Council (NSC), Risk Management Agency, SENATE, State, Dept of (DOS), Treasury, Dept of

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602 Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2687 To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138 The State and Local Cybersecurity Improvement Act H.R. 3223 CISA Cyber Exercise Act H.R. 3264 Domains Critical to Homeland Security Act H.R. 3797 (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 4350/S. 2792, National Defense Authorization Act for Fiscal Year 2022, including provisions relating to cybersecurity and incident reporting H.R. 6032 (114th CONGRESS), Data Breach Insurance Act H.R. 6359 (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049 (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity S. 224 - Promoting Digital Privacy Technologies Act. S. 2407, Cyber Incident Notification Act of 2021 S. 2491, Defense of United States Infrastructure Act of 2021; provisions relating to Sec. 302, Bureau of Cybersecurity Statistics S. 2875, Cyber Incident Reporting Act of 2021 Monitor H.R. 1996 / S. 910, SAFE Banking Act. Discussions regarding pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program focused on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. General discussions about liability exposures and the COVID-19 pandemic. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity General discussions related to the Driver's Privacy Protection Act

Client expense: $540,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Labor, Dept of (DOL), Natl Security Council (NSC), Risk Management Agency, SENATE, State, Dept of (DOS), Treasury, Dept of

H.R. 481, Flood Resiliency and Taxpayer Savings Act of 2021. H.R. 1602 Eliminate Barriers to Innovation Act of 2021 H.R. 1816, To require the Federal Trade Commission to promulgate regulations related to sensitive personal information, and for other purposes H.R. 2687 To increase the minimum levels of financial responsibility for transporting property, and to index future increases to changes in inflation relating to medical care H.R. 3138 The State and Local Cybersecurity Improvement Act H.R. 3223 CISA Cyber Exercise Act H.R. 3264 Domains Critical to Homeland Security Act H.R. 3797 (116th CONGRESS), Medical Marijuana Research Act of 2019 H.R. 6032 (114th CONGRESS), Data Breach Insurance Act H.R. 6359 (116th CONGRESS), Promoting Infrastructure by Protecting Our Subcontractors and Taxpayers Act. H.R. 6395/S. 4049 (116th CONGRESS), National Defense Authorization Act for Fiscal Year 2021, including provisions relating to cybersecurity S. 224 - Promoting Digital Privacy Technologies Act. Monitor efforts to examine pandemic insurance; monitor H.R. 1996 / S. 910, SAFE Banking Act. Monitor efforts to examine pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption. Monitor and participate in discussions regarding data privacy and data breach proposals. General discussion around development of an objective measure of marijuana impairment. General discussions about liability exposures and the COVID-19 pandemic. Legislation and proposals regarding natural catastrophe related policies. Discussions regarding the insurability of cyber exposures. General discussions related to international capital standards. Discussions regarding autonomous vehicles. Legislation and proposals related to the national Flood Insurance Program focused on pre-event mitigation and long-term resilience. Consumer Protection Act, specifically, provisions on risk, insurance. Oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. Monitor efforts to examine pandemic insurance, including H.R. 7011, the Pandemic Risk Insurance Act of 2020; H.R. 6494, the Business Interruption Insurance Coverage Act of 2020; and H.R. 6497, The Never Again Small Business Protection Act of 2020. General discussions about liability exposures and the COVID-19 pandemic. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. General discussions related to the Federal Insurance Office. General discussions related to international capital standards. General discussions on global insurers in the marketplace. General discussions on the International Association of Insurance Supervisors. General discussions on innovation in the insurance industry. General discussions on retroactive active changes to business interruption insurance. General discussions on flood resilience and the U.S. mortgage market. General discussions on relating to supply chain resiliency vis-a-vis the COVID-19 pandemic and other disruptions. Discussions regarding the Cyberspace Solarium Commission Report. General discussions related to Section 230 of the Communications Decency Act (CDA) of 1996. General discussions related to OFAC advisory related to ransomware payments. General discussions related to cybersecurity assessment frameworks from DOD (NIST sp 800-171 and CMMC). General discussions related to artificial intelligence (AI) and machine learning General discussions related to Executive Order 14028, Improving the Nation's Cybersecurity

Client expense: $290,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Commerce, Dept of (DOC), Executive Office of the President (EOP), Federal Housing Finance Agency (FHFA), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Labor, Dept of (DOL), Natl Security Council (NSC), Risk Management Agency, SENATE, State, Dept of (DOS), Treasury, Dept of

Data Acquisition & Technology Accountability & Security Act - minimum standard for data security & Breach notification S2639 - CONSENT Act - management of consumer data S2728 - SMPPCR Act - management of consumer data HR 1770 - Data Security & Breach Notification Act - data breach notification, safe harbor and insurance HR 6032 - Data Breach Insurance Act - data breach insurance HR 2205 and S 961 - information sharing & national data breach notification standards

Client expense: $102,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Data Acquisition & Technology Accountability & Security Act - minimum standard for data security & Breach notification HR 1770 - Data Security & Breach Notification Act - HR 6032 - Data Breach Insurance Act - breach notification HR 2205, S 961 - data breach laws

