House Amendment 8670 PAG LIN 1 1 Amend House File 2700 as follows: 1 2 #1. Page 26, by inserting after line 1 the 1 3 following: 1 4 <Sec. . NEW SECTION. 422.72A SUSPECTED MISUSE 1 5 OF PERSONAL INFORMATION == NOTICE REQUIRED. 1 6 1. For the purposes of this section, the following 1 7 definitions apply: 1 8 a. "Affected individual" means an individual who 1 9 is identified by or connected with personal 1 10 information contained in the department's records. 1 11 b. "Personal information" means all of the 1 12 following: 1 13 (1) Social security number. 1 14 (2) Tax identification number. 1 15 (3) Driver's license number or other unique 1 16 identification number created or collected by a 1 17 government body. 1 18 (4) Financial account number, credit card number, 1 19 or debit card number in combination with any required 1 20 security code, access code, or password that would 1 21 permit access to an individual's financial account. 1 22 (5) Unique electronic identifier or routing code, 1 23 in combination with any required security code, access 1 24 code, or password. 1 25 c. "Suspected misuse of personal information" 1 26 means circumstances exist which would cause a 1 27 reasonable person to believe that an individual's 1 28 personal information is being used by an unauthorized 1 29 individual. Such circumstances include but are not 1 30 limited to either of the following: 1 31 (1) A tax identification number under which wages 1 32 are being reported by two or more individuals. 1 33 (2) A tax identification number of an individual 1 34 under the age of sixteen with reported wages exceeding 1 35 one thousand dollars for a single quarterly period. 1 36 2. a. Unless otherwise prohibited by state or 1 37 federal law, the department shall provide notice to 1 38 each affected individual if department records 1 39 indicate a suspected misuse of personal information. 1 40 Notice shall be made without unreasonable delay. If 1 41 the affected individual is a minor, notice shall be 1 42 provided to the minor's parent or guardian. 1 43 b. Notice of the suspected misuse of personal 1 44 information shall also be provided to an appropriate 1 45 law enforcement agency. 1 46 3. Notice provided to an affected individual shall 1 47 be clear and conspicuous and be provided by at least 1 48 one of the following: 1 49 a. Written notice to the affected individual's 1 50 last address of record. 2 1 b. Electronic mail notice, if the affected 2 2 individual has agreed to receive communications 2 3 electronically. 2 4 c. Telephonic notice, if the communication is made 2 5 directly with the affected individual.> 2 6 2 7 2 8 2 9 SANDS of Louisa 2 10 HF 2700.303 82 2 11 mg/mg/11799 -1-