2021 -- H 5513

========

LC001568

========

     STATE OF RHODE ISLAND

IN GENERAL ASSEMBLY

JANUARY SESSION, A.D. 2021

____________

A N   A C T

RELATING TO COMMERCIAL LAW -- GENERAL REGULATORY PROVISIONS

     Introduced By: Representatives Morales, Tanzi, Amore, Kazarian, Shanley, Cortvriend,
Tobon, C Lima, and Craven

     Date Introduced: February 12, 2021

     Referred To: House Corporations

     It is enacted by the General Assembly as follows:

     SECTION 1. Chapter 6-13 of the General Laws entitled "Unfair Sales Practices" is hereby

amended by adding thereto the following section:

     6-13-17.1. Social Security and personal information online protection.

     (a) Any person or entity who collects a social security number, driver's license number, a

state identification card number, a credit or debit card number, a passport number, an alien

registration number, and/or a health insurance identification number in the course of business shall

be required to create a privacy protection policy which shall be published or publicly displayed.

For purposes of this section, "publicly displayed" includes, but is not limited to, posting on an

Internet webpage. Such policy shall:

     (1) Protect the confidentiality of this personal information;

     (2) Prohibit unlawful disclosure of this personal information; and

     (3) Limit access to this personal information.

     (b) Any person or entity that violates the provisions of this section shall be subject to a civil

penalty of five hundred dollars ($500) for each violation; provided, such civil penalty shall not

exceed five hundred thousand dollars ($500,000) for any single event.

     (c) Any civil penalties received pursuant to this section shall be a restricted receipt for

public education.

     SECTION 2. This act shall take effect upon passage.

========

LC001568

========

LC001568 - Page 2 of 3

EXPLANATION

BY THE LEGISLATIVE COUNCIL

OF

A N   A C T

RELATING TO COMMERCIAL LAW -- GENERAL REGULATORY PROVISIONS

***

     This act would require all persons or entities collecting social security and other personal

identification numbers to create and publicly display a privacy protection policy. Violations of this

requirement would incur a civil penalty of five-hundred dollars ($500).

     This act would take effect upon passage.

========

LC001568

========

LC001568 - Page 3 of 3