8 | 9 | | 2 |
---|
9 | 10 | | |
---|
10 | 11 | | 3 |
---|
11 | 12 | | LONG TITLE |
---|
12 | 13 | | 4 |
---|
13 | 14 | | General Description: |
---|
14 | 15 | | 5 |
---|
15 | 16 | | This bill addresses the Notice of Intent to Sell Nonpublic Personal Information Act. |
---|
16 | 17 | | 6 |
---|
17 | 18 | | Highlighted Provisions: |
---|
18 | 19 | | 7 |
---|
19 | 20 | | This bill: |
---|
20 | 21 | | 8 |
---|
21 | 22 | | ▸ modifies definitions; |
---|
22 | 23 | | 9 |
---|
23 | 24 | | ▸ clarifies that the liability and remedy under the Notice of Intent to Sell Nonpublic |
---|
24 | 25 | | 10 |
---|
25 | 26 | | Personal Information Act (act) is an individual action and not a class action or action in |
---|
26 | 27 | | 11 |
---|
27 | 28 | | a representative capacity; |
---|
28 | 29 | | 12 |
---|
29 | 30 | | ▸ addresses the statute or limitations; |
---|
30 | 31 | | 13 |
---|
31 | 32 | | ▸ finds that the act's prohibition of class actions since January 1, 2004, is a remedy |
---|
32 | 33 | | 14 |
---|
33 | 34 | | provision and not procedural; and |
---|
34 | 35 | | 15 |
---|
35 | 36 | | ▸ makes technical and conforming amendments. |
---|
36 | 37 | | 16 |
---|
37 | 38 | | Money Appropriated in this Bill: |
---|
38 | 39 | | 17 |
---|
39 | 40 | | None |
---|
40 | 41 | | 18 |
---|
41 | 42 | | Other Special Clauses: |
---|
42 | 43 | | 19 |
---|
43 | 44 | | None |
---|
44 | 45 | | 20 |
---|
45 | 46 | | Utah Code Sections Affected: |
---|
46 | 47 | | 21 |
---|
47 | 48 | | AMENDS: |
---|
48 | 49 | | 22 |
---|
49 | 50 | | 13-37-102, as enacted by Laws of Utah 2003, Chapter 97 |
---|
50 | 51 | | 23 |
---|
51 | 52 | | 13-37-203, as enacted by Laws of Utah 2003, Chapter 97 |
---|
52 | 53 | | 24 |
---|
53 | 54 | | |
---|
54 | 55 | | 25 |
---|
55 | 56 | | Be it enacted by the Legislature of the state of Utah: |
---|
56 | 57 | | 26 |
---|
57 | 58 | | Section 1. Section 13-37-102 is amended to read: |
---|
58 | 59 | | 27 |
---|
62 | 64 | | 29 |
---|
63 | 65 | | (1) "Affiliate" means a person that controls, is controlled by, or is under common control |
---|
64 | 66 | | 30 |
---|
65 | 67 | | with: |
---|
66 | 68 | | 31 |
---|
67 | 69 | | (a) a commercial entity; and |
---|
68 | 70 | | 32 |
---|
69 | 71 | | (b)(i) directly; or |
---|
70 | 72 | | 33 |
---|
71 | 73 | | (ii) indirectly through one or more intermediaries. |
---|
72 | 74 | | 34 |
---|
73 | 75 | | (2)(a) Subject to Subsection (2)(b), "commercial entity" means a person that: |
---|
74 | 76 | | 35 |
---|
75 | 77 | | [(i) has an office or other place of business located in the state; and] |
---|
76 | 78 | | 36 |
---|
77 | 79 | | [(ii) in the ordinary course of business transacts a consumer transaction in this state.] |
---|
78 | 80 | | 37 |
---|
79 | 81 | | (i) maintains a physical office in the state; and |
---|
80 | 82 | | 38 |
---|
81 | 83 | | (ii) in the ordinary course transacts business at the physical office with consumers |
---|
82 | 84 | | 39 |
---|
83 | 85 | | located in the state. |
---|
84 | 86 | | 40 |
---|
85 | 87 | | (b) "Commercial entity" does not include: |
---|
86 | 88 | | 41 |
---|
87 | 89 | | (i) a governmental entity; or |
---|
88 | 90 | | 42 |
---|
89 | 91 | | (ii) an entity providing services on behalf of a governmental entity. |
---|
90 | 92 | | 43 |
---|
91 | 93 | | (3) "Compensation" means anything of economic value that is paid or transferred to a |
---|
92 | 94 | | 44 |
---|
93 | 95 | | commercial entity for or in direct consideration of the disclosure of nonpublic personal |
