AB621,8,65 (c) "Personally identifiable information" has the meaning given under s. 19.62
6(5).
AB621,8,117 (d) "State agency" means an office, department, independent agency,
8institution of higher education, association, society, or other body in state
9government created or authorized to be created by the constitution or any law, which
10is entitled to expend moneys appropriated by law, including the legislature and the
11courts, but not including an authority.
AB621,8,14 12(2) (a) Whenever a bill is introduced in either house of the legislature that
13would have an impact upon personal privacy, the legislative reference bureau shall
14promptly transmit a copy of the bill to the department of administration.
AB621,8,2015 (b) Either house of the legislature may, under rules of that house or joint rules
16of the legislature, request the department of administration to order the preparation
17of a privacy impact statement with respect to any bill before that house, either in its
18original form or as affected by one or more amendments. If a house so requests, the
19chief clerk of that house shall thereupon transmit a copy of that bill and any affected
20amendments to the department of administration.
AB621,8,25 21(3) Upon receipt of a bill under sub. (2), the department of administration shall
22direct one or more state agencies or authorities to prepare a privacy impact
23statement with respect to that bill. Each privacy impact statement shall describe the
24impact upon personal privacy that would result from enactment of the bill and
25analyze the desirability of that impact from the standpoint of public policy.
AB621,9,3
1(4) Each state agency or authority receiving a bill under sub. (3) shall provide
2the statement required under sub. (3) to the department of administration within 15
3days after the department's directive.
AB621,9,8 4(5) Upon receiving a privacy impact statement under sub. (4), the department
5of administration shall provide one copy to the legislative reference bureau, one copy
6to the principal author of the bill, and one copy to the chief clerk of the house of the
7legislature in which the bill originated. The chief clerk shall thereupon distribute
8the statement in the same manner as amendments to the bill are distributed.
AB621,9,13 9(6) Whenever a bill requires preparation of a privacy impact statement under
10this section, the legislative reference bureau shall include a notation to that effect
11on the jacket of the bill when the jacket is prepared. If the preparation of a privacy
12impact statement is requested by a house of the legislature, the chief clerk of that
13house shall include a notation to that effect on the jacket of the bill.
AB621,9,17 14(7) Whenever a privacy impact statement is required or requested for any bill
15under this section, a standing committee to which the bill is referred may not hold
16a public hearing on the bill or report the bill until the statement is received by the
17chief clerk of the house in which the bill originated.
AB621, s. 2 18Section 2. 19.32 (1bg), (1dm), (2g) and (4) of the statutes are created to read:
AB621,9,2119 19.32 (1bg) "Employee" means an individual who is employed by an authority,
20other than an individual holding a local public office or a state public office, or any
21individual who is employed by an employer other than an authority.
AB621,9,22 22(1dm) "Local public office" has the meaning given in s. 19.42 (7w).
AB621,9,24 23(2g) "Record subject" means an individual about whom personally identifiable
24information is contained in a record.
AB621,10,2
1(4) "State public office" has the meaning given in s. 19.42 (13), but does not
2include a position identified in s. 20.923 (6) (em) to (gm).
AB621, s. 3 3Section 3. 19.356 of the statutes is created to read:
AB621,10,8 419.356 Notice to record subject; right of action. (1) Except as authorized
5in this section or as otherwise provided by statute, no authority is required to notify
6a record subject prior to providing to a requester access to a record containing
7information pertaining to that record subject, and no person is entitled to judicial
8review of the decision of an authority to provide a requester with access to a record.
AB621,10,14 9(2) (a) Except as provided in pars. (b) and (c) and except as otherwise required
10by law, an authority shall, before permitting access and within 72 hours after making
11a decision to permit access to a record, notify any record subject to whom the record
12pertains, either by certified mail with return receipt signed by the addressee or by
13personally serving the notice on the record subject, if the record contains any of the
14following:
AB621,10,1815 1. Information concerning the authority's investigation into a disciplinary
16matter relating to an employee or a possible violation by an employee of a policy of
17the employee's employer, or of a statute, rule, regulation, or ordinance in connection
18with the employee's employment.
AB621,10,2119 2. Information prepared or provided by an employer concerning the home
20address or telephone number of an employee of that employer, if the employee has
21not consented for the authority to provide access to that information.
AB621,11,222 3. Information relating to one or more employees that is used by the authority
23or by the employer of the employees for staff management planning or employee
24evaluation, including employee performance evaluations, judgments or
25recommendations concerning future salary adjustments or other employee wage

1treatments, management employee bonus plans, promotions, job assignments,
2letters of reference, or other comments or ratings relating to individual employees.
