75th OREGON LEGISLATIVE ASSEMBLY--2009 Regular Session
 
HA to HB 2371
 
LC 1702/HB 2371-5
 
                       HOUSE AMENDMENTS TO
                         HOUSE BILL 2371
 
               By COMMITTEE ON CONSUMER PROTECTION
 
                             April 8
 
  On page 1 of the printed bill, delete lines 14 through 31 and
delete page 2 and insert:
  '  { +  SECTION 2. + }  { + (1) As used in this section:
  ' (a) 'Driver license' means a license or permit issued by this
state or any other jurisdiction as evidence of a grant of driving
privileges.
  ' (b) 'Identification card' means the card issued under ORS
807.400 or a comparable provision in another state.
  ' (c) 'Personal information' means an individual's name,
address, date of birth, photograph, fingerprint, biometric data,
driver license or identification card number or any other unique
personal identifier or number.
  ' (d) 'Private entity' means any nongovernmental entity, such
as a corporation, partnership, company or nonprofit organization,
any other legal entity or any natural person.
  ' (e) 'Swipe' means the act of passing a driver license or
identification card through a device that is capable of
deciphering, in an electronically readable format, the
information electronically encoded in a magnetic strip or bar
code on the driver license or identification card.
  ' (2) A private entity may not swipe an individual's driver
license or identification card, except for the following
purposes:
  ' (a) To verify the authenticity of a driver license or
identification card or to verify the identity of the individual
if the individual pays for a good or service with a method other
than cash, returns an item or requests a refund.
  ' (b) To verify the individual's age when providing an
age-restricted good or service to any person about whom there is
any reasonable doubt of the person's having reached 21 years of
age.
  ' (c) To prevent fraud or other criminal activity if an
individual returns an item or requests a refund and the private
entity uses a fraud prevention service company or system.
  ' (d) To transmit information to a check services company for
the purpose of approving negotiable instruments, electronic funds
transfers or similar methods of payment.
  ' (3) A private entity that swipes an individual's driver
license or identification card under subsection (2)(a) or (b) of
this section may not store, sell or share personal information
collected from swiping the driver license or identification card.
  ' (4) A private entity that swipes an individual's driver
license or identification card under subsection (2)(c) or (d) of
this section may store or share the name, address, date of birth,
driver license number or identification card number collected
from swiping the driver license or identification card for the
purpose of preventing fraud or other criminal activity against
the private entity.
  ' (5) A person who receives personal information from a private
entity under subsection (4) of this section may use the personal
information received only to prevent fraud or other criminal
activity against the private entity that provided the personal
information.
  ' (6) A governmental entity may swipe an individual's driver
license or identification card only if:
  ' (a) The individual knowingly makes the driver license or
identification card available to the governmental entity;
  ' (b) The governmental entity lawfully confiscates the driver
license or identification card; or
  ' (c) The governmental entity is providing emergency assistance
to the individual who is unconscious or otherwise unable to make
the driver license or identification card available.
  ' (7) In addition to any other remedy provided by law, an
individual may bring an action to recover actual damages or
$1,000, whichever is greater, and to obtain equitable relief, if
equitable relief is available, against an entity that swipes,
stores, shares, sells or otherwise uses the individual's personal
information in violation of this section. A court shall award a
prevailing plaintiff reasonable costs and attorney fees. If a
court finds that a violation of this section was willful or
knowing, the court may increase the amount of the award to no
more than three times the amount otherwise available.
  ' (8) Any waiver of a provision of this section is contrary to
public policy and is void and unenforceable. + } ' .
                         ----------