---|
94 | 96 | | 45 |
---|
95 | 97 | | information. |
---|
96 | 98 | | 46 |
---|
97 | 99 | | (4)(a) "Consumer transaction" means: |
---|
98 | 100 | | 47 |
---|
99 | 101 | | (i) a sale, lease, assignment, award by chance, or other written or oral transfer or |
---|
100 | 102 | | 48 |
---|
101 | 103 | | disposition: |
---|
102 | 104 | | 49 |
---|
103 | 105 | | (A) that is initiated or completed in this state; and |
---|
104 | 106 | | 50 |
---|
105 | 107 | | (B) of: |
---|
106 | 108 | | 51 |
---|
107 | 109 | | (I) goods; |
---|
108 | 110 | | 52 |
---|
109 | 111 | | (II) services; or |
---|
110 | 112 | | 53 |
---|
111 | 113 | | (III) other tangible or intangible property, except securities and insurance or |
---|
112 | 114 | | 54 |
---|
113 | 115 | | services related thereto; or |
---|
114 | 116 | | 55 |
---|
115 | 117 | | (ii) a transaction: |
---|
116 | 118 | | 56 |
---|
117 | 119 | | (A) that is initiated or completed in this state; and |
---|
118 | 120 | | 57 |
---|
119 | 121 | | (B) that constitutes credit offered or extended by a commercial entity to a person |
---|
120 | 122 | | 58 |
---|
121 | 123 | | primarily for personal, family, or household purposes. |
---|
122 | 124 | | 59 |
---|
123 | 125 | | (b) "Consumer transaction" includes: |
---|
124 | 126 | | 60 |
---|
125 | 127 | | (i) the use of nonpublic personal information in relation to a transaction with a person |
---|
126 | 128 | | 61 |
---|
127 | 129 | | if the transaction is for primarily personal, family, or household purposes; and |
---|
131 | 133 | | 63 |
---|
132 | 134 | | (A) an offer or solicitation; |
---|
133 | 135 | | 64 |
---|
134 | 136 | | (B) an agreement; |
---|
135 | 137 | | 65 |
---|
136 | 138 | | (C) the performance of an agreement; or |
---|
137 | 139 | | 66 |
---|
138 | 140 | | (D) a charitable solicitation as defined in Section 13-11-3. |
---|
139 | 141 | | 67 |
---|
140 | 142 | | (c) "Consumer transaction" does not include a transaction related to real property. |
---|
141 | 143 | | 68 |
---|
142 | 144 | | (5)(a) "Nonpublic personal information" means information that: |
---|
143 | 145 | | 69 |
---|
144 | 146 | | (i) is not public information; and |
---|
145 | 147 | | 70 |
---|
146 | 148 | | (ii) either alone or in conjunction with public information, identifies a person in |
---|
147 | 149 | | 71 |
---|
148 | 150 | | distinction from other persons. |
---|
149 | 151 | | 72 |
---|
150 | 152 | | (b) "Nonpublic personal information" includes: |
---|
151 | 153 | | 73 |
---|
152 | 154 | | (i) a person's Social Security number; |
---|
153 | 155 | | 74 |
---|
154 | 156 | | (ii) information used to determine a person's credit worthiness including a person's: |
---|
155 | 157 | | 75 |
---|
156 | 158 | | (A) income; or |
---|
157 | 159 | | 76 |
---|
158 | 160 | | (B) employment history; |
---|
159 | 161 | | 77 |
---|
160 | 162 | | (iii) the purchasing patterns of a person; or |
---|
161 | 163 | | 78 |
---|
162 | 164 | | (iv) the personal preferences of a person. |
---|
163 | 165 | | 79 |
---|
164 | 166 | | (6)(a) "Physical office" means a location: |
---|
165 | 167 | | 80 |
---|
166 | 168 | | (i) accessible to the public during normal business hours; |
---|
167 | 169 | | 81 |
---|
168 | 170 | | (ii) staffed by one or more individuals who conduct business on behalf of the |
---|
169 | 171 | | 82 |
---|
170 | 172 | | commercial entity; and |
---|
171 | 173 | | 83 |
---|
172 | 174 | | (iii) used for the primary purpose of transacting business with consumers in the state. |
