Texas 2021 - 87th Regular

Texas House Bill HB3471 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11 87R8320 JXC-F
22 By: King of Parker H.B. No. 3471
33
44
55 A BILL TO BE ENTITLED
66 AN ACT
77 relating to the Texas Consumer Privacy Act Phase I; creating
88 criminal offenses; increasing the punishment for an existing
99 criminal offense.
1010 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1111 SECTION 1. This Act may be cited as the Texas Consumer
1212 Privacy Act Phase I.
1313 SECTION 2. Section 521.0475(a), Transportation Code, is
1414 amended to read as follows:
1515 (a) Except as provided by Subsection (b), the department
1616 shall provide a certified abstract of a complete driving record of a
1717 license holder, for a fee of $20, to the license holder or a person
1818 eligible to receive the information under Sections
1919 730.007(a)(2)(A), (B), and (E) [Sections 730.007(a)(2)(A), (D),
2020 and (I)].
2121 SECTION 3. Section 730.003, Transportation Code, is amended
2222 by adding Subdivision (1-a) and amending Subdivision (6) to read as
2323 follows:
2424 (1-a) "Authorized recipient" means a person who
2525 receives personal information directly from an agency in a manner
2626 authorized by this chapter.
2727 (6) "Personal information" means information that
2828 identifies a person, including an individual's photograph or
2929 computerized image, social security number, date of birth, [driver]
3030 identification number, name, address, e-mail address [but not the
3131 zip code], telephone number, and medical or disability information.
3232 The term does not include:
3333 (A) information on vehicle accidents, driving or
3434 equipment-related violations, or driver's license or registration
3535 status; or
3636 (B) information contained in an accident report
3737 prepared under:
3838 (i) Chapter 550; or
3939 (ii) former Section 601.004 before
4040 September 1, 2017.
4141 SECTION 4. Section 730.006, Transportation Code, is amended
4242 to read as follows:
4343 Sec. 730.006. REQUIRED DISCLOSURE WITH CONSENT. Personal
4444 information obtained by an agency in connection with a motor
4545 vehicle record shall be disclosed to a requestor who:
4646 (1) is the subject of the information; or
4747 (2) demonstrates, in such form and manner as the
4848 agency requires, that the requestor has obtained the written
4949 consent of the person who is the subject of the information.
5050 SECTION 5. The heading to Section 730.007, Transportation
5151 Code, is amended to read as follows:
5252 Sec. 730.007. PERMITTED DISCLOSURES OF CERTAIN PERSONAL
5353 INFORMATION.
5454 SECTION 6. Sections 730.007(a) and (c), Transportation
5555 Code, are amended to read as follows:
5656 (a) Personal information obtained by an agency in
5757 connection with a motor vehicle record may be disclosed to any
5858 requestor by an agency if the requestor:
5959 (1) provides the requestor's name and address and any
6060 proof of that information required by the agency; and
6161 (2) represents that the use of the personal
6262 information will be strictly limited to:
6363 (A) use by the Texas Department of Motor
6464 Vehicles, the Department of Public Safety, the Texas Department of
6565 Transportation, a [:
6666 [(i) a government agency, including any]
6767 court, or a law enforcement agency, in carrying out its functions;
6868 [or
6969 [(ii) a private person or entity acting on
7070 behalf of a government agency in carrying out the functions of the
7171 agency;]
7272 (B) [use in connection with a matter of:
7373 [(i) motor vehicle or motor vehicle
7474 operator safety;
7575 [(ii) motor vehicle theft;
7676 [(iii) motor vehicle product alterations,
7777 recalls, or advisories;
7878 [(iv) performance monitoring of motor
7979 vehicles, motor vehicle parts, or motor vehicle dealers;
8080 [(v) motor vehicle market research
8181 activities, including survey research; or
8282 [(vi) removal of nonowner records from the
8383 original owner records of motor vehicle manufacturers;
8484 [(C) use in the normal course of business by a
8585 legitimate business or an authorized agent of the business, but
8686 only:
8787 [(i) to verify the accuracy of personal
8888 information submitted by the individual to the business or the
8989 agent of the business; and
9090 [(ii) if the information is not correct, to
9191 obtain the correct information, for the sole purpose of preventing