AB621,11,73 4. Information pertaining to an employee's employment examination, except
4an examination score if access to that score is not otherwise prohibited. This
5subdivision does not apply to information relating to the hiring or recruitment
6process that is exchanged between the department of employment relations and an
7authority that is a unit of state government.
AB621,11,128 (b) Paragraph (a) does not apply to an authority who provides access to a record
9pertaining to an employee to the employee who is the subject of the record or to his
10or her representative to the extent required under s. 103.13 or to a collective
11bargaining representative to the extent required to fulfill a duty to bargain or
12pursuant to a collective bargaining agreement under ch. 111.
AB621,11,1513 (c) Paragraph (a) does not apply to access to a record produced in relation to a
14function specified in s. 106.54 or 230.45 or subch. II of ch. 111 if the record is provided
15by an authority having responsibility for that function.
AB621,11,17 16(3) The notice under sub. (2) (a) shall briefly describe the requested record and
17include a description of the rights of the record subject under this section.
AB621,11,20 18(4) Within 5 days after receipt of a notice under sub. (2) (a), any record subject
19may provide written notification to the authority of his or her intent to seek a court
20order restraining the authority from providing access to the requested record.
AB621,11,25 21(5) Within 10 days after receipt of a notice under sub. (2) (a), any record subject
22may commence an action seeking a court order to restrain the authority from
23providing access to the requested record. If a record subject commences such an
24action, the record subject shall name the authority as a defendant. The record
25subject shall also join the requester as a party to the action under s. 803.03.
AB621,12,10
1(6) An authority shall not provide access to a requested record within 12 days
2of sending a notice pertaining to that record under sub. (2) (a). In addition, if the
3record subject commences an action under sub. (5), the authority shall not provide
4access to the requested record during pendency of the action. If the record subject
5appeals or petitions for review of a decision of the court or the time for appeal or
6petition for review of a decision adverse to the record subject has not expired, the
7authority shall not provide access to the requested record until any appeal is decided,
8until the period for appealing or petitioning for review expires, until a petition for
9review is denied, or until the authority receives written notice from the record subject
10that an appeal or petition for review will not be filed, whichever occurs first.
AB621,12,15 11(7) If the record subject demonstrates that the harm to his or her privacy or
12reputational interests caused by disclosure of the information contained in the
13requested record outweighs the public interest in disclosure of that information, the
14court shall restrain the authority from providing access to that record under s. 19.35
15(1).
AB621,12,21 16(8) The court shall not grant any request by a requester to delay the
17proceedings. The court shall issue a decision within 10 days after the filing of the
18summons and complaint and proof of service of the summons and complaint upon the
19defendant and the requester, unless a party demonstrates cause for extension of this
20period. In any event, the court shall issue a decision within 30 days after those filings
21are complete.
AB621,12,24 22(9) If a party appeals a decision of the court under sub. (8), the court of appeals
23shall grant precedence to the appeal over all other matters not accorded similar
24precedence by law.
AB621, s. 4 25Section 4. 19.37 (2) (c) of the statutes is created to read:
AB621,13,2
119.37 (2) (c) This subsection does not apply to any action filed by a record
2subject against an authority under s. 19.356.
AB621, s. 5 3Section 5. 22.21 of the statutes is created to read:
AB621,13,9 422.21 Privacy and security information officers. (1) The chief
5information officer shall appoint an employee of the department to serve as a privacy
6information officer. The privacy information officer shall provide information to
7employees of the department and other persons who are or may be the subject of any
8information maintained or processed by the department concerning applicable laws,
9rules, and regulations governing the protection of privacy.
AB621,13,12 10(2) The chief information officer shall appoint an employee of the department
11to serve as a security information officer. The security information officer shall
12ensure the security of information maintained or processed by the department.
AB621, s. 6 13Section 6. 36.11 (35) (title) of the statutes is renumbered 36.32 (title).
AB621, s. 7 14Section 7. 36.11 (35) of the statutes is renumbered 36.32 (2) and amended to
15read:
AB621,13,2416 36.32 (2) The board An institution of higher education may assign to each
17student enrolled in the system institution a unique identification number. The board
18An institution of higher education shall not assign to any student an identification
19number that is identical to or incorporates the student's social security number. This
20subsection does not prohibit the board an institution of higher education from
21requiring a student to disclose his or her social security number, nor from using a
22student's social security number if such use is required by a federal or state agency
23or private organization in order for the system or the student to participate in a
24particular program.
