Amendment ASA2-AB621

AB621-ASA2,3,25 (3) Upon receipt of a bill under sub. (2), the department of administration shall direct one or more state agencies or authorities to prepare a privacy impact statement with respect to that bill. Each privacy impact statement shall describe the impact upon personal privacy that would result from enactment of the bill and analyze the desirability of that impact from the standpoint of public policy.

AB621-ASA2,4,3 (4) Each state agency or authority receiving a bill under sub. (3) shall provide the statement required under sub. (3) to the department of administration within 15 days after the department's directive.

AB621-ASA2,4,8 (5) Upon receiving a privacy impact statement under sub. (4), the department of administration shall provide one copy to the legislative reference bureau, one copy to the principal author of the bill, and one copy to the chief clerk of the house of the legislature in which the bill originated. The chief clerk shall thereupon distribute the statement in the same manner as amendments to the bill are distributed.

AB621-ASA2,4,13 (6) Whenever a bill requires preparation of a privacy impact statement under this section, the legislative reference bureau shall include a notation to that effect on the jacket of the bill when the jacket is prepared. If the preparation of a privacy impact statement is requested by a house of the legislature, the chief clerk of that house shall include a notation to that effect on the jacket of the bill.

AB621-ASA2,4,17 (7) Whenever a privacy impact statement is required or requested for any bill under this section, a standing committee to which the bill is referred may not hold a public hearing on the bill or report the bill until the statement is received by the chief clerk of the house in which the bill originated.

AB621-ASA2, s. 2 Section 2. 19.32 (1bg), (1de), (1dm), (2g) and (4) of the statutes are created to read:

AB621-ASA2,4,22 19.32 (1bg) "Employee" means an individual who is engaged in employment in this state, other than an individual holding a state public office or a local public office.

AB621-ASA2,4,23 (1de) "Local governmental unit" has the meaning given in s. 19.42 (7u).

AB621-ASA2,5,2 (1dm) "Local public office" has the meaning given in s. 19.42 (7w), and also includes any appointive office or position of a local governmental unit in which an individual serves as the head of a department, agency, or division of the local governmental unit.

AB621-ASA2,5,4 (2g) "Record subject" means an individual about whom personally identifiable information is contained in a record.

AB621-ASA2,5,6 (4) "State public office" has the meaning given in s. 19.42 (13), but does not include a position identified in s. 20.923 (6) (em) to (gm).

AB621-ASA2, s. 3 Section 3. 19.345 of the statutes is created to read:

AB621-ASA2,5,11 19.345 Time computation. In ss. 19.33 to 19.39, when a time period is provided for performing an act, whether the period is expressed in hours or days, the whole of Saturday, Sunday, and any legal holiday, from midnight to midnight, shall be excluded in computing the period.

AB621-ASA2, s. 4 Section 4. 19.356 of the statutes is created to read:

AB621-ASA2,5,17 19.356 Notice to record subject; right of action. (1) Except as authorized in this section or as otherwise provided by statute, no authority is required to notify a record subject prior to providing to a requester access to a record containing information pertaining to that record subject, and no person is entitled to judicial review of the decision of an authority to provide a requester with access to a record.

AB621-ASA2,6,4 (2) (a) Except as provided in pars. (b) to (d) and as otherwise authorized or required by statute, if an authority decides to permit access to a record containing information relating to an employee that is created or kept by the authority as a result of the authority's investigation into a disciplinary matter involving the employee or possible violation by the employee of a statute, ordinance, rule, regulation, or policy of the employee's employer, or any record obtained by the authority through a subpoena or search warrant, the authority shall, before permitting access and within 72 hours after making the decision to permit access, serve written notice of that decision on any record subject to whom that record pertains, either by certified mail or by personally serving the notice on the subject. The notice shall briefly describe the requested record and include a description of the rights of the record subject under subs. (3) and (4).

AB621-ASA2,6,9 (b) Paragraph (a) does not apply to an authority who provides access to a record pertaining to an employee to the employee who is the subject of the record or to his or her representative to the extent required under s. 103.13 or to a collective bargaining representative to the extent required to fulfill a duty to bargain or pursuant to a collective bargaining agreement under ch. 111.

