House File 413 - Introduced HOUSE FILE BY DIX Passed House, Date Passed Senate, Date Vote: Ayes Nays Vote: Ayes Nays Approved A BILL FOR 1 An Act relating to the transmission of electronic mail including 2 the transmission of unsolicited bulk electronic mail, and the 3 solicitation of the purchase of prescription drugs and the 4 sale of adulterated or misbranded drugs through the use of 5 electronic mail or the internet, and providing for penalties. 6 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA: 7 TLSB 2239YH 81 8 kk/pj/5 PAG LIN 1 1 Section 1. NEW SECTION. 716A.1 DEFINITIONS. 1 2 As used in this chapter, unless the context otherwise 1 3 requires: 1 4 1. "Computer" means the same as defined in section 702.1A. 1 5 2. "Computer data" means the same as defined in section 1 6 702.1A. 1 7 3. "Computer network" means the same as defined in section 1 8 702.1A. 1 9 4. "Computer operation" means arithmetic, logical, 1 10 monitoring, storage, or retrieval functions, or any 1 11 combination thereof, and includes, but is not limited to, 1 12 communication with, storage of data to, or retrieval of data 1 13 from any device or human hand manipulation of electronic or 1 14 magnetic impulses. "Computer operation" for a particular 1 15 computer may also mean any function for which the computer was 1 16 generally designed. 1 17 5. "Computer program" means an ordered set of data 1 18 representing coded instructions or statements that, when 1 19 executed by a computer, causes the computer to perform one or 1 20 more computer operations. 1 21 6. "Computer services" means computer time or services, 1 22 including data processing services, internet services, 1 23 electronic mail services, electronic message services, or 1 24 information or data stored in connection therewith. 1 25 7. "Computer software" means a set of computer programs, 1 26 procedures, and associated documentation concerned with 1 27 computer data or with computer operation, a computer program, 1 28 or a computer network. 1 29 8. "Electronic mail service provider" means a person who 1 30 does either of the following: 1 31 a. Is an intermediary in sending or receiving electronic 1 32 mail. 1 33 b. Provides to end users of electronic mail services the 1 34 ability to send or receive electronic mail. 1 35 9. "Encryption" means the enciphering of intelligible data 2 1 into unintelligible form or the deciphering of unintelligible 2 2 data into intelligible form. 2 3 10. "Owner" means an owner or lessee of a computer or a 2 4 computer network or an owner, lessee, or licensee of computer 2 5 data, a computer program, or computer software. 2 6 11. "Person" means the same as defined in section 4.1. 2 7 12. "Property" means all of the following: 2 8 a. Real property. 2 9 b. Computers, computer equipment, computer networks, and 2 10 computer services. 2 11 c. Financial instruments, computer data, computer 2 12 programs, computer software, and all other personal property 2 13 regardless of whether they are any of the following: 2 14 (1) Tangible or intangible. 2 15 (2) In a format readable by humans or by a computer. 2 16 (3) In transit between computers or within a computer 2 17 network or between any devices which comprise a computer. 2 18 (4) Located on any paper or in any device on which it is 2 19 stored by a computer or by a person. 2 20 13. "Uses" means, when referring to a computer or computer 2 21 network, causing or attempting to cause any of the following: 2 22 a. A computer or computer network to perform or to stop 2 23 performing computer operations. 2 24 b. The withholding or denial of the use of a computer, 2 25 computer network, computer program, computer data, or computer 2 26 software to another user. 2 27 c. A person to put false information into a computer. 2 28 Sec. 2. NEW SECTION. 716A.2 TRANSMISSION OF UNSOLICITED 2 29 BULK ELECTRONIC MAIL == CRIMINAL PENALTIES. 2 30 1. A person who does any of the following is guilty of an 2 31 aggravated misdemeanor: 2 32 a. Uses a computer or computer network with the intent to 2 33 falsify or forge electronic mail transmission information or 2 34 other routing information in any manner in connection with the 2 35 transmission of unsolicited bulk electronic mail through or 3 1 into the computer network of an electronic mail service 3 2 provider or its subscribers. 