Senate File 2277 - Introduced



                                       SENATE FILE       
                                       BY  COMMITTEE ON JUDICIARY

                                       (SUCCESSOR TO SSB 3213)


    Passed Senate, Date               Passed House,  Date             
    Vote:  Ayes        Nays           Vote:  Ayes        Nays         
                 Approved                            

                                      A BILL FOR

  1 An Act relating to offenses against identity by establishing a
  2    procedure to secure credit information and providing a
  3    penalty.
  4 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
  5 TLSB 6012SV 82
  6 rn/rj/14

PAG LIN



  1  1    Section 1.  NEW SECTION.  714F.1  DEFINITIONS.
  1  2    For the purposes of this chapter, unless the context
  1  3 otherwise requires:
  1  4    1.  "Consumer" means an individual who is a resident of
  1  5 this state.
  1  6    2.  "Consumer report" means the same as defined in 15
  1  7 U.S.C. } 1681a(d).
  1  8    3.  "Consumer reporting agency" means the same as defined
  1  9 in 15 U.S.C. } 1681a(f).
  1 10    4.  "Identification information" means as defined in
  1 11 section 715A.8.
  1 12    5.  "Identity theft" means as used in section 715A.8.
  1 13    6.  "Proper identification" means the same as defined in 15
  1 14 U.S.C. } 1681h(a)(1).
  1 15    7.  "Security freeze" means a notice placed in a consumer's
  1 16 report, at the request of the consumer and subject to certain
  1 17 exceptions, that prohibits a consumer reporting agency from
  1 18 releasing the consumer's report or score relating to the
  1 19 extension of credit.
  1 20    Sec. 2.  NEW SECTION.  714F.2  SECURITY FREEZE.
  1 21    A consumer may submit by certified mail to a consumer
  1 22 reporting agency a written request for a security freeze.  The
  1 23 consumer must submit proper identification and the applicable
  1 24 fee with the request.  Within five business days after
  1 25 receiving the request, the consumer reporting agency shall
  1 26 commence the security freeze.  Within ten business days after
  1 27 commencing the security freeze, the consumer reporting agency
  1 28 shall send a written confirmation to the consumer of the
  1 29 security freeze, a personal identification number or password,
  1 30 other than the consumer's social security number, for the
  1 31 consumer to use in authorizing the suspension or removal of
  1 32 the security freeze, including information on how the security
  1 33 freeze may be temporarily suspended.
  1 34    Sec. 3.  NEW SECTION.  714F.3  TEMPORARY SUSPENSION.
  1 35    A consumer may request that a security freeze be
  2  1 temporarily suspended to allow the consumer reporting agency
  2  2 to release the consumer report for a specific time period.
  2  3 The consumer reporting agency may develop procedures to
  2  4 expedite the receipt and processing of requests which may
  2  5 involve the use of telephones, facsimile transmissions, the
  2  6 internet, or other electronic media.  The consumer reporting
  2  7 agency shall comply with the request within three business
  2  8 days after receiving the request.  The consumer's request
  2  9 shall include all of the following:
  2 10    1.  Proper identification.
  2 11    2.  The personal identification number or password provided
  2 12 by the consumer reporting agency.
  2 13    3.  Explicit instructions of the specific time period
  2 14 designated for suspension of the security freeze.
  2 15    4.  Payment of the applicable fee.
  2 16    Sec. 4.  NEW SECTION.  714F.4  REMOVAL.
  2 17    A security freeze remains in effect until the consumer
  2 18 requests that the security freeze be removed.  A consumer
  2 19 reporting agency shall remove a security freeze within three
  2 20 business days after receiving a request for removal that
  2 21 includes proper identification of the consumer, the personal
  2 22 identification number or password provided by the consumer
  2 23 reporting agency, and payment of the applicable fee.
  2 24    Sec. 5.  NEW SECTION.  714F.5  FEES.
  2 25    1.  A consumer reporting agency shall not charge any fee to
  2 26 a consumer who is the victim of identity theft for commencing
  2 27 a security freeze, temporary suspension, or removal if with
  2 28 the initial security freeze request, the consumer submits a
  2 29 valid copy of the police report concerning the unlawful use of
  2 30 identification information by another person.
  2 31    2.  A consumer reporting agency may charge a fee not to
  2 32 exceed ten dollars to a consumer who is not the victim of
  2 33 identity theft for each security freeze, removal, or for
  2 34 reissuing a personal identification number or password if the
  2 35 consumer fails to retain the original number.  The consumer
  3  1 reporting agency may charge a fee not to exceed twelve dollars
  3  2 for each temporary suspension of a security freeze.
  3  3    Sec. 6.  NEW SECTION.  714F.6  THIRD PARTIES.
  3  4    If a third party requests a consumer report that is subject
  3  5 to a security freeze, the consumer reporting agency may advise
  3  6 the third party that a security freeze is in effect.  If the
  3  7 consumer does not expressly authorize the third party to have
  3  8 access to the consumer report through a temporary suspension
  3  9 of the security freeze, the third party shall not be given
  3 10 access to the consumer report but may treat a credit
  3 11 application as incomplete.
  3 12    Sec. 7.  NEW SECTION.  714F.7  MISREPRESENTATION OF FACT.
  3 13    A consumer reporting agency may suspend or remove a
  3 14 security freeze upon a material misrepresentation of fact by