AB621-ASA2,6,15 (c) Paragraph (a) does not apply to an investigation by an authority who or which is charged with the responsibility to enforce a law, ordinance, rule, or regulation that is applicable to individuals other than officers or employees of the authority or persons under contract with the authority unless the investigation involves an officer or employee of the authority or a person under contract with the authority.

AB621-ASA2,6,18 (d) Paragraph (a) does not apply to access to a record produced in relation to a function specified in s. 106.54 or 230.45 or subch. II of ch. 111 if the record is provided by an authority having responsibility for that function.

AB621-ASA2,6,21 (3) Within 5 days after receipt of a notice under sub. (2), any record subject may provide written notification to the authority of his or her intent to seek a court order restraining the authority from providing access to the requested record.

AB621-ASA2,7,2 (4) Within 10 days after receipt of a notice under sub. (2), any record subject may commence an action seeking a court order to restrain the authority from providing access to the requested record. If a record subject commences such an action, the record subject shall name the authority as a defendant. Notwithstanding s. 803.09, the requester may intervene in the action as a matter of right.

AB621-ASA2,7,12 (5) An authority shall not provide access to a requested record within 12 days of sending a notice pertaining to that record under sub. (2). In addition, if the record subject commences an action under sub. (4), the authority shall not provide access to the requested record during pendency of the action. If the record subject appeals or petitions for review of a decision of the court or the time for appeal or petition for review of a decision adverse to the record subject has not expired, the authority shall not provide access to the requested record until any appeal is decided, until the period for appealing or petitioning for review expires, until a petition for review is denied, or until the authority receives written notice from the record subject that an appeal or petition for review will not be filed, whichever occurs first.

AB621-ASA2,7,15 (6) The court may restrain the authority from providing access to the requested record. The court shall apply substantive common law principles construing the right to inspect, copy, or receive copies of records in making its decision.

AB621-ASA2,7,21 (7) The court shall not grant any request by a requester to delay the proceedings. The court shall issue a decision within 10 days after the filing of the summons and complaint and proof of service of the summons and complaint upon the defendant and the requester, unless a party demonstrates cause for extension of this period. In any event, the court shall issue a decision within 30 days after those filings are complete.

AB621-ASA2,7,24 (8) If a party appeals a decision of the court under sub. (7), the court of appeals shall grant precedence to the appeal over all other matters not accorded similar precedence by law.

AB621-ASA2, s. 5 Section 5. 19.36 (10) and (11) of the statutes are created to read:

AB621-ASA2,8,6 19.36 (10) Employee personnel records. Unless access is specifically authorized or required by statute, an authority shall not provide access to records containing the following information under s. 19.35 (1), except to an employee or the employee's representative to the extent required under s. 103.13 or to a collective bargaining representative to the extent required to fulfill a duty to bargain under ch. 111 or pursuant to a collective bargaining agreement under ch. 111:

AB621-ASA2,8,9 (a) Information prepared or provided by an employer concerning the home address or telephone number of an employee, unless the employee authorizes the authority to provide access to such information.

AB621-ASA2,8,12 (b) Information relating to the current investigation of a possible criminal offense or possible misconduct connected with employment by an employee prior to disposition of the investigation.

AB621-ASA2,8,14 (c) Information pertaining to an employee's employment examination, except an examination score if access to that score is not otherwise prohibited.

AB621-ASA2,8,20 (d) Information relating to one or more specific employees that is used by an authority or by the employer of the employees for staff management planning, including performance evaluations, judgments or recommendations concerning future salary adjustments or other wage treatments, management bonus plans, promotions, job assignments, letters of reference, or other comments or ratings relating to employees.

AB621-ASA2,8,25 (11) Information relating to certain employees. Except as otherwise authorized or required by statute, no authority may permit access to a record prepared or provided by an employer, other than an authority, that contains personally identifiable information relating to an employee of that employer, unless the employee authorizes the authority to provide access to that information.