Client expense: $136,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

HR 1770 Data Security & Breach Notification Act/ HR 6032 Data Breach Insurance Act - national breach notification, safe-harbor provisions HR 2205 and S961 - Data Security Act - information sharing, national data breach notification standards

Client expense: $273,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

HR 1770 Data Security & Breach Notification Act/ HR 6032 Data Breach Insurance Act - national breach notification, safe-harbor provisions HR 2205 and S961 - Data Security Act - information sharing, national data breach notification standards

Client expense: $245,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

HR 1770 Data Security & Breach Notification Act/ HR 6032 Data Breach Insurance Act - national breach notification, safe-harbor provisions HR 2205 and S961 - Data Security Act - information sharing, national data breach notification standards

Client expense: $95,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

HR 1770 Data Security & Breach Notification Act/ HR 6032 Data Breach Insurance Act - national breach notification, safe-harbor provisions HR 2205 and S961 - Data Security Act - information sharing, national data breach notification standards

Client expense: $139,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Discussions regarding proposed legislation & agency reports affecting the collection, use and disclosure of personally identifiable information and self regulatory programs providing protection for consumers; communication of retail views regarding data security and breach notification laws and procedures in protecting customer information; proposed federal breach notification and data security standards, including all provisions of: S. 177, Data Security & Breach Notification Act; H.R. 1770, Data Security and Breach Notification Act of 2015; H.R. 2205, Data Security Act of 2015; S. 961, Data Security Act of 2015 and discussion drafts of data security breach legislation by Senator Warner and by Senators Grassley/Feinstein; H.R. 2576, Frank R. Lautenberg Chemical Safety for the 21st Century Act, all provisions; CPSC Oversight issues - overall agency review on key issues such as targeting, import issues, Sec. 1110 rule; proposed voluntary recall rule; European Union-United States Privacy Shield issues; S.2044 - Consumer Review Freedom Act of 2015, all provisions; H.R.5111, Consumer Review Fairness Act of 2016, all provisions; S.2508/H.R.4460 - Youth Sports Concussion Act, all provisions; H.R. 3765, The ADA Education and Reform Act of 2015", all provisions; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,640,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Occupational Safety & Health Administration (OSHA), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

Update House and Senate on Interchange/swipe fee reform issues, including competitive routing and pending surcharge legislation in states; provide retailers' perspective of issues in implementing mobile payment systems; data security and breach notification as it relates to sensitive financial data; H.R. 2205, Data Security Act of 2015; S. 1484, Financial Regulatory Improvement Act of 2015, indexing threshold of electronic funds transfer amendment to Dodd-Frank; appropriations language pertaining to threshold EFTA amendment; S. 1491, Community Financial Institution Regulatory Relief; discuss views of retail industry regarding EMV transition, fraud costs, Chip and PIN, tokenization, encryption, chargebacks, competition in debit routing and other payment innovation; H.R.5465 - To repeal section 1075 of the Consumer Financial Protection Act of 2010 relating to rules for payment card transactions, and for other purposes; Financial Choice Act (H.R. 5983), provisions to repeal Durbin amendment of Wall Street Reform and Consumer Protection Act of 2010; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,640,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Occupational Safety & Health Administration (OSHA), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

H.R. 23- Windstorm Impact Reduction Program (Enacted) H.R. 26- Terrorism Risk Insurance (Enacted) H.R. 141- Flood Insurance H.R. 494- Health Insurance H.R. 947- National Flood Insurance Act H.R. 1478- Policy Holder Protection Act H.R. 2141- International Insurance H.R. 2205- Data Security H.R. 2901- Flood Insurance H.R. 2918- Flood Insurance H.R. 3456- Flood Insurance H.R. 3794- Risk Retention H.R. 4107- Flood Insurance H.R. 4441- Insurers using drones following a state or federal disaster H.R. 4866- Flood Insurance H.R. 4947- Flood Insurance H.R. 5143- International Insurance H.R. 5953- National Flood Insurance Program H.R. 6032- Cybersecurity H.R. 6104- National Flood Insurance Program H.R. 6196- National Flood Insurance Program H.R. 6434- Flood insurance H.R. 6436- International insurance No #: Taxes; insurance S. 487- Flood Insurance S. 798- Policyholder Protection Act S. 1086- International Capital Standards S. 1484- International Insurance S. 1561- Reinsurance S. 1679- Flood Insurance S. 2324- Flood Insurance S. 2909- TRIA S. 3442- TRIA No #: Flood insurance bills (Luetkemeyer & Velazquez) **Issues lobbied without specific bill numbers: Covered Agreements, Senate Financial Services and General Government Appropriations

Client expense: $790,000 · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Consumer Financial Protection Bureau (CFPB), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Highway Administration (FHA), Federal Housing Finance Agency (FHFA), Federal Reserve System, HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Interior, Dept of (DOI), Internal Revenue Service (IRS), Natl Geospatial Intelligence Agency, Natl Highway Traffic Safety Administration (NHTSA), Natl Transportation Safety Board (NTSB), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Trade Representative (USTR), White House Office

