California 2021-2022 Regular Session

California Assembly Bill AB12 Compare Versions

OldNewDifferences
1-Assembly Bill No. 12 CHAPTER 509 An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately. [ Approved by Governor October 05, 2021. Filed with Secretary of State October 05, 2021. ] LEGISLATIVE COUNSEL'S DIGESTAB 12, Seyarto. Personal information: social security numbers: the Employment Development Department. Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee. This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.(b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.(c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.(d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.(e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.(f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.SEC. 2. Section 11019.7 of the Government Code is amended to read:11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.
1+Enrolled September 01, 2021 Passed IN Senate August 30, 2021 Passed IN Assembly May 20, 2021 Amended IN Assembly March 24, 2021 CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION Assembly Bill No. 12Introduced by Assembly Member Seyarto(Coauthors: Assembly Members Bauer-Kahan, Bigelow, Chen, Cunningham, Megan Dahle, Davies, Flora, Gallagher, Kiley, Lackey, Mathis, Nguyen, Smith, Valladares, Voepel, and Waldron)(Coauthors: Senators Bates, Jones, Melendez, and Ochoa Bogh)December 07, 2020 An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately. LEGISLATIVE COUNSEL'S DIGESTAB 12, Seyarto. Personal information: social security numbers: the Employment Development Department. Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee. This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.(b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.(c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.(d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.(e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.(f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.SEC. 2. Section 11019.7 of the Government Code is amended to read:11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.
22
3- Assembly Bill No. 12 CHAPTER 509 An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately. [ Approved by Governor October 05, 2021. Filed with Secretary of State October 05, 2021. ] LEGISLATIVE COUNSEL'S DIGESTAB 12, Seyarto. Personal information: social security numbers: the Employment Development Department. Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee. This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO
3+ Enrolled September 01, 2021 Passed IN Senate August 30, 2021 Passed IN Assembly May 20, 2021 Amended IN Assembly March 24, 2021 CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION Assembly Bill No. 12Introduced by Assembly Member Seyarto(Coauthors: Assembly Members Bauer-Kahan, Bigelow, Chen, Cunningham, Megan Dahle, Davies, Flora, Gallagher, Kiley, Lackey, Mathis, Nguyen, Smith, Valladares, Voepel, and Waldron)(Coauthors: Senators Bates, Jones, Melendez, and Ochoa Bogh)December 07, 2020 An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately. LEGISLATIVE COUNSEL'S DIGESTAB 12, Seyarto. Personal information: social security numbers: the Employment Development Department. Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee. This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.This bill would declare that it is to take effect immediately as an urgency statute.Digest Key Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO
44
5- Assembly Bill No. 12 CHAPTER 509
5+ Enrolled September 01, 2021 Passed IN Senate August 30, 2021 Passed IN Assembly May 20, 2021 Amended IN Assembly March 24, 2021
66
7- Assembly Bill No. 12
7+Enrolled September 01, 2021
8+Passed IN Senate August 30, 2021
9+Passed IN Assembly May 20, 2021
10+Amended IN Assembly March 24, 2021
811
9- CHAPTER 509
12+ CALIFORNIA LEGISLATURE 20212022 REGULAR SESSION
13+
14+ Assembly Bill
15+
16+No. 12
17+
18+Introduced by Assembly Member Seyarto(Coauthors: Assembly Members Bauer-Kahan, Bigelow, Chen, Cunningham, Megan Dahle, Davies, Flora, Gallagher, Kiley, Lackey, Mathis, Nguyen, Smith, Valladares, Voepel, and Waldron)(Coauthors: Senators Bates, Jones, Melendez, and Ochoa Bogh)December 07, 2020
19+
20+Introduced by Assembly Member Seyarto(Coauthors: Assembly Members Bauer-Kahan, Bigelow, Chen, Cunningham, Megan Dahle, Davies, Flora, Gallagher, Kiley, Lackey, Mathis, Nguyen, Smith, Valladares, Voepel, and Waldron)(Coauthors: Senators Bates, Jones, Melendez, and Ochoa Bogh)
21+December 07, 2020
1022
1123 An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately.
12-
13- [ Approved by Governor October 05, 2021. Filed with Secretary of State October 05, 2021. ]
1424
1525 LEGISLATIVE COUNSEL'S DIGEST
1626
1727 ## LEGISLATIVE COUNSEL'S DIGEST
1828
1929 AB 12, Seyarto. Personal information: social security numbers: the Employment Development Department.
2030
2131 Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee. This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.This bill would declare that it is to take effect immediately as an urgency statute.
2232
2333 Existing law, commencing on January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individuals social security number unless the number is truncated to its last 4 digits or in specified circumstances, including when federal law requires inclusion of the social security number or when documents are mailed to a current or prospective state employee.
2434
2535 This bill would instead require state agencies, as soon as is feasible, but no later than January 1, 2023, to stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in specified circumstances.