AB621-ASA2, s. 6 Section 6. 22.21 of the statutes is created to read:

AB621-ASA2,9,7 22.21 Privacy and security information officers. (1) The chief information officer shall appoint an employee of the department to serve as a privacy information officer. The privacy information officer shall provide information to employees of the department and other persons who are or may be the subject of any information maintained or processed by the department concerning applicable laws, rules, and regulations governing the protection of privacy.

AB621-ASA2,9,10 (2) The chief information officer shall appoint an employee of the department to serve as a security information officer. The security information officer shall ensure the security of information maintained or processed by the department.

AB621-ASA2, s. 7 Section 7. 36.11 (35) (title) of the statutes is renumbered 36.32 (title).

AB621-ASA2, s. 8 Section 8. 36.11 (35) of the statutes is renumbered 36.32 (2) and amended to read:

AB621-ASA2,9,22 36.32 (2) The board An institution of higher education may assign to each student enrolled in the system institution a unique identification number. The board An institution of higher education shall not assign to any student an identification number that is identical to or incorporates the student's social security number. This subsection does not prohibit the board an institution of higher education from requiring a student to disclose his or her social security number, nor from using a student's social security number if such use is required by a federal or state agency or private organization in order for the system or the student to participate in a particular program.

AB621-ASA2, s. 9 Section 9. 36.32 (1) of the statutes is created to read:

AB621-ASA2,9,25 36.32 (1) In this section, "institution of higher education" means an institution within the system, or a private educational institution located in this state that awards a bachelor's or higher degree or provides a program that is acceptable toward such a degree.

AB621-ASA2, s. 10 Section 10. 36.38 of the statutes is created to read:

AB621-ASA2,10,9 36.38 Policy on privacy in athletic locker rooms. Each institution and college campus shall adopt a written policy on who may enter and remain, to interview or seek information from any person, in a locker room being used by an athletic team representing the institution or college campus. The policy shall reflect the privacy interests of members of athletic teams representing the institution or college campus.

AB621-ASA2, s. 11 Section 11. 38.12 (12) of the statutes is created to read:

AB621-ASA2,10,15 38.12 (12) Policy on privacy in athletic locker rooms. The district board shall adopt a written policy on who may enter and remain, to interview or seek information from any person, in a locker room being used by an athletic team representing the district. The policy shall reflect the privacy interests of members of athletic teams representing the district.

AB621-ASA2, s. 12 Section 12. 39.49 of the statutes is created to read:

AB621-ASA2,10,21 39.49 Policy on privacy in athletic locker rooms. (1) In this section, "institution of higher education" means a private educational institution that awards a bachelor's or higher degree or provides a program that is acceptable for credit toward such a degree, and that fields an athletic team that represents the institution.

AB621-ASA2,11,2 (2) Each institution of higher education shall adopt a written policy on who may enter and remain, to interview or seek information from any person, in a locker room being used by an athletic team representing the institution. The policy shall reflect the privacy interests of members of athletic teams representing the institution.

AB621-ASA2, s. 13 Section 13. 40.07 (1) (intro.) and (3) of the statutes are amended to read:

AB621-ASA2,11,7 40.07 (1) (intro.) Notwithstanding any other statutory provision, individual personal information in the records of the department is not a public record and shall not be disclosed, unless subject to access under s. 19.35 (1), but access to that information may be provided, unless prohibited under s. 19.36 (10), if:

AB621-ASA2,11,10 (3) The department shall not furnish lists of participants, annuitants or beneficiaries to any person or organization except as permitted under s. 19.36 (10) and as required for the proper administration of the department.

