A bill (H.R. 1731) designed to increase criminal penalties for identity theft was signed into law (P.L. 108-275) by the President. The law creates the crime of aggravated identity theft for crimes that involve felonies, such as bank or mail fraud. This crime carries a sentence of two additional years in prison added to the felony conviction. Those who commit identity theft while also perpetrating a criminal act will be given an additional five years in prison.
A recent report jointly conducted by Experian and the Ponemon Institute surveyed consumers who were victims of data breaches. In the report, The Aftermath of a Mega Data Breach: Consumer Sentiment, 63 percent of consumers said they believe the company where the data breach occurred should be obligated to provide identity theft protection to affected parties, and 67 percent wanted compensation such as cash, products, or services.