97TH GENERAL ASSEMBLY
State of Illinois
2011 and 2012
HB3513

 

Introduced 2/24/2011, by Rep. Sandra M. Pihos

 

SYNOPSIS AS INTRODUCED:
 
815 ILCS 530/35 new

    Amends the Personal Information Protection Act. Prohibits a person or entity, not including a State or local agency, from: (i) publicly posting or publicly displaying in any manner an individual's social security number; (ii) printing an individual's social security number on any card required for the individual to access products or services provided by the person or entity; (iii) track personal or medical data using an individual's social security number (iv) requiring an individual to transmit his or her social security number over the Internet unless the connection is secure or the social security number is encrypted; (v) requiring an individual to use his or her social security number to access an Internet Web site, unless a password or unique personal identification number or other authentication device is also required to access the Web site; or (vi) printing an individual's social security number on any materials that are mailed to the individual, unless State or federal law requires the social security number to be on the document to be mailed. Makes an exception for applications and forms sent by mail to include social security numbers. Provides that the use of a social security number is not prohibited for the collection, use, or release of a social security number as required by State or federal law or the use of a social security number for internal verification or administrative purposes. Effective January 1, 2012.


LRB097 09903 AEK 50066 b

 

 

A BILL FOR

 

HB3513LRB097 09903 AEK 50066 b

1    AN ACT concerning business.
 
2    Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
 
4    Section 5. The Personal Information Protection Act is
5amended by adding Section 35 as follows:
 
6    (815 ILCS 530/35 new)
7    Sec. 35. Social security numbers.
8    (a) A person or entity, not including a State or local
9agency, shall not do any of the following:
10        (1) Publicly post or publicly display in any manner an
11    individual's social security number.
12        (2) Print an individual's social security number on any
13    card required for the individual to access products or
14    services provided by the person or entity.
15        (3) Track personal or medical data using an
16    individual's social security number.
17        (4) Require an individual to transmit his or her social
18    security number over the Internet unless the connection is
19    secure or the social security number is encrypted.
20        (5) Require an individual to use his or her social
21    security number to access an Internet website, unless a
22    password or unique personal identification number or other
23    authentication device is also required to access the

 

 

HB3513- 2 -LRB097 09903 AEK 50066 b

1    website.
2        (6) Print an individual's social security number on any
3    materials that are mailed to the individual, unless State
4    or federal law requires the social security number to be on
5    the document to be mailed. Notwithstanding this provision,
6    applications and forms sent by mail may include social
7    security numbers.
8    (b) This Section does not prevent the collection, use, or
9release of a social security number as required by State or
10federal law or the use of a social security number for internal
11verification or administrative purposes.
12    (c) This Section does not apply to records that are
13required by statute, case law, or the Illinois Supreme Court to
14be made available to the public.
15    (d) The Director of Public Health or the Director of
16Insurance, upon a determination of good cause, may grant
17extensions not to exceed 6 months for compliance by health care
18service plans and insurers with the requirements of this
19Section when requested by the health care service plan provider
20or insurer. Any extension granted shall apply to the health
21care service plan provider or insurer's affected providers,
22pharmacy benefits manager, and contractors.
23    (e) As used in this Section:
24    "Contractor" means any person or entity that is a medical
25group, independent practice association, pharmaceutical
26benefits manager, or a medical service organization and is not

 

 

HB3513- 3 -LRB097 09903 AEK 50066 b

1a health care service plan provider or a health care provider.
2    "Health care provider" means any physician, hospital
3facility, or other person licensed or otherwise authorized to
4deliver care services.
5    "Publicly post" or "publicly display" means to
6intentionally communicate or otherwise make available to the
7general public.
 
8    Section 99. Effective date. This Act takes effect January
91, 2012.