AB621, s. 8 25Section 8. 36.32 (1) of the statutes is created to read:
AB621,14,4
136.32 (1) In this section, "institution of higher education" means an institution
2within the system, or a private educational institution located in this state that
3awards a bachelor's or higher degree or provides a program that is acceptable toward
4such a degree.
AB621, s. 9 5Section 9. 36.38 of the statutes is created to read:
AB621,14,11 636.38 Policy on privacy in athletic locker rooms. Each institution and
7college campus shall adopt a written policy on who may enter and remain, to
8interview or seek information from any person, in a locker room being used by an
9athletic team representing the institution or college campus. The policy shall reflect
10the privacy interests of members of athletic teams representing the institution or
11college campus.
AB621, s. 10 12Section 10. 38.12 (12) of the statutes is created to read:
AB621,14,1713 38.12 (12) Policy on privacy in athletic locker rooms. The district board shall
14adopt a written policy on who may enter and remain, to interview or seek information
15from any person, in a locker room being used by an athletic team representing the
16district. The policy shall reflect the privacy interests of members of athletic teams
17representing the district.
AB621, s. 11 18Section 11. 39.49 of the statutes is created to read:
AB621,14,23 1939.49 Policy on privacy in athletic locker rooms. (1) In this section,
20"institution of higher education" means a private educational institution that
21awards a bachelor's or higher degree or provides a program that is acceptable for
22credit toward such a degree, and that fields an athletic team that represents the
23institution.
AB621,15,3 24(2) Each institution of higher education shall adopt a written policy on who
25may enter and remain, to interview or seek information from any person, in a locker

1room being used by an athletic team representing the institution. The policy shall
2reflect the privacy interests of members of athletic teams representing the
3institution.
AB621, s. 12 4Section 12. 40.07 (4) of the statutes is created to read:
AB621,15,65 40.07 (4) Section 19.356 does not apply to any request for information described
6in this section.
AB621, s. 13 7Section 13. 40.51 (8) of the statutes is amended to read:
AB621,15,118 40.51 (8) Every health care coverage plan offered by the state under sub. (6)
9shall comply with ss. 610.65, 631.89, 631.90, 631.93 (2), 631.95, 632.72 (2), 632.746
10(1) to (8) and (10), 632.747, 632.748, 632.83, 632.835, 632.85, 632.853, 632.855,
11632.87 (3) to (5), 632.895 (5m) and (8) to (14), and 632.896.
AB621, s. 14 12Section 14. 40.51 (8m) of the statutes is amended to read:
AB621,15,1513 40.51 (8m) Every health care coverage plan offered by the group insurance
14board under sub. (7) shall comply with ss. 610.65, 631.95, 632.746 (1) to (8) and (10),
15632.747, 632.748, 632.83, 632.835, 632.85, 632.853, 632.855, and 632.895 (11) to (14).
AB621, s. 15 16Section 15. 48.396 (1) of the statutes is amended to read:
AB621,16,1217 48.396 (1) Law enforcement officers' records of children shall be kept separate
18from records of adults. Law enforcement officers' records of the adult expectant
19mothers of unborn children shall be kept separate from records of other adults. Law
20enforcement officers' records of children and the adult expectant mothers of unborn
21children shall not be open to inspection or their contents disclosed except under sub.
22(1b), (1d), (1h), (1j), (1k), or (5) or s. 48.293 or by order of the court. This subsection
23does not apply to the representatives of newspapers or other reporters of news the
24news media
who wish to obtain information for the purpose of reporting news
25without revealing the identity of the child or adult expectant mother involved, to the

1confidential exchange of information between the police and officials of the school
2attended by the child or other law enforcement or social welfare agencies, or to
3children 10 years of age or older who are subject to the jurisdiction of the court of
4criminal jurisdiction. A public school official who obtains information under this
5subsection shall keep the information confidential as required under s. 118.125, and
6a private school official who obtains information under this subsection shall keep the
7information confidential in the same manner as is required of a public school official
8under s. 118.125. A law enforcement agency that obtains information under this
9subsection shall keep the information confidential as required under this subsection
10and s. 938.396 (1). A social welfare agency that obtains information under this
11subsection shall keep the information confidential as required under ss. 48.78 and
12938.78.