Implementation of Public Law No. 111-203, Dodd-Frank Wall Street Reform and Consumer Protection Act, specifically, provisions on risk, insurance oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. Discussions on U.S. and global designation of systemically relevant non-bank financial firms. General discussions on Insurance Capital Investment. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. Legislation and proposals regarding natural catastrophe related policies. Legislation and proposals regarding the insurability of cyber exposures, including: S.456, Cyber Threat Sharing Act of 2015; S.754, Cybersecurity Information Sharing Act of 2015; H.R.1560, Protecting Cyber Networks Act; H.R.234, Cyber Intelligence Sharing and Protection Act; S.177, Data Security and Breach Notification Act of 2015; H.R.580, Data Accountability and Trust Act; H.R. 1704, Personal Data Notification and Protection Act; H.R. 2205/S. 961, Data Security Act of 2015; and H.R. 6032, Data Breach Insurance Act. General discussions on issues related to Surety Bonds, including: surety provisions in public-private partnerships; H.R. 413, Partnership to Build America Act of 2015; S. 1526, Construction Consensus Procurement Improvement Act of 2015; H.R. 5293/S. 3000, National Defense Authorization Act for Fiscal Year 2017, provisions on construction procurement; S. 2848/H.R. 5303, Water Resources Development Act of 2016. Implementation of Pub. L. No. 1144, Terrorism Risk Insurance Program Reauthorization Act of 2015, data collection provisions and control/ownership clarifications. Legislation and proposals regarding the development of international capital standards for internationally-active insurance groups, including: S. 1484, Financial Regulatory Improvement Act; S. 1086, International Insurance Capital Standards Accountability Act of 2015; H.R. 2141, International Insurance Standards Transparency and Policy Protection Act of 2015; S. 1491, Community Lender Regulatory Relief and Consumer Protection Act of 2015; H.R. 5485/S. 3067, Financial Services and General Government Appropriations bill for Fiscal Year 2017; S. 798/H.R. 1478, Policyholder Protection Act of 2015; H.R. 5143, Transparent Insurance Standards Act of 2016. H.R. 3794, Nonprofit Property Protection Act. General discussions related to the national flood insurance program focused on pre-event mitigation and long term resilience.

Client expense: $340,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Commerce, Dept of (DOC), Executive Office of the President (EOP), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Labor, Dept of (DOL), SENATE, Treasury, Dept of

Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy H.R. 1770 - Data Security and Breach Notification Act of 2015. Draft legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy S. 961/ H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: privacy H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labors proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy

Client expense: $500,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Update House and Senate on Interchange/swipe fee reform issues, including competitive routing and pending surcharge legislation in states; provide retailers' perspective of issues in implementing mobile payment systems; data security and breach notification as it relates to sensitive financial data; H.R. 2205, Data Security Act of 2015; S. 1484, Financial Regulatory Improvement Act of 2015, indexing threshold of electronic funds transfer amendment to Dodd-Frank; appropriations language pertaining to threshold EFTA amendment; S. 1491, Community Financial Institution Regulatory Relief; discuss views of retail industry regarding EMV transition, fraud costs, Chip and PIN, tokenization, encryption, chargebacks, competition in debit routing and other payment innovation; H.R.5465 - To repeal section 1075 of the Consumer Financial Protection Act of 2010 relating to rules for payment card transactions, and for other purposes; Financial Choice Act (H.R. 5983), provisions to repeal Durbin amendment of Wall Street Reform and Consumer Protection Act of 2010; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,640,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Occupational Safety & Health Administration (OSHA), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

Discussions regarding proposed legislation & agency reports affecting the collection, use and disclosure of personally identifiable information and self regulatory programs providing protection for consumers; communication of retail views regarding data security and breach notification laws and procedures in protecting customer information; proposed federal breach notification and data security standards, including all provisions of: S. 177, Data Security & Breach Notification Act; H.R. 1770, Data Security and Breach Notification Act of 2015; H.R. 2205, Data Security Act of 2015; S. 961, Data Security Act of 2015 and discussion drafts of data security breach legislation by Senator Warner and by Senators Grassley/Feinstein; H.R. 2576, Frank R. Lautenberg Chemical Safety for the 21st Century Act, all provisions; CPSC Oversight issues - overall agency review on key issues such as targeting, import issues, Sec. 1110 rule; proposed voluntary recall rule; European Union-United States Privacy Shield issues; S.2044 - Consumer Review Freedom Act of 2015, all provisions; H.R.5111, Consumer Review Fairness Act of 2016, all provisions; S.2508/H.R.4460 - Youth Sports Concussion Act, all provisions; H.R. 3765, The ADA Education and Reform Act of 2015", all provisions; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,640,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Occupational Safety & Health Administration (OSHA), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