AB621-ASA2, s. 14 Section 14. 48.236 (4) (a) of the statutes is amended to read:

AB621-ASA2,12,7 48.236 (4) (a) Inspect any reports and records relating to the child who is the subject of the proceeding, the child's family, and any other person residing in the same home as the child that are relevant to the subject matter of the proceeding, including records discoverable under s. 48.293, examination reports under s. 48.295 (2), law enforcement reports and records under ss. 48.396 (1) and 938.396 (1), court records under ss. 48.396 (2) (a) and 938.396 (2) (a), social welfare agency records under ss. 48.78 (2) (a) and 938.78 (2) (a), abuse and neglect reports and records under s. 48.981 (7) (a) 11r., and pupil records under s. 118.125 (2) (L). The order shall also require the custodian of any report or record specified in this paragraph to permit the court-appointed special advocate to inspect the report or record on presentation by the court-appointed special advocate of a copy of the order. A court-appointed special advocate that obtains access to a report or record described in this paragraph shall keep the information contained in the report or record confidential and may disclose that information only to the court. If a court-appointed special advocate discloses any information to the court under this paragraph, the court-appointed special advocate shall also disclose that information to all parties to the proceeding. If a court-appointed special advocate discloses information in violation of the confidentiality requirement specified in this paragraph, the court-appointed special advocate is liable to any person damaged as a result of that disclosure for such damages as may be proved and, notwithstanding s. 814.04 (1), for such costs and reasonable actual attorney fees as may be incurred by the person damaged.

AB621-ASA2, s. 15 Section 15. 48.396 (1) of the statutes is amended to read:

AB621-ASA2,13,5 48.396 (1) Law enforcement officers' records of children shall be kept separate from records of adults. Law enforcement officers' records of the adult expectant mothers of unborn children shall be kept separate from records of other adults. Law enforcement officers' records of children and the adult expectant mothers of unborn children shall not be open to inspection or their contents disclosed except under sub. (1b), (1d), (1h), (1j), (1k), or (5) or s. 48.293 or by order of the court. This subsection does not apply to the representatives of newspapers or other reporters of news the news media who wish to obtain information for the purpose of reporting news without revealing the identity of the child or adult expectant mother involved,; to the confidential exchange of information between the police and an agency, as defined in s. 48.38 (1) (a) or 938.78 (1), officials of the school attended by the child, or other law enforcement or social welfare agencies; or to children 10 years of age or older who are subject to the jurisdiction of the court of criminal jurisdiction. A public school official who obtains information under this subsection shall keep the information confidential as required under s. 118.125, and a private school official who obtains information under this subsection shall keep the information confidential in the same manner as is required of a public school official under s. 118.125. A law enforcement agency that obtains information under this subsection shall keep the information confidential as required under this subsection and s. 938.396 (1). A social welfare agency An agency, as defined in s. 48.38 (1) (a) or 938.78 (1), that obtains information under this subsection shall keep the information confidential as required under ss. 48.78 and 938.78.

AB621-ASA2, s. 16 Section 16. 48.396 (1h) of the statutes is created to read:

AB621-ASA2,13,15 48.396 (1h) If requested by another law enforcement agency, a law enforcement agency may, subject to official agency policy, disclose to the other law enforcement agency any information in its records relating to a child or an adult expectant mother of an unborn child as necessary for the other law enforcement agency to pursue an investigation of any alleged criminal or delinquent activity. A law enforcement agency that obtains information under this paragraph shall keep the information confidential as required under sub. (1) and s. 938.396 (1) and may disclose the information only for the purpose of pursuing that investigation or as permitted under sub. (1) or s. 938.396 (1).

AB621-ASA2, s. 17 Section 17. 48.396 (1j) of the statutes is created to read:

AB621-ASA2,14,5 48.396 (1j) If requested by a court assigned to exercise jurisdiction under this chapter and ch. 938, a court exercising jurisdiction under s. 48.16, a court exercising jurisdiction under s. 938.17 (2), or a person representing the interests of the public under s. 48.09 or 938.09, a law enforcement agency may, subject to official agency policy, disclose to the requester any information in its records relating to a child or an adult expectant mother of an unborn child as necessary for the court to conduct, or the person representing the interests of the public to prepare for, any proceedings in the court. A court that obtains information under this paragraph shall keep the information confidential as required under sub. (2) (a) and s. 938.396 (2) (a) and may disclose the information only for the purpose of conducting those proceedings or as permitted under sub. (2) (a) and s. 938.396 (2) (a). A person representing the interests of the public who obtains any information under this paragraph shall keep the information confidential and may disclose the information only as necessary for the person to perform the person's official duties relating to those proceedings.