3 3 b. Knowingly sells, gives, or otherwise distributes or 3 4 possesses with the intent to sell, give, or otherwise 3 5 distribute computer software that does any of the following: 3 6 (1) Is primarily designed or produced for the purpose of 3 7 facilitating or enabling the falsification of electronic mail 3 8 transmission information or other routing information. 3 9 (2) Has only limited commercially significant purpose or 3 10 use other than to facilitate or enable the falsification of 3 11 electronic mail transmission information or other routing 3 12 information. 3 13 (3) Is marketed by that person acting alone or with 3 14 another for use in facilitating or enabling the falsification 3 15 of electronic mail transmission information or other routing 3 16 information. 3 17 2. A person is guilty of a class "D" felony for committing 3 18 a violation of subsection 1 when either of the following 3 19 apply: 3 20 a. The volume of unsolicited bulk electronic mail 3 21 transmitted exceeds ten thousand attempted recipients in any 3 22 twenty=four=hour period, one hundred thousand attempted 3 23 recipients in any thirty=day time period, or one million 3 24 attempted recipients in any twelve=month time period. 3 25 b. The revenue generated from a specific unsolicited bulk 3 26 electronic mail transmission exceeds one thousand dollars or 3 27 the total revenue generated from all unsolicited bulk 3 28 electronic mail transmitted to any electronic mail service 3 29 provider by the person exceeds fifty thousand dollars. 3 30 3. A person is guilty of a class "D" felony if the person 3 31 knowingly hires, employs, uses, or permits a person less than 3 32 eighteen years of age to assist in the transmission of 3 33 unsolicited bulk electronic mail in violation of subsection 2. 3 34 4. Transmission of electronic mail from an organization to 3 35 a member of the organization shall not be a violation of this 4 1 section. 4 2 Sec. 3. NEW SECTION. 716A.3 SOLICITATIONS FOR 4 3 PRESCRIPTION DRUGS == CRIMINAL PENALTIES. 4 4 1. A person, other than a licensed pharmacist, physician, 4 5 dentist, podiatric physician, or veterinarian, who solicits 4 6 the purchase of a prescription drug, as defined in section 4 7 155A.3, through the use of electronic mail or the internet is 4 8 guilty of a simple misdemeanor. 4 9 2. A person who knowingly sells an adulterated or 4 10 misbranded drug through the use of electronic mail or the 4 11 internet is guilty of a class "D" felony. However, if the 4 12 death of a person occurs as the result of consuming a drug, as 4 13 defined in section 155A.3, sold in violation of this section, 4 14 the violation is a class "B" felony. 4 15 Sec. 4. NEW SECTION. 716A.4 USE OF ENCRYPTION == 4 16 CRIMINAL PENALTY. 4 17 A person who willfully uses encryption to further a 4 18 violation of this chapter is guilty of an offense which is 4 19 separate and distinct from the predicate criminal activity and 4 20 punishable as an aggravated misdemeanor. 4 21 Sec. 5. NEW SECTION. 716A.5 VENUE FOR CRIMINAL 4 22 VIOLATIONS. 4 23 For the purpose of venue, a violation of this chapter shall 4 24 be considered to have been committed in any county in which 4 25 any of the following apply: 4 26 1. An act was performed in furtherance of any course of 4 27 conduct which violated this chapter. 4 28 2. The owner has a place of business in the state. 4 29 3. An offender has control or possession of any proceeds 4 30 of the violation, or of any books, records, documents, 4 31 property, financial instrument, computer software, computer 4 32 program, computer data, or other material or objects used in 4 33 furtherance of the violation. 4 34 4. Access to a computer or computer network was made by 4 35 wires, electromagnetic waves, microwaves, or any other means 5 1 of communication. 5 2 5. The offender resides. 5 3 6. A computer which is an object or an instrument of the 5 4 violation is located at the time of the alleged offense. 5 5 Sec. 6. NEW SECTION. 716A.6 CIVIL RELIEF == DAMAGES. 5 6 1. A person who is injured by a violation of this chapter 5 7 may bring a civil action seeking relief from a person whose 5 8 conduct violated this chapter and recover any damages incurred 5 9 including loss of profits, attorney fees, and court costs. 