Kentucky House Judiciary Committee Unanimously Passes Identity Theft Legislation

Members of the Kentucky House Judiciary Committee have unanimously voted Attorney General Jack Conway and Representative Robin Webb's identity theft legislation out of committee. It will now be presented to the full Kentucky House of Representatives. The bill is cosponsored by Rep. Jim Glenn and Rep. John Vincent.

"This bill requires all Kentucky businesses to follow the same federal guidelines that financial institutions and healthcare companies have been following for years," General Conway said. "House Bill 553 will protect consumers and help them restore their good name if thieves steal their identities."

"Identity theft is becoming the fastest-growing financial crime in America and Kentucky," said Rep. Robin Webb. "This bill will protect victims of identity theft through better notification procedures, stronger legal options and better oversight from businesses."

House Bill 553

• It will require businesses to notify residents if their personal information, such as a bank-account or social-security number, has been compromised by improper disposal of paper records or an online security breach.
• A security breach notice is not required if the business establishes the risk of personal information being misused is not reasonably possible.
• Businesses must take steps to protect and properly dispose of personal information. If information is compromised, businesses could be civilly liable for losses incurred by consumers.
• Businesses must keep social security numbers hidden in mailings, remove as identification numbers on benefit cards and require security measures for websites where consumers enter their social security numbers.
• The legislation will criminalize the practice of "phishing", where emails or websites mimicking legitimate businesses are created to scam consumers.
• It will expedite the process for residents to obtain a Circuit Court order that they could use to dispute fraudulent charges.
• The law will require all local law-enforcement agencies to process identity-theft complaints and provide copies to victims.
• Identity-theft education will be incorporated into basic training for all police officers.
• The law expands the scope of identity-theft violations to which victims may seek civil relief against criminals who've perpetrated these crimes.
• The bill will strengthen Kentucky's existing Harassing Communications statute by clarifying that the law also applies when a perpetrator uses another person's identity when sending an offending communication.