The House passed its version of the Act in October 2017. It's not certain when the bill might reach the President's desk.

The soon-to-be law isn't going to render small businesses impervious to attack. Many large companies are still grappling with data breaches, and small shops rarely have the sheer amount of staff and money needed to address intrusions. Whether or not the resources help will depend on how easily businesses can find it, too. This Act might close the gap, though, and it's an acknowledgment that your private information is just as sensitive at a tiny startup as it is at a giant corporation.