5 10 2. A person who is injured by the transmission of 5 11 unsolicited bulk electronic mail in violation of this chapter, 5 12 may elect, in lieu of actual damages, to recover either of the 5 13 following: 5 14 a. The lesser of ten dollars for each unsolicited bulk 5 15 electronic mail message transmitted in violation of this 5 16 chapter, or twenty=five thousand dollars per day the messages 5 17 are transmitted by the violator. 5 18 b. One dollar for each intended recipient of an 5 19 unsolicited bulk electronic mail message where the intended 5 20 recipient is an end user of the electronic mail service 5 21 provider, or twenty=five thousand dollars for each day an 5 22 attempt is made to transmit an unsolicited bulk electronic 5 23 mail message to an end user of the electronic mail service 5 24 provider. 5 25 3. a. A violation of this chapter is a violation of 5 26 section 714.16, subsection 2, paragraph "a". All the powers 5 27 conferred upon the attorney general to accomplish the 5 28 objectives and carry out the duties prescribed pursuant to 5 29 section 714.16 are also conferred upon the attorney general to 5 30 enforce this chapter, including, but not limited to, the power 5 31 to issue subpoenas, adopt rules which shall have the force of 5 32 law, and seek injunctive relief and civil penalties. 5 33 b. In seeking reimbursement pursuant to section 714.16, 5 34 subsection 7, from a person who has committed a violation of 5 35 this chapter, the attorney general may seek an order from the 6 1 court that the person pay to the attorney general on behalf of 6 2 consumers the amounts for which the person would be liable 6 3 under subsection 1 or 2, for each consumer who has a cause of 6 4 action pursuant to this section. Section 714.16, as it 6 5 relates to consumer reimbursement, shall apply to consumer 6 6 reimbursement pursuant to this section. 6 7 4. At the request of any party to an action brought 6 8 pursuant to this section, the court may, in its discretion, 6 9 conduct all legal proceedings in such a way as to protect the 6 10 secrecy and security of the computer, computer network, 6 11 computer data, computer program, and computer software 6 12 involved in order to prevent possible recurrence of the same 6 13 or a similar act by another person, and to protect any trade 6 14 secrets of any party and in such a way as to protect the 6 15 privacy of nonparties who complain about violations pursuant 6 16 to this section. 6 17 5. This section shall not be construed to limit a person's 6 18 right to pursue any additional civil remedy otherwise allowed 6 19 by law. 6 20 6. An action brought pursuant to this section shall be 6 21 commenced before the earlier of five years after the last act 6 22 in the course of conduct constituting a violation of this 6 23 chapter or two years after the injured person discovers or 6 24 reasonably should have discovered the last act in the course 6 25 of conduct constituting a violation of this chapter. 6 26 7. Personal jurisdiction may be exercised over any person 6 27 who engages in any conduct in this state governed by this 6 28 chapter. 6 29 8. The injured person shall not have a cause of action 6 30 against the electronic mail service provider that merely 6 31 transmits the unsolicited bulk electronic mail over its 6 32 computer network. 6 33 Sec. 7. NEW SECTION. 716A.7 FORFEITURES FOR VIOLATIONS 6 34 OF THIS CHAPTER. 6 35 All property, including all income or proceeds earned but 7 1 not yet received from a third party as a result of a violation 7 2 of this chapter, used in connection with a violation of this 7 3 chapter, known by the owner thereof to have been used in 7 4 violation of this chapter, shall be subject to seizure and 7 5 forfeiture pursuant to chapter 809A. 7 6 Sec. 8. Chapter 714E, Code 2005, is repealed. 7 7 EXPLANATION 7 8 This bill relates to the transmission of electronic mail 7 9 including the transmission of unsolicited bulk electronic 7 10 mail, and the solicitation of the purchase of a prescription 7 11 drug and the sale of adulterated or misbranded drugs through 7 12 the use of electronic mail or the internet. 7 13 The bill prohibits the use of a computer or computer 7 14 network to falsify or force electronic mail transmission 7 15 information through an electronic mail service provider. The 7 16 bill prohibits the knowing sale or distribution of computer 7 17 software primarily designed to falsify electronic mail 7 18 transmission information, has limited commercially significant 7 19 purpose or use other than to facilitate false electronic mail 7 20 transmission information, or is marketed for use in 7 21 facilitating false electronic mail transmission information. 