Regulation of insurance (general), general issues related to the Federal Insurance Office , general issues related to the Federal Advisory Committee on Insurance (FACI), general issues related to the Financial Stability Oversight Council (FSOC), general issues related to the Financial Stability Board (FSB), general issues related to the International Association of Insurance Supervisors (IAIS) H.R. 26, the Terrorism Risk Insurance Program Reauthorization Act of 2015, creation/implementation of the National Association of Registered Agents and Brokers, reauthorization of the Terrorism Risk Insurance Act (general), implementation of the Homeowner Flood Insurance Affordability Act (Public Law No: 113-89), issues related to the National Flood Insurance Program (general), Implementation of the Biggert-Waters Flood Insurance Reform Act of 2012 (BW-12), H.R. 1748, the Safe Building Code Incentive Act, H.R. 2141, the International Insurance Standards Transparency and Policyholder Protection Act, S. 1679/ H.R. 2901, the Flood Insurance Market Parity and Modernization Act, H.R. 1478/S. 798, the Policyholder Protection Act, S. 406/H.R. 801, The Disaster Assistance Recoupment Fairness Act of 2015,H.R. 638, the Disaster Assistance Fairness and Accountability Act,H.R. 141, the Flood Insurance Premium Parity Act of 2015, H.R. 1560, Protecting Cyber Networks Act, S.754 Cybersecurity Information Sharing Act of 2015, S. 1734, the the National Cybersecurity Protection Advancement Act of 2015, H.R.1731 - National Cybersecurity Protection Advancement Act of 2015, HR 1786, the National Windstorm Impact Reduction Act Reauthorization, H.R. 1471, the FEMA Disaster Assistance Reform Act of 2015, H.R. 2918, the Flood Insurance Fairness Act, H.R. 2230, the Disaster Savings Accounts Act of 2015, S. 1086, the International Insurance Capital Standards Accountability Act of 2015, S. 1484, the Financial Regulatory Improvement Act of 2015, S. 2324/H.R. 4107, the Flood Insurance Transparency and Accountability Act of 2015, H.R.2205, the Data Security Act of 2015, Issues related to insurance and the Policyholder Protection Act in H.R.2029 - Consolidated Appropriations Act, 2016,issues related to the reauthorization of the National Flood Insurance Program, Comments on the Federal Emergency Management Agency's Establishing a Deductible for FEMAs Public Assistance Program Docket ID FEMA-2016-0003, H.R. 4866, the Flood Insurance Rate Increase Suspension Act of 2016, Federal Register Notice of Proposed Rulemaking FEMA-2016-0012 Proposal to Remove Financial Assistance/Subsidy Arrangement proposal to remove from National Flood Insurance Program regulations, H.R. 5143, the Transparent Insurance Standards Act of 2016, H.R. 5983, the Financial CHOICE Act, H.R. 6032, the Data Breach Security Act

Client expense: $101,251 · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Federal Emergency Management Agency (FEMA), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Labor, Dept of (DOL), Risk Management Agency, SENATE, Treasury, Dept of

H.R. 23- Windstorm Impact Reduction Program (Enacted) H.R. 26- Terrorism Risk Insurance (Enacted) H.R. 141- Flood Insurance H.R. 494- Health Insurance H.R. 947- National Flood Insurance Act H.R. 1478- Policy Holder Protection Act H.R. 2141- International Insurance H.R. 2205- Data Security H.R. 2901- Flood Insurance H.R. 2918- Flood Insurance H.R. 3456- Flood Insurance H.R. 3794- Risk Retention H.R. 4107- Flood Insurance H.R. 4441- Insurers using drones following a state or federal disaster H.R. 4866- Flood Insurance H.R. 4947- Flood Insurance H.R. 5143- International Insurance H.R. 5953- National Flood Insurance Program H.R. 6032- Cybersecurity H.R. 6104- National Flood Insurance Program H.R. 6196- National Flood Insurance Program H.R. 6434- Flood insurance H.R. 6436- International insurance No #: Taxes; insurance S. 487- Flood Insurance S. 798- Policyholder Protection Act S. 1086- International Capital Standards S. 1484- International Insurance S. 1561- Reinsurance S. 1679- Flood Insurance S. 2324- Flood Insurance S. 2909- TRIA S. 3442- TRIA No #: Flood insurance bills (Luetkemeyer & Velazquez) **Issues lobbied without specific bill numbers: Covered Agreements, Senate Financial Services and General Government Appropriations

Client expense: $790,000 · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Consumer Financial Protection Bureau (CFPB), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Highway Administration (FHA), Federal Housing Finance Agency (FHFA), Federal Reserve System, HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Interior, Dept of (DOI), Internal Revenue Service (IRS), Natl Geospatial Intelligence Agency, Natl Highway Traffic Safety Administration (NHTSA), Natl Transportation Safety Board (NTSB), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Trade Representative (USTR), White House Office