AB621-ASA2, s. 18 Section 18. 48.396 (1k) of the statutes is created to read:

AB621-ASA2,14,15 48.396 (1k) If requested by any person authorized to provide intake or dispositional services under s. 48.067, 48.069, 938.067, or 938.069 or any other person employed by an agency, as defined in s. 48.38 (1) (a) or 938.78 (1), to provide any other professional services, a law enforcement agency may, subject to official agency policy, disclose to the person any information in its records relating to a child or an adult expectant mother of an unborn child as necessary for the person to provide those services. A person who obtains any information under this paragraph shall keep the information confidential and may disclose the information only as necessary for the person to provide those services.

AB621-ASA2, s. 19 Section 19. 48.396 (2) (c) of the statutes is created to read:

AB621-ASA2,15,2 48.396 (2) (c) Upon request of any law enforcement agency to review court records for the purpose of pursuing an investigation of any alleged delinquent or criminal activity, the court shall open for inspection by any authorized representative of the requester the records of the court relating to a child or an adult expectant mother of an unborn child who has been the subject of a proceeding under this chapter as necessary for the law enforcement agency to pursue the investigation. A law enforcement agency that obtains information under this paragraph shall keep the information confidential as required under sub. (1) and s. 938.396 (1) and may disclose the information only for the purpose of pursuing that investigation or as permitted under sub. (1) or s. 938.396 (1).

AB621-ASA2, s. 20 Section 20. 48.396 (2) (g) of the statutes is renumbered 48.396 (2) (gm) and amended to read:

AB621-ASA2,15,19 48.396 (2) (gm) Upon request of any other court assigned to exercise jurisdiction under this chapter and ch. 938, a district attorney or corporation counsel any court exercising jurisdiction under s. 48.16, any court exercising jurisdiction under s. 938.17 (2), or any person representing the interests of the public under s. 48.09 or 938.09 to review court records for the purpose of conducting or preparing for any proceeding in that other court, the court shall open for inspection by any authorized representative of the requester the records of the court relating to any child who has been the subject of a proceeding under this chapter. A court that obtains information under this paragraph shall keep the information confidential as required under par. (a) and s. 938.396 (2) (a) and may disclose the information only for the purpose of conducting those proceedings or as permitted under par. (a) and s. 938.396 (2) (a). A person representing the interests of the public who obtains any information under this paragraph shall keep the information confidential and may disclose the information only as necessary for the person to perform the person's official duties relating to that proceeding.

AB621-ASA2, s. 21 Section 21. 48.396 (2) (gr) of the statutes is created to read:

AB621-ASA2,16,4 48.396 (2) (gr) Upon request of any person authorized to provide intake or dispositional services under s. 48.067, 48.069, 938.067, or 938.069 or any other person employed by an agency, as defined in s. 48.38 (1) (a) or 938.78 (1), to provide any other professional services to review court records for the purpose of performing those services, the court shall open for inspection by the person the records of the court relating to a child or an adult expectant mother of an unborn child who has been the subject of a proceeding under this chapter. A person who obtains any information under this paragraph shall keep the information confidential and may disclose the information only as necessary for the person to provide those services.

AB621-ASA2, s. 22 Section 22. 48.396 (5) (a) (intro.) of the statutes is amended to read:

AB621-ASA2,16,9 48.396 (5) (a) (intro.) Any person who is denied access to a record under sub. (1), (1b) or, (1d), (1h), (1j), or (1k) may petition the court to order the disclosure of the records governed by the applicable subsection record. The petition shall be in writing and shall describe as specifically as possible all of the following:

AB621-ASA2, s. 23 Section 23. 48.78 (2) (b) of the statutes is amended to read:

AB621-ASA2,16,22 48.78 (2) (b) Paragraph (a) does not apply to the confidential exchange of information between an agency and another social welfare agency, a law enforcement agency, a public school, or a private school regarding an individual in the care or legal custody of the agency. A social welfare An agency that obtains information under this paragraph shall keep the information confidential as required under this section and s. 938.78. A law enforcement agency that obtains information under this paragraph shall keep the information confidential as required under ss. 48.396 (1) and 938.396 (1). A public school that obtains information under this paragraph shall keep the information confidential as required under s. 118.125, and a private school that obtains information under this paragraph shall keep the information confidential in the same manner as is required of a public school under s. 118.125.

