Connecticut 2018 Regular Session

Connecticut Senate Bill SB00335 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	General Assembly Raised Bill No. 335
2	2	February Session, 2018 LCO No. 1955
3	3	01955_______ET_
4	4	Referred to Committee on ENERGY AND TECHNOLOGY
5	5	Introduced by:
6	6	(ET)
7	7
8	8	General Assembly
9	9
10	10	Raised Bill No. 335
11	11
12	12	February Session, 2018
13	13
14	14	LCO No. 1955
15	15
16	16	01955_______ET_
17	17
18	18	Referred to Committee on ENERGY AND TECHNOLOGY
19	19
20	20	Introduced by:
21	21
22	22	(ET)
23	23
24	24	AN ACT CONCERNING INTERNET SERVICE PROVIDERS AND CONSUMER PERSONALLY IDENTIFYING INFORMATION.
25	25
26	26	Be it enacted by the Senate and House of Representatives in General Assembly convened:
27	27
28	28	Section 1. (NEW) (Effective October 1, 2018) (a) As used in this section:
29	29
30	30	(1) "Browsing history" means information that shows a consumer accessed a specific web site;
31	31
32	32	(2) "Consumer" means an Internet service account holder, such account holder's immediate family and any other person such account holder permits to access the Internet through use of such account holder's account;
33	33
34	34	(3) "Express and affirmative permission" means permission that (A) is explicitly solicited in writing or by electronic means separate from any other terms of service or items of consent, (B) is clear and succinct, (C) clearly identifies any person to whom an Internet service provider will transfer personally identifying information, (D) outlines the scope of the personally identifying information to be transferred, (E) includes a warning that after the grant of such permission, state law cannot guarantee that the person who receives such personally identifying information will not transfer that information to a third party or otherwise publicize such personally identifying information, (F) is sought by an Internet service provider for each person to whom it seeks to transfer such personally identifying information, and (G) expires not later than one year after such permission is granted;
35	35
36	36	(4) "Internet service provider" means a company that provides consumers with connectivity to the Internet and operates in the state, including any such company that sells Internet service in the state; and
37	37
38	38	(5) "Personally identifying information" means the following information relating to a consumer using an Internet service provider to connect to the Internet: (A) Such consumer's name, address, Social Security number, geographic location or browsing history, (B) the Internet protocol address associated with an electronic device that belongs to such consumer, (C) the content of such consumer's communications with anyone other than the Internet service provider, and (D) any information about such consumer's spouse, children, health or finances.
39	39
40	40	(b) An Internet service provider may not sell or transfer a consumer's personally identifying information to a person without such consumer's express and affirmative permission.
41	41
42	42	(c) An Internet service provider may not send or display to a consumer an advertisement that has been selected to be sent or displayed because of such consumer's browsing history without such consumer's express and affirmative permission.
43	43
44	44	(d) An Internet service provider may not refuse to provide its services to a consumer because of such consumer's refusal to provide express and affirmative permission to the Internet service provider pursuant to subsections (b) and (c) of this section.
45	45
46	46	(e) This section shall not apply to an Internet service provider that transmits a consumer's personally identifying information (1) in response to a subpoena, summons, warrant or court order that appears on its face to be issued in accordance with lawful authority, or (2) to the consumer to whom such personally identifying information pertains.
47	47
48	48
49	49
50	50
51	51	This act shall take effect as follows and shall amend the following sections:
52	52	Section 1 October 1, 2018 New section
53	53
54	54	This act shall take effect as follows and shall amend the following sections:
55	55
56	56	Section 1
57	57
58	58	October 1, 2018
59	59
60	60	New section
61	61
62	62	Statement of Purpose:
63	63
64	64	To prohibit Internet service providers from taking certain actions with respect to consumer's personally identifying information.
65	65
66	66	[Proposed deletions are enclosed in brackets. Proposed additions are indicated by underline, except that when the entire text of a bill or resolution or a section of a bill or resolution is new, it is not underlined.]