9292 fraud by, pursuing a legal remedy against, or recovering on a debt
9393 or security interest against the individual;
9494 [(D)] use in conjunction with a civil, criminal,
9595 administrative, or arbitral proceeding in any court or government
9696 agency or before any self-regulatory body, including service of
9797 process, investigation in anticipation of litigation, execution or
9898 enforcement of a judgment or order, or under an order of any court;
9999 (C) [(E)] use in research or in producing
100100 statistical reports, but only if the personal information is not
101101 published, redisclosed, or used to contact any individual;
102102 (D) [(F) use by an insurer or insurance support
103103 organization, or by a self-insured entity, or an authorized agent
104104 of the entity, in connection with claims investigation activities,
105105 antifraud activities, rating, or underwriting;
106106 [(G)] use in providing notice to an owner of a
107107 vehicle that was towed or impounded and is in the possession of the
108108 requestor [vehicle];
109109 (E) [(H) use by a licensed private investigator
110110 agency or licensed security service for a purpose permitted under
111111 this section;
112112 [(I)] use by an employer or an agent or insurer of
113113 the employer to obtain or verify information relating to a holder of
114114 a commercial driver's license that is required under 49 U.S.C.
115115 Chapter 313;
116116 (F) [(J)] use in connection with the operation of
117117 a private toll transportation facility; or
118118 (G) [(K)] use by a consumer reporting agency, as
119119 defined by the Fair Credit Reporting Act (15 U.S.C. Section 1681 et
120120 seq.), for a purpose permitted under that Act[; or
121121 [(L) use for any other purpose specifically
122122 authorized by law that relates to the operation of a motor vehicle
123123 or to public safety].
124124 (c) This section does not:
125125 (1) prohibit the disclosure of a person's photographic
126126 image to:
127127 (A) a law enforcement agency, the Texas
128128 Department of Motor Vehicles, [a county tax assessor-collector,] or
129129 a criminal justice agency for an official purpose;
130130 (B) an agency of this state investigating an
131131 alleged violation of a state or federal law relating to the
132132 obtaining, selling, or purchasing of a benefit authorized by
133133 Chapter 31 or 33, Human Resources Code; or
134134 (C) an agency of this state investigating an
135135 alleged violation of a state or federal law under authority
136136 provided by Title 4, Labor Code; or
137137 (2) prevent a court from compelling by subpoena the
138138 production of a person's photographic image.
139139 SECTION 7. Chapter 730, Transportation Code, is amended by
140140 adding Sections 730.0121, 730.0122, and 730.0123 to read as
141141 follows:
142142 Sec. 730.0121. DELETION OF INFORMATION REQUIRED IF NOT
143143 AUTHORIZED RECIPIENT. An agency by rule shall require a requestor
144144 to delete from the requestor's records personal information
145145 received from the agency under this chapter if the requestor
146146 becomes aware that the requestor is not an authorized recipient of
147147 that information.
148148 Sec. 730.0122. SALE PROHIBITED. (a) A person may not sell
149149 personal information obtained by an agency in connection with a
150150 motor vehicle record.
151151 (b) A person commits an offense if the person violates
152152 Subsection (a). An offense under this subsection is a misdemeanor
153153 punishable by a fine not to exceed $100,000.
154154 Sec. 730.0123. CIVIL SUIT. (a) A person who sells personal
155155 information obtained by an agency in connection with a motor
156156 vehicle record is liable to the person who is the subject of the
157157 information for:
158158 (1) actual damages;
159159 (2) if the actual damages to the person are less than
160160 $2,500, an additional amount so that the total amount of damages
161161 equals $2,500; and
162162 (3) court costs and reasonable attorney's fees
163163 incurred by the person who is the subject of the information in
164164 bringing the action.
165165 (b) A person whose personal information has been sold in
166166 violation of this section may sue for:
167167 (1) the damages, costs, and fees authorized under
168168 Subsection (a);
169169 (2) injunctive relief; and
170170 (3) any other equitable remedy determined to be
171171 appropriate by the court.