AB621, s. 16 13Section 16. 48.396 (1h) of the statutes is created to read:
AB621,16,2214 48.396 (1h) If requested by another law enforcement agency, a law enforcement
15agency may, subject to official agency policy, disclose to the other law enforcement
16agency any information in its records relating to a child or an adult expectant mother
17of an unborn child as necessary for the other law enforcement agency to pursue an
18investigation of any alleged criminal or delinquent activity. A law enforcement
19agency that obtains information under this subdivision shall keep the information
20confidential as required under sub. (1) and s. 938.396 (1) and may disclose the
21information only for the purpose of pursuing that investigation or as permitted under
22sub. (1) or s. 938.396 (1).
AB621, s. 17 23Section 17. 48.396 (1j) of the statutes is created to read:
AB621,17,1224 48.396 (1j) If requested by a court assigned to exercise jurisdiction under this
25chapter and ch. 938, a court exercising jurisdiction under s. 48.16, a court exercising

1jurisdiction under s. 938.17 (2), or a person representing the interests of the public
2under s. 48.09 or 938.09, a law enforcement agency may, subject to official agency
3policy, disclose to the requester any information in its records relating to a child or
4an adult expectant mother of an unborn child as necessary for the court to conduct,
5or the person representing the interests of the public to prepare for, any proceedings
6in the court. A court that obtains information under this subdivision shall keep the
7information confidential as required under sub. (2) (a) and s. 938.396 (2) (a) and may
8disclose the information only for the purpose of conducting those proceedings or as
9permitted under sub. (2) (a) and s. 938.396 (2) (a). A person representing the
10interests of the public who obtains any information under this subdivision shall keep
11the information confidential and may disclose the information only as necessary for
12the person to perform the person's official duties relating to those proceedings.
AB621, s. 18 13Section 18. 48.396 (1k) of the statutes is created to read:
AB621,17,2014 48.396 (1k) If requested by any person designated to provide intake services
15under s. 48.067 or 938.067, a law enforcement agency may, subject to official agency
16policy, disclose to the person any information in its records relating to a child or an
17adult expectant mother of an unborn child as necessary for the person to provide
18those services. A person designated to provide intake services who obtains any
19information under this subdivision shall keep the information confidential and may
20disclose the information only as necessary for the person to provide those services.
AB621, s. 19 21Section 19. 48.396 (2) (c) of the statutes is created to read:
AB621,18,622 48.396 (2) (c) Upon request of any law enforcement agency to review court
23records for the purpose of pursuing an investigation of any alleged delinquent or
24criminal activity, the court shall open for inspection by any authorized
25representative of the requester the records of the court relating to a child or an adult

1expectant mother of an unborn child who has been the subject of a proceeding under
2this chapter as necessary for the law enforcement agency to pursue the investigation.
3A law enforcement agency that obtains information under this paragraph shall keep
4the information confidential as required under sub. (1) and s. 938.396 (1) and may
5disclose the information only for the purpose of pursuing that investigation or as
6permitted under sub. (1) or s. 938.396 (1).
AB621, s. 20 7Section 20. 48.396 (2) (g) of the statutes is renumbered 48.396 (2) (gm) and
8amended to read:
AB621,18,239 48.396 (2) (gm) Upon request of any other court assigned to exercise
10jurisdiction under this chapter and ch. 938, a district attorney or corporation counsel
11any court exercising jurisdiction under s. 48.16, any court exercising jurisdiction
12under s. 938.17 (2), or any person representing the interests of the public under s.
1348.09 or 938.09
to review court records for the purpose of conducting or preparing for
14any proceeding in that other court, the court shall open for inspection by any
15authorized representative of the requester the records of the court relating to any
16child who has been the subject of a proceeding under this chapter. A court that
17obtains information under this paragraph shall keep the information confidential as
18required under par. (a) and s. 938.396 (2) (a) and may disclose the information only
19for the purpose of conducting those proceedings or as permitted under par. (a) and
20s. 938.396 (2) (a). A person representing the interests of the public who obtains any
21information under this paragraph shall keep the information confidential and may
22disclose the information only as necessary for the person to perform the person's
23official duties relating to that proceeding.
AB621, s. 21 24Section 21. 48.396 (2) (gr) of the statutes is created to read:
AB621,19,8
148.396 (2) (gr) Upon request of any person designated to provide intake
2services under s. 48.067 or 938.067 to review court records for the purpose of
3performing those services, the court shall open for inspection by the person the
4records of the court relating to a child or an adult expectant mother of an unborn child
5who has been the subject of a proceeding under this chapter. A person designated
6to provide intake services who obtains any information under this paragraph shall
7keep the information confidential and may disclose the information only as
8necessary for the person to provide those services.
