Texas 2009 - 81st Regular

Texas House Bill HB2129 Compare Versions

The same version is selected twice. Please select two different versions to compare.
OldNewDifferences
11 81R13389 JE-D
22 By: Giddings H.B. No. 2129
33 Substitute the following for H.B. No. 2129:
44 By: Veasey C.S.H.B. No. 2129
55
66
77 A BILL TO BE ENTITLED
88 AN ACT
99 relating to a consumer's option to prevent the sale of the
1010 consumer's financial information by a financial institution;
1111 providing a civil penalty.
1212 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1313 SECTION 1. Subtitle Z, Title 3, Finance Code, is amended by
1414 adding Chapter 279 to read as follows:
1515 CHAPTER 279. SALE OF CONSUMER'S FINANCIAL INFORMATION
1616 Sec. 279.001. DEFINITIONS. In this chapter:
1717 (1) "Affiliate of a financial institution" means a
1818 person who controls, is controlled by, or is under common control
1919 with the financial institution. In this subdivision, "control"
2020 means the possession, directly or indirectly, of the power to
2121 direct or cause the direction of the management and policies of a
2222 person, whether through the ownership of voting securities, by
2323 contract, or otherwise.
2424 (2) "Consumer" means an individual resident of this
2525 state, or the legal representative of an individual resident of
2626 this state, who obtains a financial product or service for
2727 personal, family, or household purposes.
2828 (3) "Financial information" means information, other
2929 than information that a financial institution has a reasonable
3030 basis to believe is lawfully made available to the general public,
3131 obtained by a financial institution in connection with providing a
3232 financial product or service to a consumer, including:
3333 (A) information provided on an application for a
3434 loan, credit card, or other financial product or service;
3535 (B) account balance information;
3636 (C) payment or overdraft history;
3737 (D) credit or debit purchase information;
3838 (E) information that indicates whether an
3939 individual is or has been a consumer of a financial institution;
4040 (F) information obtained in connection with
4141 collecting on or servicing a loan; or
4242 (G) information from a consumer report.
4343 (4) "Financial institution" has the meaning assigned
4444 by Section 201.101.
4545 Sec. 279.002. INAPPLICABILITY TO CREDIT BUREAU. Nothing in
4646 this chapter shall be interpreted to prevent a credit bureau from
4747 obtaining a consumer's financial information without the consumer's
4848 authorization.
4949 Sec. 279.003. AUTHORIZATION REQUIRED FOR SALE OF FINANCIAL
5050 INFORMATION. (a) A financial institution may sell a consumer's
5151 financial information to another person only if the consumer
5252 authorizes the sale of the information as provided by this chapter.
5353 (b) A financial institution may sell a consumer's financial
5454 information to an affiliate of the financial institution without
5555 the consumer's authorization. An affiliate who receives a
5656 consumer's financial information from a financial institution may
5757 sell the information only if the consumer authorizes the financial
5858 institution to sell the information as provided by this chapter.
5959 Sec. 279.004. PRIVACY NOTICE AND AUTHORIZATION FOR SALE.
6060 (a) A financial institution shall provide a written privacy notice
6161 to:
6262 (1) each consumer who is transacting business with or
6363 using the services of the financial institution; and
6464 (2) a consumer who begins a relationship with the
6565 financial institution at the time the financial institution first
6666 communicates in writing or in person with the consumer.
6767 (b) The privacy notice shall:
6868 (1) inform the consumer that the financial institution
6969 may not sell the consumer's financial information if the consumer
7070 does not authorize the sale of the information; and
7171 (2) provide a form that the consumer may sign and
7272 return to the financial institution to indicate that the consumer
7373 authorizes the financial institution to sell the consumer's
7474 financial information.
7575 (c) A financial institution may sell a consumer's financial
7676 information only after the financial institution receives the form
7777 authorizing the sale of the information.
7878 (d) A financial institution that does not sell a consumer's
7979 financial information to a person other than an affiliate of the
8080 financial institution is not required to provide a privacy notice
8181 to a consumer under this section.
8282 Sec. 279.005. WITHDRAWAL OF AUTHORIZATION FOR SALE OF
8383 INFORMATION. A consumer who has authorized the sale of financial
8484 information under Section 279.004 may at any time withdraw the
8585 authorization in writing. The withdrawal of an authorization is
8686 effective on the date the financial institution receives the
8787 withdrawal.
8888 Sec. 279.006. JOINT RELATIONSHIPS. (a) If two or more
8989 consumers jointly obtain a financial product or service, the
9090 financial institution may provide a privacy notice to one or all of
9191 the consumers.
9292 (b) If a consumer authorizes the sale of the consumer's
9393 financial information as provided by this chapter, the financial
9494 institution may sell any financial information relating to that
9595 consumer, including information relating to a jointly obtained
9696 product or service.
9797 (c) If a consumer who does not authorize the sale of the
9898 consumer's financial information as provided by this chapter
9999 jointly obtains a financial product or service with another
100100 consumer who has authorized the sale, the financial institution may
101101 sell only the financial information of the first consumer that
102102 relates to the jointly obtained product or service.
103103 Sec. 279.007. FINANCIAL INSTITUTION MAY NOT REQUIRE
104104 AUTHORIZATION. A financial institution may not require a
105105 consumer's authorization for the sale of the consumer's financial
106106 information as a condition of doing business with the financial
107107 institution. A consent or waiver obtained from a consumer as a
108108 condition of doing business with a financial institution is not
109109 valid.
110110 Sec. 279.008. LIABILITY. A person is liable to a consumer
111111 for an intentional violation of this chapter in an amount equal to
112112 the greater of:
113113 (1) $1,000; or
114114 (2) actual damages caused by the sale of the financial
115115 information.
116116 SECTION 2. (a) A financial institution shall provide each
117117 person who is transacting business with or using the services of a
118118 financial institution on the effective date of this Act a privacy
119119 notice as required by Section 279.004, Finance Code, as added by
120120 this Act, not later than the 60th day after the effective date of
121121 this Act.
122122 (b) A financial institution may not sell a consumer's
123123 financial information after the 180th day after the effective date
124124 of this Act unless authorized by the consumer under Chapter 279,
125125 Finance Code, as added by this Act. For purposes of this subsection,
126126 a sale occurs on the earlier of the date an enforceable agreement to
127127 sell information is made or the date the information being sold is
128128 disclosed.
129129 SECTION 3. This Act takes effect September 1, 2009.