AB621-ASA2, s. 24 Section 24. 100.52 (1) (bg) and (br) of the statutes are created to read:

AB621-ASA2,17,3 100.52 (1) (bg) "Blocking service" means a service that allows a person who makes a telephone call to withhold his or her telephone number or name from a person who receives the telephone call and who uses a caller identification service.

AB621-ASA2,17,6 (br) "Caller identification service" means a service that allows a person who receives a telephone call to identify the telephone number or name of the person making the telephone call.

AB621-ASA2, s. 25 Section 25. 100.52 (4) (a) 4. of the statutes is created to read:

AB621-ASA2,17,8 100.52 (4) (a) 4. Use a blocking service when making a telephone solicitation.

AB621-ASA2, s. 26 Section 26. 118.39 of the statutes is created to read:

AB621-ASA2,17,16 118.39 Policy on privacy in athletic locker rooms. Each school board, and the governing body of each private school that fields an athletic team representing the school, shall adopt a written policy on who may enter and remain, to interview or seek information from any person, in a locker room being used by an athletic team representing the private school or representing a public school in the school district. The policy shall reflect the privacy interests of members of athletic teams representing the school.

AB621-ASA2, s. 27 Section 27. 146.81 (1) (fm) of the statutes is amended to read:

AB621-ASA2,17,18 146.81 (1) (fm) A pharmacist or pharmacy licensed under ch. 450.

AB621-ASA2, s. 28 Section 28. 146.81 (4) of the statutes is amended to read:

AB621-ASA2,18,2 146.81 (4) "Patient health care records" means all records related to the health of a patient prepared by or under the supervision of or owned by a health care provider, including the records required under s. 146.82 (2) (d) and (3) (c), but not those records subject to s. 51.30, reports collected under s. 69.186, records of tests administered under s. 252.15 (2) (a) 7., 343.305, 938.296 (4) or (5) or 968.38 (4) or (5), fetal monitor tracings, as defined under s. 146.817 (1), or a pupil's physical health records maintained by a school under s. 118.125. ``Patient health care records" also includes health summary forms prepared under s. 302.388 (2).

AB621-ASA2, s. 29 Section 29. 146.82 (2) (bm) of the statutes is created to read:

AB621-ASA2,18,7 146.82 (2) (bm) Except as otherwise permitted under 45 CFR Parts 160 and 164, no recipient of a patient health care record under par. (a) may use identifying information in the record to market a service or product to a patient or health care provider.

AB621-ASA2, s. 30 Section 30. 146.84 (1) (d) of the statutes is created to read:

AB621-ASA2,18,13 146.84 (1) (d) Any person who obtains a patient health care record from a pharmacy or pharmacist under circumstances that constitute a violation of s. 146.82 or 146.83 in a manner that is knowing and willful shall be liable to any person injured as a result of the violation for actual damages to that person, exemplary damages of not more than $25,000, costs, and reasonable actual attorney fees.

AB621-ASA2, s. 31 Section 31. 146.84 (5) of the statutes is created to read:

AB621-ASA2,18,17 146.84 (5) Enforcement. The department of justice or a district attorney may bring an action in the name of the state to enforce sub. (2) or to restrain by temporary or permanent injunction a violation of sub. (2).

AB621-ASA2, s. 32 Section 32. 175.22 of the statutes is created to read:

AB621-ASA2,18,23 175.22 Policy on privacy for professional athletic teams. Any professional athletic team that has its home field or arena in this state shall adopt a written policy on who may enter and remain, to interview or seek information from any person, in a locker room used by the professional athletic team. The policy shall reflect the privacy interests of members of the professional athletic team.