  3 15 the consumer.  However, the consumer reporting agency shall
  3 16 send notice to the consumer in writing prior to suspending or
  3 17 removing the security freeze.
  3 18    Sec. 8.  NEW SECTION.  714F.8  EXCEPTIONS.
  3 19    A security freeze shall not apply to the following persons
  3 20 or entities:
  3 21    1.  A person or person's subsidiary, affiliate, agent, or
  3 22 assignee with which the consumer has or prior to assignment
  3 23 had an account, contract, or debtor=creditor relationship for
  3 24 the purposes of reviewing the account or collecting the
  3 25 financial obligation owing for the account, contract, or debt,
  3 26 or extending credit to a consumer with a prior or existing
  3 27 account, contract, or debtor=creditor relationship.
  3 28 "Reviewing the account" includes activities related to account
  3 29 maintenance, monitoring, credit line increases, and account
  3 30 upgrades and enhancements.
  3 31    2.  A subsidiary, affiliate, agent, assignee, or
  3 32 prospective assignee of a person to whom access has been
  3 33 granted under a temporary suspension for purposes of
  3 34 facilitating the extension of credit or another permissible
  3 35 use.
  4  1    3.  A person acting pursuant to a court order, warrant, or
  4  2 subpoena.
  4  3    4.  Child support enforcement officials when investigating
  4  4 a child support case pursuant to Title IV=D or Title XIX of
  4  5 the federal Social Security Act.
  4  6    5.  The department of human services or its agents or
  4  7 assignees acting to investigate fraud under the medical
  4  8 assistance program.
  4  9    6.  The department of revenue or local taxing authorities;
  4 10 or any of their agents or assignees, acting to investigate or
  4 11 collect delinquent taxes or assessments, including interest
  4 12 and penalties and unpaid court orders, or to fulfill any of
  4 13 their other statutory or other responsibilities.
  4 14    7.  A person's use of credit information for prescreening
  4 15 as provided by the federal Fair Credit Reporting Act.
  4 16    8.  A person for the sole purpose of providing a credit
  4 17 file monitoring subscription service to which the consumer has
  4 18 subscribed.
  4 19    9.  A consumer reporting agency for the sole purpose of
  4 20 providing a consumer with a copy of the consumer's consumer
  4 21 report upon the consumer's request.
  4 22    10.  A person's use of a consumer report in connection with
  4 23 the business of insurance.
  4 24    Sec. 9.  NEW SECTION.  714F.9  WRITTEN CONFIRMATION.
  4 25    After a security freeze is in effect, a consumer reporting
  4 26 agency may post a name, date of birth, social security number,
  4 27 or address change in a consumer report provided written
  4 28 confirmation is sent to the consumer within thirty days of
  4 29 posting the change.  For an address change, written
  4 30 confirmation shall be sent to both the new and former
  4 31 addresses.  Written confirmation is not required to correct
  4 32 spelling and typographical errors.
  4 33    Sec. 10.  NEW SECTION.  714F.10  WAIVER VOID.
  4 34    A waiver by a consumer of the provisions of this chapter is
  4 35 contrary to public policy, and is void and unenforceable.
  5  1    Sec. 11.  NEW SECTION.  714F.11  ENFORCEMENT.
  5  2    A person who violates this chapter violates section 714.16,
  5  3 subsection 2, paragraph "a".  All powers conferred upon the
  5  4 attorney general to accomplish the objectives and carry out
  5  5 the duties prescribed in section 714.16 are also conferred
  5  6 upon the attorney general to enforce this chapter, including
  5  7 but not limited to the power to issue subpoenas, adopt rules,
  5  8 and seek injunctive relief and a monetary award for civil
  5  9 penalties, attorney fees, and costs.  Additionally, the
  5 10 attorney general may seek and recover the greater of five
  5 11 hundred dollars or actual damages for each customer injured by
  5 12 a violation of this chapter.
  5 13                           EXPLANATION
  5 14    This bill concerns the protection of a person's identity.
  5 15    The bill creates new Code chapter 714F that allows an
  5 16 individual, the consumer, to place a hold on the individual's
  5 17 consumer report to prevent a consumer reporting agency from
  5 18 releasing any information relating to the individual's
  5 19 creditworthiness without first obtaining the individual's
  5 20 express authorization.  This "security freeze" may be
  5 21 temporarily suspended to allow a consumer reporting agency to
  5 22 release a consumer report for a specific time period.  A
  5 23 security freeze remains in effect until the individual
  5 24 requests its removal.
  5 25    The bill provides that a consumer reporting agency cannot
  5 26 charge any fees to an individual who is the victim of identify
  5 27 theft.  Other individuals pay a fee up to $10 per security
  5 28 freeze, removal, or for reissuing a necessary password if the
  5 29 individual fails to retain it, and up to $12 per temporary
  5 30 suspension request.
  5 31    The bill addresses third parties that seek a consumer
  5 32 report, misrepresentation of a material fact by an individual,
  5 33 and lists exceptions to the security freeze, including a
  5 34 person with a prior debtor=creditor relationship.
  5 35    The bill provides that a waiver of the protection offered
  6  1 by the security freeze provision is void and unenforceable.
  6  2    The bill contains enforcement provisions.  A violation is
  6  3 an offense under Code section 714.16 and is subject to
  6  4 enforcement, including injunctive relief and money damages, by
  6  5 the attorney general.
  6  6 LSB 6012SV 82
  6  7 rn/rj/14