172172 (c) A district court has exclusive original jurisdiction
173173 over a cause of action brought under this section.
174174 SECTION 8. Section 730.013, Transportation Code, is amended
175175 to read as follows:
176176 Sec. 730.013. [RESALE OR] REDISCLOSURE; OFFENSE. (a) An
177177 authorized recipient of personal information may not [resell or]
178178 redisclose the personal information in the identical or a
179179 substantially identical format the personal information was
180180 disclosed to the recipient by the applicable agency.
181181 (b) An authorized recipient of personal information may
182182 [resell or] redisclose the information only for a use permitted
183183 under Section 730.007.
184184 (c) An [Any] authorized recipient who [resells or]
185185 rediscloses personal information obtained from an agency shall be
186186 required by that agency to:
187187 (1) maintain for a period of not less than five years
188188 records as to any person or entity receiving that information and
189189 the permitted use for which it was obtained; and
190190 (2) provide copies of those records to the agency on
191191 request.
192192 (c-1) A person who receives personal information from an
193193 authorized recipient may not redisclose the personal information.
194194 (c-2) An authorized recipient shall notify each person who
195195 receives personal information from the authorized recipient that
196196 the person may not redisclose the personal information.
197197 (d) A person commits an offense if the person violates this
198198 section. An offense under this subsection is a misdemeanor
199199 punishable by a fine not to exceed $100,000 per record of personal
200200 information that is a subject of the violation [$25,000].
201201 SECTION 9. The heading to Section 730.016, Transportation
202202 Code, is amended to read as follows:
203203 Sec. 730.016. INELIGIBILITY OF CERTAIN PERSONS TO RECEIVE,
204204 RETAIN, OR REDISCLOSE PERSONAL INFORMATION; OFFENSE.
205205 SECTION 10. Section 730.016, Transportation Code, is
206206 amended by amending Subsection (a) and adding Subsection (c) to
207207 read as follows:
208208 (a) A person who is convicted of an offense under this
209209 chapter, or who violates a rule adopted by an agency relating to the
210210 terms or conditions for a release of personal information to the
211211 person:
212212 (1)[,] is ineligible to receive personal information
213213 under Section 730.007;
214214 (2) not later than one year after the date of
215215 conviction or of the agency's final determination of a rule
216216 violation, shall delete from the person's records all personal
217217 information received under this chapter; and
218218 (3) may not redisclose personal information received
219219 under this chapter.
220220 (c) A person commits an offense if the person violates this
221221 section. An offense under this subsection is a misdemeanor
222222 punishable by a fine not to exceed $100,000 per record of personal
223223 information that is a subject of the violation.
224224 SECTION 11. The changes in law made by this Act apply only
225225 to an offense committed on or after the effective date of this Act.
226226 An offense committed before the effective date of this Act is
227227 governed by the law in effect on the date the offense was committed,
228228 and the former law is continued in effect for that purpose. For
229229 purposes of this section, an offense was committed before the
230230 effective date of this Act if any element of the offense occurred
231231 before that date.
232232 SECTION 12. (a) Section 730.0121, Transportation Code, as
233233 added by this Act, applies to a person who received personal
234234 information under Chapter 730, Transportation Code, before the
235235 effective date of this Act, and is not an authorized recipient of
236236 that personal information under Chapter 730, Transportation Code,
237237 as amended by this Act.
238238 (b) Notwithstanding Subsection (a) of this section, an
239239 agency to which Section 730.0121, Transportation Code, as added by
240240 this Act, applies may not require a person who received personal
241241 information from the agency before the effective date of this Act
242242 and is not an authorized recipient, as defined by Section
243243 730.003(1-a), Transportation Code, as added by this Act, of that
244244 information to delete the information before the first anniversary
245245 of the effective date of this Act.
246246 SECTION 13. This Act takes effect immediately if it
247247 receives a vote of two-thirds of all the members elected to each
248248 house, as provided by Section 39, Article III, Texas Constitution.
249249 If this Act does not receive the vote necessary for immediate
250250 effect, this Act takes effect September 1, 2021.