AB621, s. 22 9Section 22. 48.396 (5) (a) (intro.) of the statutes is amended to read:
AB621,19,1310 48.396 (5) (a) (intro.) Any person who is denied access to a record under sub.
11(1), (1b) or, (1d), (1h), (1j), or (1k) may petition the court to order the disclosure of the
12records governed by the applicable subsection record. The petition shall be in writing
13and shall describe as specifically as possible all of the following:
AB621, s. 23 14Section 23. 66.0137 (4) of the statutes is amended to read:
AB621,19,2015 66.0137 (4) Self-insured health plans. If a city, including a 1st class city, or
16a village provides health care benefits under its home rule power, or if a town
17provides health care benefits, to its officers and employees on a self-insured basis,
18the self-insured plan shall comply with ss. 49.493 (3) (d), 610.65, 631.89, 631.90,
19631.93 (2), 632.746 (10) (a) 2. and (b) 2., 632.747 (3), 632.85, 632.853, 632.855, 632.87
20(4) and (5), 632.895 (9) to (14), 632.896, and 767.25 (4m) (d).
AB621, s. 24 21Section 24. 74.80 of the statutes is created to read:
AB621,19,23 2274.80 Internet information. No taxation district may put photographs of
23residential property located within the taxation district on the Internet.
AB621, s. 25 24Section 25. 100.52 (1) (bg) and (br) of the statutes are created to read:
AB621,20,3
1100.52 (1) (bg) "Blocking service" means a service that allows a person who
2makes a telephone call to withhold his or her telephone number or name from a
3person who receives the telephone call and who uses a caller identification service.
AB621,20,64 (br) "Caller identification service" means a service that allows a person who
5receives a telephone call to identify the telephone number or name of the person
6making the telephone call.
AB621, s. 26 7Section 26. 100.52 (4) (a) 4. of the statutes is created to read:
AB621,20,88 100.52 (4) (a) 4. Use a blocking service when making a telephone solicitation.
AB621, s. 27 9Section 27. 111.91 (2) (kc) of the statutes is amended to read:
AB621,20,1110 111.91 (2) (kc) Compliance with the insurance requirements under s. ss. 610.65
11and
631.95.
AB621, s. 28 12Section 28. 118.39 of the statutes is created to read:
AB621,20,19 13118.39 Policy on privacy in athletic locker rooms. Each school board, and
14the governing body of each private school that fields an athletic team representing
15the school, shall adopt a written policy on who may enter and remain, to interview
16or seek information from any person, in a locker room being used by an athletic team
17representing the private school or representing a public school in the school district.
18The policy shall reflect the privacy interests of members of athletic teams
19representing the school.
AB621, s. 29 20Section 29. 120.13 (2) (g) of the statutes is amended to read:
AB621,20,2421 120.13 (2) (g) Every self-insured plan under par. (b) shall comply with ss.
2249.493 (3) (d), 610.65, 631.89, 631.90, 631.93 (2), 632.746 (10) (a) 2. and (b) 2., 632.747
23(3), 632.85, 632.853, 632.855, 632.87 (4) and (5), 632.895 (9) to (14), 632.896, and
24767.25 (4m) (d).
AB621, s. 30 25Section 30. 146.81 (1) (fm) of the statutes is amended to read:
AB621,21,1
1146.81 (1) (fm) A pharmacist or pharmacy licensed under ch. 450.
AB621, s. 31 2Section 31. 146.81 (4) of the statutes is amended to read:
AB621,21,103 146.81 (4) "Patient health care records" means all records related to the health
4of a patient prepared by or under the supervision of or owned by a health care
5provider, including the records required under s. 146.82 (2) (d) and (3) (c), but not
6those records subject to s. 51.30, reports collected under s. 69.186, records of tests
7administered under s. 252.15 (2) (a) 7., 343.305, 938.296 (4) or (5) or 968.38 (4) or (5),
8fetal monitor tracings, as defined under s. 146.817 (1), or a pupil's physical health
9records maintained by a school under s. 118.125. ``Patient health care records" also
10includes health summary forms prepared under s. 302.388 (2).
AB621, s. 32 11Section 32. 146.82 (2) (bm) of the statutes is created to read:
Loading...
Loading...