HR 53 - Cyber Security Education and Federal Workforce Enhancement Act, all provisions HR 60 - Cyber Defense National Guard Act, all provisions HR 104 - Cyber Privacy Fortification Act of 2015, all provisions HR 234 - Cyber Intelligence Sharing and Protection Act, all provisions HR 555 - Federal Exchange Data Breach Notification Act of 2015, all provisions HR 580 - Data Accountability and Trust Act, all provisions HR 726 - Secure Data Act of 2015, all provisions, all provisions HR 1053 - Commercial Privacy Bill of Rights Act of 2015, all provisions HR 1560 - Protecting Cyber Networks Act, all provisions, all provisions HR 1704 - Personal Data Notification and Protection Act of 2015, all provisions HR 1770 - Data Security and Breach Notification Act of 2015, all provisions HR 1731 - The National Cybersecurity Protection Advancement Act of 2015, all provisions HR 2205 - Data Security Act of 2015, all provisions S. 961 - Data Security Act of 2015, all provisions S. 135 - Secure Data Act of 2015, all provisions S. 177 - Data Security and Breach Notification Act of 2015, all provisions S. 547 - Commercial Privacy Bill of Rights Act of 2015, all provisions S. 668 - Data Broker Accountability and Transparency Act of 2015, all provisions S. 754 - Cybersecurity Information Sharing Act of 2015, all provisions S. 456 - Cyber Threat Sharing Act of 2015, all provisions S. 3295/H.R. 4743 - National Cybersecurity Preparedness Consortium Act of 2016, all provisions H.R. 6032 - Data Breach Insurance Act, all provisions H.R. 6066 - Cybersecurity Responsibility and Accountability Act of 2016, H.R. 6066, all provisions

Client expense: $390,000 · Firm income: Not reported

Government targets: Federal Aviation Administration (FAA), HOUSE OF REPRESENTATIVES, Housing & Urban Development, Dept of (HUD), Labor, Dept of (DOL), SENATE, Treasury, Dept of, U.S. Trade Representative (USTR)

S 754- Cybersecurity Information Sharing Act (all provisions) HR 2205 and S 961- Data Security Act of 2015 (all provisions) HR 1731- National Cybersecurity Protection Advancement Act (insurance provisions) HR 6032- Data Breach Insurance Act

Client expense: $230,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Farm Credit Administration, Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Reserve System, Government Accountability Office (GAO), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Labor, Dept of (DOL), Natl Credit Union Administration (NCUA), Office of Management & Budget (OMB), SENATE, Treasury, Dept of

CSP - Fourth Quarter Report - 2016 Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. H.R. 1770- Data Security and Breach Notification Act of 2015. Legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy. H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labor proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy. S.___ - Draft legislation that would require notice of data security breaches. Issue: Cybersecurity and Privacy. S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: Privacy S. 961/H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy.

Client expense: $800,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy. S.___ - Draft legislation that would require notice of data security breaches. Issue: Cybersecurity and Privacy. H.R. 1770- Data Security and Breach Notification Act of 2015. Legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy. S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy. S. 961/H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: Privacy H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labor proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy

Client expense: $1,134,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

H.R. 23- Windstorm Impact Reduction Program (Enacted) H.R. 26- Terrorism Risk Insurance (Enacted) H.R. 141- Flood Insurance H.R. 947- National Flood Insurance Act H.R. 1478- Policy Holder Protection Act H.R. 2141- International Insurance H.R. 2205- Data Security H.R. 2901- Flood Insurance H.R. 2918- Flood Insurance H.R. 3456- Flood Insurance H.R. 3794- Risk Retention H.R. 4107- Flood Insurance H.R. 4441- Insurers using drones following a state or federal disaster H.R. 4866- Flood Insurance H.R. 4947- Flood Insurance H.R. 5143- International Insurance H.R. 5953- National Flood Insurance Program H.R. 6032- Cybersecurity H.R. 6104- National Flood Insurance Program H.R. 6196- National Flood Insurance Program No #: Taxes; insurance S. 487- Flood Insurance S. 798- Policyholder Protection Act S. 1086- International Capital Standards S. 1484- International Insurance S. 1561- Reinsurance S. 1679- Flood Insurance S. 2324- Flood Insurance S. 2909- TRIA S. 3442- TRIA No #: Taxes; insurance **Issues lobbied without specific bill numbers: Covered Agreements, Senate Financial Services and General Government Appropriations

Client expense: Not reported · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Consumer Financial Protection Bureau (CFPB), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Highway Administration (FHA), Federal Housing Finance Agency (FHFA), Federal Reserve System, HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Interior, Dept of (DOI), Internal Revenue Service (IRS), Natl Geospatial Intelligence Agency, Natl Highway Traffic Safety Administration (NHTSA), Natl Transportation Safety Board (NTSB), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Trade Representative (USTR), White House Office

Update House and Senate on Interchange/swipe fee reform issues, including competitive routing and pending surcharge legislation in states; provide retailers' perspective of issues in implementing mobile payment systems; data security and breach notification as it relates to sensitive financial data; H.R. 2205, Data Security Act of 2015; S. 1484, Financial Regulatory Improvement Act of 2015, indexing threshold of electronic funds transfer amendment to Dodd-Frank; appropriations language pertaining to threshold EFTA amendment; S. 1491, Community Financial Institution Regulatory Relief; discuss views of retail industry regarding EMV transition, fraud costs, Chip and PIN, tokenization, encryption, chargebacks, competition in debit routing and other payment innovation; H.R.5465 - To repeal section 1075 of the Consumer Financial Protection Act of 2010 relating to rules for payment card transactions, and for other purposes; Financial Choice Act (H.R. 5983), provisions to repeal Durbin amendment of Wall Street Reform and Consumer Protection Act of 2010; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,760,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