2636
2737 This bill would declare that it is to take effect immediately as an urgency statute.
2838
2939 ## Digest Key
3040
3141 ## Bill Text
3242
3343 The people of the State of California do enact as follows:SECTION 1. The Legislature finds and declares all of the following:(a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.(b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.(c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.(d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.(e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.(f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.SEC. 2. Section 11019.7 of the Government Code is amended to read:11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.
3444
3545 The people of the State of California do enact as follows:
3646
3747 ## The people of the State of California do enact as follows:
3848
3949 SECTION 1. The Legislature finds and declares all of the following:(a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.(b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.(c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.(d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.(e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.(f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.
4050
4151 SECTION 1. The Legislature finds and declares all of the following:(a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.(b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.(c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.(d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.(e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.(f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.
4252
4353 SECTION 1. The Legislature finds and declares all of the following:
4454
4555 ### SECTION 1.
4656
4757 (a) In 2019, the California State Auditor issued a report stating that in any given year Californias Employment Development Department mails out over 17 million letters to claimants, and that a vast majority of those letters contain personal information, including full social security numbers. Further, the State Auditor reported that hundreds to thousands of these letters have been mailed to the wrong individual or the wrong address.
4858
4959 (b) Despite ongoing criticism from the public and the Legislature since 2015, the Employment Development Department continues to include full social security numbers on documents that it mails, falsely claiming federal law requires the Employment Development Department to use a claimants full social security number. This assertion was refuted by the State Auditor, whose report stated that there are no state or federal laws requiring the mailing of full social security numbers to claimants seeking benefits from Californias Employment Development Department.
5060
5161 (c) The Employment Development Department is currently undergoing a system modernization project, known as the Benefit Systems Modernization, but the information technology systems that the Employment Development Department uses to automatically generate correspondence needs immediate adjustment to protect California residents from identity theft and to prevent other forms of fraud.
5262
5363 (d) Prior to the implementation of the Benefit Systems Modernization, the State Auditor recommended that the Employment Development Department implement interim privacy measures to replace full social security numbers with a modified unique identifier on documents by March 2020. However, according to the 2019 report, the Employment Development Department is not scheduled to complete the implementation system until August 21, 2021. Completion has been further delayed by the COVID-19 pandemic.
5464
5565 (e) As a result, the Employment Development Department is unnecessarily putting claimants at risk for identity theft by continuing the practice of including individuals full social security numbers when it sends outgoing mail.
5666
5767 (f) Requiring state agencies to cease sending full social security numbers on outgoing mail as soon as feasible will ensure that agencies, including the Employment Development Department, make important technological adjustments to their systems immediately, rather than waiting until January of 2023, to protect the private information of California residents.
5868
5969 SEC. 2. Section 11019.7 of the Government Code is amended to read:11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.
6070
6171 SEC. 2. Section 11019.7 of the Government Code is amended to read:
6272
6373 ### SEC. 2.
6474
6575 11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.
6676
6777 11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.
6878
6979 11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.(b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:(A) Federal law requires inclusion of the social security number.(B) The documents are mailed to a current or prospective state employee.(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.(2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.(c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.(d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.
7080
7181
7282
7383 11019.7. (a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individuals social security number, telephone number, drivers license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.
7484
7585 (b) (1) Notwithstanding any other law, as soon as is feasible, but no later than January 1, 2023, a state agency shall stop sending any outgoing United States mail to an individual that contains the individuals social security number unless the number is truncated to its last four digits, except in the following circumstances:
7686
77-(A) Federal law requires inclusion of the social security number.
87+(A)
7888
79-(B) The documents are mailed to a current or prospective state employee.
89+ Federal law requires inclusion of the social security number.
8090
81-(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.
91+(B)
8292
83-(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.
93+ The documents are mailed to a current or prospective state employee.
94+
95+(C)
96+
97+ An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.
98+
99+(D)
100+
101+ The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.
84102
85103 (E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.
86104
87105 (2) (A) On or before September 1, 2021, each state agency that mails an individuals full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.
88106
89107 (B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.
90108
91109 (C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individuals social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).
92110
93111 (3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (3) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.
94112
95113 (B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (3) shall be submitted in compliance with Section 9795 of the Government Code.
96114
97115 (c) Outgoing United States mail for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.
98116
99117 (d) Notwithstanding subdivision (a) of Section 11000, state agency includes the California State University.
100118
101119 SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.
102120
103121 SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.
104122
105123 SEC. 3. This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:
106124
107125 ### SEC. 3.
108126
109127 In order to ensure that unemployment insurance claimants full social security numbers are no longer easily accessible through the mail to individuals who seek to obtain benefits fraudulently, thereby reducing the state and federal costs resulting from unemployment insurance fraud, as soon as possible, it is necessary that this act take effect immediately.