---|
173 | 175 | | 84 |
---|
174 | 176 | | (b) "Physical office" does not include a post office box, mailing address, registered |
---|
175 | 177 | | 85 |
---|
176 | 178 | | agent, or virtual office that a person solely relies on for business correspondence. |
---|
177 | 179 | | 86 |
---|
178 | 180 | | [(6)] (7) "Public information" means a person's: |
---|
179 | 181 | | 87 |
---|
180 | 182 | | (a) name; |
---|
181 | 183 | | 88 |
---|
182 | 184 | | (b) telephone number; or |
---|
183 | 185 | | 89 |
---|
184 | 186 | | (c) street address. |
---|
185 | 187 | | 90 |
---|
186 | 188 | | [(7)] (8)(a) Subject to Subsection [(7)(b)] (8)(b), "third party" means a person other than |
---|
187 | 189 | | 91 |
---|
188 | 190 | | the commercial entity that obtains nonpublic personal information. |
---|
189 | 191 | | 92 |
---|
190 | 192 | | (b) "Third party" does not include an affiliate or agent of the commercial entity that |
---|
191 | 193 | | 93 |
---|
192 | 194 | | obtains nonpublic personal information. |
---|
193 | 195 | | 94 |
---|
194 | 196 | | Section 2. Section 13-37-203 is amended to read: |
---|
195 | 197 | | 95 |
---|
196 | 198 | | 13-37-203 . Liability and remedy. |
---|
200 | 202 | | 97 |
---|
201 | 203 | | action, not a class action or act in a representative capacity, against a commercial entity |
---|
202 | 204 | | 98 |
---|
203 | 205 | | in a [court of competent jurisdiction in this state] federal or state court with jurisdiction if: |
---|
204 | 206 | | 99 |
---|
205 | 207 | | (a) the commercial entity enters into a consumer transaction with that person; |
---|
206 | 208 | | 100 |
---|
207 | 209 | | (b) as a result of the consumer transaction described in Subsection (1)(a), the |
---|
208 | 210 | | 101 |
---|
209 | 211 | | commercial entity obtains nonpublic personal information concerning that person; and |
---|
210 | 212 | | 102 |
---|
211 | 213 | | (c) the commercial entity violates this chapter. |
---|
212 | 214 | | 103 |
---|
213 | 215 | | (2) In an action brought under Subsection (1), a commercial entity that violates this chapter |
---|
214 | 216 | | 104 |
---|
215 | 217 | | is liable to the person individually, but not to a class or to a person in a representative |
---|
216 | 218 | | 105 |
---|
217 | 219 | | capacity, who brings the action for: |
---|
218 | 220 | | 106 |
---|
219 | 221 | | (a) $500 for each time the commercial entity fails to provide the notice required by this |
---|
220 | 222 | | 107 |
---|
221 | 223 | | section in relation to the nonpublic personal information of the person who brings the |
---|
222 | 224 | | 108 |
---|
223 | 225 | | action; and |
---|
224 | 226 | | 109 |
---|
225 | 227 | | (b) court costs. |
---|
226 | 228 | | 110 |
---|
227 | 229 | | (3) An action for a violation of this chapter may only be brought in accordance with Section |
---|
228 | 230 | | 111 |
---|
229 | 231 | | 78B-2-302 within one year from the day of the consumer transaction at issue. |
---|
230 | 232 | | 112 |
---|
231 | 233 | | (4) The Legislature finds that since January 1, 2004, the prohibition on bringing a class |
---|
232 | 234 | | 113 |
---|
233 | 235 | | action is a remedy provision and not merely procedural. |
---|
234 | 236 | | 114 |
---|
235 | 237 | | [(3) A person may not bring a class action under this chapter.] |
---|
236 | 238 | | 115 |
---|
237 | 239 | | Section 3. Effective Date. |
---|
238 | 240 | | 116 |
---|
239 | 241 | | This bill takes effect on May 7, 2025. |
---|
240 | 242 | | - 4 - |
---|