Implementation of Public Law No. 111-203, Dodd-Frank Wall Street Reform and Consumer Protection Act, specifically, provisions on risk, insurance oversight (Federal Insurance Office), and potential CFPB activities related to P&C insurance. Discussions on U.S. and global designation of systemically relevant non-bank financial firms. General discussions on Insurance Capital Investment. General discussions on Commercial Insurance regulation. General issues related to resilience and mitigation, as related to P&C insurance. Legislation and proposals regarding natural catastrophe related policies. Legislation and proposals regarding the insurability of cyber exposures, including: S.456, Cyber Threat Sharing Act of 2015; S.754, Cybersecurity Information Sharing Act of 2015; H.R.1560, Protecting Cyber Networks Act; H.R.234, Cyber Intelligence Sharing and Protection Act; S.177, Data Security and Breach Notification Act of 2015; H.R.580, Data Accountability and Trust Act; H.R. 1704, Personal Data Notification and Protection Act; H.R. 2205/S. 961, Data Security Act of 2015; and H.R. 6032, Data Breach Insurance Act. General discussions on issues related to Surety Bonds, including: surety provisions in public-private partnerships; H.R. 413, Partnership to Build America Act of 2015; S. 1526, Construction Consensus Procurement Improvement Act of 2015; H.R. 5293/S. 3000, National Defense Authorization Act for Fiscal Year 2017, provisions on construction procurement; S. 2848/H.R. 5303, Water Resources Development Act of 2016. Implementation of Pub. L. No. 1144, Terrorism Risk Insurance Program Reauthorization Act of 2015, data collection provisions and control/ownership clarifications. Legislation and proposals regarding the development of international capital standards for internationally-active insurance groups, including: S. 1484, Financial Regulatory Improvement Act; S. 1086, International Insurance Capital Standards Accountability Act of 2015; H.R. 2141, International Insurance Standards Transparency and Policy Protection Act of 2015; S. 1491, Community Lender Regulatory Relief and Consumer Protection Act of 2015; H.R. 5485/S. 3067, Financial Services and General Government Appropriations bill for Fiscal Year 2017; S. 798/H.R. 1478, Policyholder Protection Act of 2015; H.R. 5143, Transparent Insurance Standards Act of 2016. H.R. 3794, Nonprofit Property Protection Act. General discussions related to the national flood insurance program focused on pre-event mitigation and long term resilience.

Client expense: $300,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Commerce, Dept of (DOC), Executive Office of the President (EOP), HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Labor, Dept of (DOL), SENATE, Treasury, Dept of

H.R. 5983 (Financial Choice Act of 2016), provisions related to interchange rates and Consumer Financial Protection Bureau restructuring. H.R. 6032 (Data Breach Insurance Act), provisions related to cyber security and data breaches. General regulatory issues, including Consumer Financial Protection Bureau structure, credit and debit interchange rates, cyber security and data breach notifications.

Client expense: $340,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

Update House and Senate on Interchange/swipe fee reform issues, including competitive routing and pending surcharge legislation in states; provide retailers' perspective of issues in implementing mobile payment systems; data security and breach notification as it relates to sensitive financial data; H.R. 2205, Data Security Act of 2015; S. 1484, Financial Regulatory Improvement Act of 2015, indexing threshold of electronic funds transfer amendment to Dodd-Frank; appropriations language pertaining to threshold EFTA amendment; S. 1491, Community Financial Institution Regulatory Relief; discuss views of retail industry regarding EMV transition, fraud costs, Chip and PIN, tokenization, encryption, chargebacks, competition in debit routing and other payment innovation; H.R.5465 - To repeal section 1075 of the Consumer Financial Protection Act of 2010 relating to rules for payment card transactions, and for other purposes; Financial Choice Act (H.R. 5983), provisions to repeal Durbin amendment of Wall Street Reform and Consumer Protection Act of 2010; H.R. 6032, Data Breach Insurance Act, shared retail views on tax credits for purchase of data breach insurance, implementing cyber framework, tokenization, p2p encryption.

Client expense: $1,760,000 · Firm income: Not reported

Government targets: Commerce, Dept of (DOC), Consumer Product Safety Commission (CPSC), Environmental Protection Agency (EPA), Equal Employment Opportunity Commission (EEOC), Federal Aviation Administration (FAA), Federal Maritime Commission, Federal Reserve System, Federal Trade Commission (FTC), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Internal Revenue Service (IRS), Justice, Dept of (DOJ), Labor, Dept of (DOL), Natl Economic Council (NEC), Natl Labor Relations Board (NLRB), Office of Management & Budget (OMB), Patent & Trademark Office (PTO), SENATE, Small Business Administration (SBA), State, Dept of (DOS), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Customs & Border Protection, U.S. Trade Representative (USTR), White House Office

