Amendment AA10-ASA1-AB100

AB100-ASA1-AA10,7,7 (b) Notice under sub. (2) (a) 2. shall be given in writing and contain all of the following:

AB100-ASA1-AA10,7,11 1. A statement that computerized personal information pertaining to an individual and owned or licensed by the person giving notice has been acquired by a person who is not authorized to do so by the individual who is the subject of the personal information.

AB100-ASA1-AA10,7,12 2. The name of the individual who is the subject of the personal information.

AB100-ASA1-AA10,7,14 3. A general identification of the type of personal information that has been acquired.

AB100-ASA1-AA10,7,15 4. The date when the personal information was acquired.

AB100-ASA1-AA10,7,19 (c) If a person is required give notice under sub. (2) (a) 1. to more than one individual as a result of a single acquisition of computerized personal information and the cost of giving written notice to all individuals would exceed $250,000, the person may give notice by doing all of the following:

AB100-ASA1-AA10,7,21 1. Sending an electronic mail message to an individual's electronic mail address.

AB100-ASA1-AA10,7,22 2. Conspicuously posting notice at the person's Internet Web site.

AB100-ASA1-AA10,7,25 3. Notifying news media in this state in a manner reasonably calculated to provide media notice of the acquisition of personal information to all individuals who are the subject of the acquisition.

AB100-ASA1-AA10,8,3 (4) Enforcement. (a) The department of justice or any district attorney may commence an action in circuit court in the name of the state to restrain by temporary or permanent injunction any violation of this section.

AB100-ASA1-AA10,8,11 (b) Any person who is injured by a violation of this section may bring an action against the violator for damages, injunctive relief, or both. An action under this subsection may be brought against a county, town, city, or village, or against the state or any office, department, independent agency, authority, institution, association, society, or other body in state government created or authorized to be created by the constitution or any law, including the legislature and the courts. Notwithstanding s. 814.04 (1), in an action under this subsection, the court shall award a prevailing plaintiff reasonable attorney fees.".

AB100-ASA1-AA10,8,12 6. Page 751, line 2: after that line insert:

AB100-ASA1-AA10,8,13 " Section 1833m. 103.135 of the statutes is created to read:

AB100-ASA1-AA10,8,18 103.135 Records containing social security numbers of employees. (1) Definition. In this section, "officer" means an officer of a governmental body, an officer or director of a corporation, a member or manager of a limited liability company, a partner of a partnership or a joint venture, or an owner of a sole proprietorship.

AB100-ASA1-AA10,8,23 (2) Access prohibited; exceptions. Unless access is authorized under s. 19.36 (14), no employer may provide access to any record that contains the social security account number of an employee of that employer, together with information revealing the identity of that employee, to any person unless any of the following applies:

AB100-ASA1-AA10,8,24 (a) The number is redacted.

AB100-ASA1-AA10,9,2 (b) The person is authorized by federal or state law or by the employee who is the subject of the record to have access to the number.

AB100-ASA1-AA10,9,5 (c) The person is an officer, employee, or agent of the employer and the official responsibilities of the officer, employee, or agent require him or her to have access to the number.".

AB100-ASA1-AA10,9,6 7. Page 781, line 7: after that line insert:

AB100-ASA1-AA10,9,7 " Section 1929y. 134.44 of the statutes is created to read:

AB100-ASA1-AA10,9,10 134.44 Requests by retailers for social security numbers. (1) No seller of goods at retail may request that a customer disclose the customer's social security number.

AB100-ASA1-AA10,9,15 (2) Subsection (1) does not apply to an agent of the department of natural resources appointed under s. 29.024 (6) (a) 3. who requests a customer's social security number if the customer is applying to the agent for an approval as defined in s. 29.001 (12) and the customer's social security number is required under s. 29.024 (2g) or (2r).

AB100-ASA1-AA10,9,16 (3) Any seller who violates sub. (1) shall be fined not more than $100.".

AB100-ASA1-AA10,9,17 8. Page 782, line 8: after that line insert:

AB100-ASA1-AA10,9,18 " Section 1935m. 138.25 of the statutes is created to read:

AB100-ASA1-AA10,9,19 138.25 Credit scores. (1) Definitions. In this section:

AB100-ASA1-AA10,9,23 (a) "Credit report" means means any written, oral, or other communication of any information by a credit reporting agency bearing on a individual's credit worthiness, credit standing, or credit capacity, which is used or is expected to be used, or collected in whole or in part, for a purpose specified in 15 USC 1681b or for the purpose of serving as a factor in establishing the individual's eligibility for any of the following:

AB100-ASA1-AA10,10,3 1. Credit to be used primarily for personal, family, or household purposes.

AB100-ASA1-AA10,10,4 2. Employment, promotion, reassignment, or retention as an employee.

AB100-ASA1-AA10,10,5 3. Rental of a residential dwelling unit.

AB100-ASA1-AA10,10,12 (b) "Credit reporting agency" means any person who, for fees, dues, or other compensation, or on a cooperative nonprofit basis, regularly engages in whole or in part in the business of assembling or evaluating credit or other information on individuals for the purpose of preparing credit reports that the credit reporting agency furnishes to third parties, but does not include any governmental agency whose records are maintained primarily for traffic safety, law enforcement, or licensing purposes.

AB100-ASA1-AA10,10,15 (2) Prohibition. No credit reporting agency may use the number of creditor inquiries as a factor in any credit scoring methodology used by the credit reporting agency in preparing credit reports.

AB100-ASA1-AA10,10,16 (3) Enforcement. The division of banking shall enforce this section.".

AB100-ASA1-AA10,10,17 9. Page 823, line 16: after that line insert:

AB100-ASA1-AA10,10,18 " Section 2110m. 230.16 (12) of the statutes is created to read:

AB100-ASA1-AA10,10,21 230.16 (12) An applicant's social security number may not be used for the purpose of identifying the applicant on any examination under this subchapter or under rules of the administrator.".

AB100-ASA1-AA10,10,22 10. Page 1030, line 1: before that line insert:

AB100-ASA1-AA10,11,3 "(1v) Credit scores. The treatment of section 138.25 of the statutes first applies to credit reports furnished to third parties on the effective date of this subsection.".

AB100-ASA1-AA10,11,4 11. Page 1030, line 1: delete that line and substitute:

AB100-ASA1-AA10,11,6 "(1wk) Certificate of withdrawal fee. The treatment of section 180.0122 (1) (w)".

AB100-ASA1-AA10,11,7 12. Page 1042, line 4: after that line insert:

AB100-ASA1-AA10,11,11 "(3m) Restrictions on recording instruments with social security numbers. The treatment of section 59.43 (1) (intro.) and (1m) of the statutes first applies to an instrument that is presented to a register of deeds for recording on the effective date of this subsection.".

AB100-ASA1-AA10,11,12 (End)