1Amending the act of June 29, 2006 (P.L.281, No.60), entitled "An
2act relating to confidentiality of Social Security numbers;
3and making a related repeal," further providing for privacy
4of Social Security numbers.

5The General Assembly of the Commonwealth of Pennsylvania
6hereby enacts as follows:

7Section 1. Section 1(a) and (c) of the act of June 29, 2006
8(P.L.281, No.60), entitled "An act relating to confidentiality
9of Social Security numbers; and making a related repeal," are
10amended to read:

11Section 1. Privacy of Social Security numbers.

12(a) General rule.--A person or entity or State agency or
13political subdivision shall not do any of the following:

14(1) Publicly post or publicly display in any manner an
15individual's Social Security number. "Publicly post" or
16"publicly display" means to intentionally communicate or
17otherwise make available to the general public.

18(2) Print an individual's Social Security number on any

1card required for the individual to access products or
2services provided by the person, entity or State agency or
3political subdivision.

4(3) Require an individual to transmit his or her Social
5Security number over the Internet unless the connection is
6secure or the Social Security number is encrypted.

7(4) Require an individual to use his or her Social
8Security number to access an Internet website unless a
9password or unique personal identification number or other
10authentication device is also required to access the website.

11(5) Print an individual's Social Security number on any
12materials that are mailed to the individual unless Federal or
13State law requires the Social Security number to be on the
14document to be mailed. Notwithstanding this provision, Social
15Security numbers may be included in applications and forms
16sent by mail, including documents sent as part of an
17application or enrollment process or to establish, amend or
18terminate an account, contract or policy or to confirm the
19accuracy of the Social Security number. A Social Security
20number that is permitted to be mailed under this section may
21not be printed, in whole or in part, on a postcard or other
22mailer not requiring an envelope, or visible on the envelope
23or without the envelope having been opened.

24(6) Disclose in any manner, except to the agency issuing
25the license, the Social Security number of an individual who
26applies for a recreational license. For the purposes of this
27paragraph, a "recreational license" means a license issued
28pursuant to 30 Pa.C.S. (relating to fish) or 34 Pa.C.S.
29(relating to game).

30(7) Refuse any service, privilege or right to an

1individual wholly or partly in a business transaction because
2the individual refuses to disclose or furnish the Social
3Security number of the individual.

4* * *

5(c) [Exception] Exceptions.--

6(1) A person or entity, not including a State agency or
7political subdivision, that has used, prior to the effective
8date of this section, an individual's Social Security number
9in a manner inconsistent with subsection (a) may continue
10using that individual's Social Security number in that manner
11on or after the effective date of this section if all of the
12following conditions are met:

13(i) The use of the Social Security number is
14continuous. If the use is stopped for any reason,
15subsection (a) shall apply.

16(ii) The individual is provided an annual
17disclosure, commencing in the year after the effective
18date of this section, that informs the individual that he
19or she has the right to stop the use of his or her Social
20Security number in a manner prohibited by subsection (a).

21(2) An individual who receives an annual disclosure
22under paragraph (1) has the right to stop the use of his or
23her Social Security number in a manner prohibited by
24subsection (a) and must exercise that right by submitting a
25written request to the person or entity. The person or entity
26shall discontinue use of the individual's Social Security
27number within 30 days of the receipt of the request. There
28shall be no fee or charge for complying with the request. A
29person or entity shall not deny services to an individual
30because the individual makes a written request pursuant to

1this subsection.

2(3) Subsection (a) does not apply if:

3(i) The Social Security account number is requested
4for purposes of employment, including in the course of
5the administration of a claim, benefit or procedure
6related to the individual's employment by the person,
7including the individual's termination from employment,
8retirement from employment, injury suffered during the
9course of employment or to check on an unemployment
10insurance claim of the individual.

11(ii) The Social Security account number is requested
12for purposes of tax compliance.

13* * *

14Section 2. This act shall take effect in 60 days.