Regulation of insurance (general), general issues related to the Federal Insurance Office , general issues related to the Federal Advisory Committee on Insurance (FACI), general issues related to the Financial Stability Oversight Council (FSOC), general issues related to the Financial Stability Board (FSB), general issues related to the International Association of Insurance Supervisors (IAIS) H.R. 26, the Terrorism Risk Insurance Program Reauthorization Act of 2015, creation/implementation of the National Association of Registered Agents and Brokers, reauthorization of the Terrorism Risk Insurance Act (general), implementation of the Homeowner Flood Insurance Affordability Act (Public Law No: 113-89), issues related to the National Flood Insurance Program (general), Implementation of the Biggert-Waters Flood Insurance Reform Act of 2012 (BW-12), H.R. 1748, the Safe Building Code Incentive Act, H.R. 2141, the International Insurance Standards Transparency and Policyholder Protection Act, S. 1679/ H.R. 2901, the Flood Insurance Market Parity and Modernization Act, H.R. 1478/S. 798, the Policyholder Protection Act, S. 406/H.R. 801, The Disaster Assistance Recoupment Fairness Act of 2015,H.R. 638, the Disaster Assistance Fairness and Accountability Act,H.R. 141, the Flood Insurance Premium Parity Act of 2015, H.R. 1560, Protecting Cyber Networks Act, S.754 Cybersecurity Information Sharing Act of 2015, S. 1734, the the National Cybersecurity Protection Advancement Act of 2015, H.R.1731 - National Cybersecurity Protection Advancement Act of 2015, HR 1786, the National Windstorm Impact Reduction Act Reauthorization, H.R. 1471, the FEMA Disaster Assistance Reform Act of 2015, H.R. 2918, the Flood Insurance Fairness Act, H.R. 2230, the Disaster Savings Accounts Act of 2015, S. 1086, the International Insurance Capital Standards Accountability Act of 2015, S. 1484, the Financial Regulatory Improvement Act of 2015, S. 2324/H.R. 4107, the Flood Insurance Transparency and Accountability Act of 2015, H.R.2205, the Data Security Act of 2015, Issues related to insurance and the Policyholder Protection Act in H.R.2029 - Consolidated Appropriations Act, 2016,issues related to the reauthorization of the National Flood Insurance Program, Comments on the Federal Emergency Management Agency's Establishing a Deductible for FEMAs Public Assistance Program Docket ID FEMA-2016-0003, H.R. 4866, the Flood Insurance Rate Increase Suspension Act of 2016, Federal Register Notice of Proposed Rulemaking FEMA-2016-0012 Proposal to Remove Financial Assistance/Subsidy Arrangement proposal to remove from National Flood Insurance Program regulations, H.R. 5143, the Transparent Insurance Standards Act of 2016, H.R. 5983, the Financial CHOICE Act, H.R. 6032, the Data Breach Security Act

Client expense: $84,794 · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Federal Emergency Management Agency (FEMA), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Labor, Dept of (DOL), Risk Management Agency, SENATE, Treasury, Dept of

Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy H.R. 1770 - Data Security and Breach Notification Act of 2015. Draft legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy S. 961/ H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: privacy H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labors proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy

Client expense: $620,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

CSP - Third Quarter Report - 2016 Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. H.R. 1770- Data Security and Breach Notification Act of 2015. Legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy. H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labor proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy. S.___ - Draft legislation that would require notice of data security breaches. Issue: Cybersecurity and Privacy. S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: Privacy S. 961/H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy.

Client expense: $1,230,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE

HR 53 - Cyber Security Education and Federal Workforce Enhancement Act, all provisions HR 60 - Cyber Defense National Guard Act, all provisions HR 104 - Cyber Privacy Fortification Act of 2015, all provisions HR 234 - Cyber Intelligence Sharing and Protection Act, all provisions HR 555 - Federal Exchange Data Breach Notification Act of 2015, all provisions HR 580 - Data Accountability and Trust Act, all provisions HR 726 - Secure Data Act of 2015, all provisions, all provisions HR 1053 - Commercial Privacy Bill of Rights Act of 2015, all provisions HR 1560 - Protecting Cyber Networks Act, all provisions, all provisions HR 1704 - Personal Data Notification and Protection Act of 2015, all provisions HR 1770 - Data Security and Breach Notification Act of 2015, all provisions HR 1731 - The National Cybersecurity Protection Advancement Act of 2015, all provisions HR 2205 - Data Security Act of 2015, all provisions S. 961 - Data Security Act of 2015, all provisions S. 135 - Secure Data Act of 2015, all provisions S. 177 - Data Security and Breach Notification Act of 2015, all provisions S. 547 - Commercial Privacy Bill of Rights Act of 2015, all provisions S. 668 - Data Broker Accountability and Transparency Act of 2015, all provisions S. 754 - Cybersecurity Information Sharing Act of 2015, all provisions S. 456 - Cyber Threat Sharing Act of 2015, all provisions S. 3295/H.R. 4743 - National Cybersecurity Preparedness Consortium Act of 2016, all provisions H.R. 6032 - Data Breach Insurance Act, all provisions H.R. 6066 - Cybersecurity Responsibility and Accountability Act of 2016, H.R. 6066, all provisions

Client expense: $400,000 · Firm income: Not reported

Government targets: Federal Aviation Administration (FAA), HOUSE OF REPRESENTATIVES, Housing & Urban Development, Dept of (HUD), Labor, Dept of (DOL), SENATE, Treasury, Dept of, U.S. Trade Representative (USTR)