7 22 A person violating these provisions is guilty of an aggravated 7 23 misdemeanor. An aggravated misdemeanor is punishable by 7 24 confinement for no more than two years and a fine of at least 7 25 $500 but not more than $5,000. 7 26 However, a person violating the provisions is guilty of a 7 27 class "D" felony if the volume of unsolicited bulk electronic 7 28 mail is either transmitted to more than 10,000 recipients in 7 29 any 24=hour period, 100,000 recipients in any 30=day period, 7 30 1,000,000 recipients in any 12=month period, or if the revenue 7 31 from a specific transmission exceeds $1,000 or the revenues 7 32 from all transactions of the person exceed $50,000. A person 7 33 committing a violation shall also be guilty of a class "D" 7 34 felony if the person employs or uses a minor to assist in the 7 35 violation. 8 1 The bill provides that a person who is not a licensed 8 2 pharmacist, physician, dentist, podiatric physician, or 8 3 veterinarian that solicits the purchase of a prescription drug 8 4 through the use of electronic mail or the internet is guilty 8 5 of a simple misdemeanor. A simple misdemeanor is punishable 8 6 by confinement for no more than 30 days or a fine of at least 8 7 $50 but not more than $500 or by both. A person who knowingly 8 8 sells an adulterated or misbranded drug through the use of 8 9 electronic mail or the internet is guilty of a class "D" 8 10 felony. A class "D" felony is punishable by confinement for 8 11 no more than five years and a fine of at least $750 but not 8 12 more than $7,500. In the event the adulterated or misbranded 8 13 drug sold causes the death of a person who consumes the drug, 8 14 the penalty for the sale is a class "B" felony. A class "B" 8 15 felony is punishable by confinement for no more than 25 years. 8 16 The bill prohibits the use of encryption to further a 8 17 violation of new Code chapter 716A and establishes a separate 8 18 penalty for the use of encryption as an aggravated 8 19 misdemeanor. An aggravated misdemeanor is punishable by 8 20 confinement for no more than two years and a fine of at least 8 21 $500 but not more than $5,000. 8 22 The bill provides for the appropriate place of venue for 8 23 prosecution of criminal violations of new Code chapter 716A. 8 24 The bill provides that persons injured by violations of Code 8 25 chapter 716A may bring a civil action seeking damages, 8 26 attorney fees, and court costs. In a civil action brought by 8 27 a person injured by the transmission of unsolicited bulk 8 28 electronic mail, the person may choose to seek statutory 8 29 damages instead of actual damages. The bill provides that 8 30 statutory damages be the lesser of $10 for each unsolicited 8 31 message transmitted in violation of Code chapter 716A or 8 32 $25,000 per day the unsolicited messages are transmitted by 8 33 the violator, or may seek statutory damages in the amount of 8 34 $1 for each intended recipient of an unsolicited message or 8 35 $25,000 for each day an attempt is made to transmit an 9 1 unsolicited message in violation of Code chapter 716A. The 9 2 bill provides that the attorney general may enforce violations 9 3 of the provisions of Code chapter 716A as violations of Code 9 4 section 714.16 relating to consumer frauds and seek such 9 5 reimbursement as an injured person is also entitled under Code 9 6 chapter 716A. 9 7 The court may take necessary steps to protect the secrecy 9 8 and security of information brought before the court to 9 9 prevent recurrence of the actions, to protect trade secrets, 9 10 and to protect the privacy of the person bringing the action. 9 11 A civil action brought against a violator of Code chapter 716A 9 12 must be commenced within five years after the last violation 9 13 or within two years after discovery of the violation of the 9 14 injured person, whichever is sooner. 9 15 The bill provides that property used in connection with a 9 16 violation of Code chapter 716A shall be subject to seizure and 9 17 forfeiture pursuant to Code chapter 809A. The bill repeals 9 18 Code chapter 714E relating to bulk electronic mail 9 19 transmissions. 9 20 LSB 2239YH 81 9 21 kk:rj/pj/5