H.R. 23- Windstorm Impact Reduction Program (Enacted) H.R. 26- Terrorism Risk Insurance (Enacted) H.R. 141- Flood Insurance H.R. 947- National Flood Insurance Act H.R. 1478- Policy Holder Protection Act H.R. 2141- International Insurance H.R. 2205- Data Security H.R. 2901- Flood Insurance H.R. 2918- Flood Insurance H.R. 3456- Flood Insurance H.R. 3794- Risk Retention H.R. 4107- Flood Insurance H.R. 4441- Insurers using drones following a state or federal disaster H.R. 4866- Flood Insurance H.R. 4947- Flood Insurance H.R. 5143- International Insurance H.R. 5953- National Flood Insurance Program H.R. 6032- Cybersecurity H.R. 6104- National Flood Insurance Program H.R. 6196- National Flood Insurance Program No #: Taxes; insurance S. 487- Flood Insurance S. 798- Policyholder Protection Act S. 1086- International Capital Standards S. 1484- International Insurance S. 1561- Reinsurance S. 1679- Flood Insurance S. 2324- Flood Insurance S. 2909- TRIA S. 3442- TRIA No #: Taxes; insurance **Issues lobbied without specific bill numbers: Covered Agreements, Senate Financial Services and General Government Appropriations

Client expense: $1,010,000 · Firm income: Not reported

Government targets: Centers For Medicare and Medicaid Services (CMS), Consumer Financial Protection Bureau (CFPB), Executive Office of the President (EOP), Federal Aviation Administration (FAA), Federal Deposit Insurance Corporation (FDIC), Federal Emergency Management Agency (FEMA), Federal Highway Administration (FHA), Federal Housing Finance Agency (FHFA), Federal Reserve System, HOUSE OF REPRESENTATIVES, Homeland Security, Dept of (DHS), Housing & Urban Development, Dept of (HUD), Interior, Dept of (DOI), Internal Revenue Service (IRS), Natl Geospatial Intelligence Agency, Natl Highway Traffic Safety Administration (NHTSA), Natl Oceanic & Atmospheric Administration (NOAA), Natl Transportation Safety Board (NTSB), Office of Management & Budget (OMB), SENATE, Securities & Exchange Commission (SEC), Transportation, Dept of (DOT), Treasury, Dept of, U.S. Trade Representative (USTR), White House Office

S 754- Cybersecurity Information Sharing Act (all provisions) HR 2205 and S 961- Data Security Act of 2015 (all provisions) HR 1731- National Cybersecurity Protection Advancement Act (insurance provisions) HR 6032- Data Breach Insurance Act

Client expense: $220,000 · Firm income: Not reported

Government targets: Agriculture, Dept of (USDA), Federal Emergency Management Agency (FEMA), Government Accountability Office (GAO), HOUSE OF REPRESENTATIVES, Health & Human Services, Dept of (HHS), Labor, Dept of (DOL), Office of Management & Budget (OMB), SENATE, Treasury, Dept of

Public Law 111-203, H.R. 4173- Dodd-Frank Wall Street Reform and Consumer Protection Act. Issue: Implementation, Global Capital Standards and Regulatory reform. S. ___, Draft legislation that will establish strong and uniform national data security and breach notification standards for electronic data, and to expressly preempt any related state laws in order to prove the Federal Trade Commission with authority to enforce such standards for entities covered under this Act. Issue: Cybersecurity and Privacy. S.___ - Draft legislation that would require notice of data security breaches. Issue: Cybersecurity and Privacy. H.R. 1770- Data Security and Breach Notification Act of 2015. Legislation that would require certain entities who collect and maintain personal information of individuals to secure such information and to provide notice to such individuals in the case of a breach of security involving such information. Issue: Cybersecurity and Privacy. S. 177 - Data Security and Breach Notification Act of 2015. Requires the Federal Trade Commission (FTC) to promulgate regulations requiring commercial entities, nonprofit and for-profit corporations, estates, trusts, cooperatives, and other specified entities that own or possess data containing personal information (covered entities), or that contract to have a third-party maintain or process such data for the entity, to implement information security policies and procedures for the treatment and protection of personal information. Issue: Cybersecurity and Privacy. S. 961/H.R. 2205 - Data Security Act of 2015 - Requires individuals, corporations, or other non-government entities that access, maintain, communicate, or handle sensitive financial account information or nonpublic personal information to implement an information security program and to notify consumers, federal law enforcement, appropriate administrative agencies, payment card networks, and consumer reporting agencies of certain data breaches of unencrypted sensitive information likely to cause identity theft or fraudulent transactions on consumer financial accounts. Issue: Cybersecurity and Privacy. S. 754 - Cybersecurity Information Sharing Act of 2014, draft legislation incentivizes the sharing of cybersecurity threat information between the private sector and the government and among private sector entities. Issue: Privacy H.R. 2029 - Consolidated Appropriations Act. Issue: privacy, cybersecurity, source of strength, financial regulatory reform, Department of Labor proposed fiduciary rule. H.R. 6032 - Data Breach Insurance Act. The bill will amend the internal revenue code of 1986 to provide a tax credit for purchase of data breach insurance. Issue: Cybersecurity and Privacy

Client expense: $1,071,000 · Firm income: Not reported

Government targets: HOUSE OF REPRESENTATIVES, SENATE