S0824B0899A01100 MSP:EJH 06/16/23 #90 A01100
AMENDMENTS TO SENATE BILL NO. 824
Sponsor: SENATOR PHILLIPS-HILL
Printer's No. 899
Amend Bill, page 1, line 6, by inserting after "providing"
for definitions,
Amend Bill, page 1, lines 12 through 14, by striking out all
of said lines and inserting
Section 1. The definition of "personal information" in
section 2 of the act of December 22, 2005 (P.L.474, No.94),
known as the Breach of Personal Information Notification Act,
amended November 3, 2022 (P.L.2139, No.151), is amended to read:
Section 2. Definitions.
The following words and phrases when used in this act shall
have the meanings given to them in this section unless the
context clearly indicates otherwise:
* * *
"Personal information."
(1) An individual's first name or first initial and last
name in combination with and linked to any one or more of the
following data elements when the data elements are not
encrypted or redacted:
(i) Social Security number.
(ii) Driver's license number or a State
identification card number issued in lieu of a driver's
license.
(iii) Financial account number, credit or debit card
number, in combination with any required security code,
access code or password that would permit access to an
individual's financial account.
(iv) Medical information in the possession of a
State agency or State agency contractor.
(v) Health insurance information.
(vi) A user name or e-mail address, in combination
with a password or security question and answer that
would permit access to an online account.
(2) The term does not include publicly available
information that is lawfully made available to the general
public from Federal, State or local government records or
widely distributed media.
* * *
2023/90MSP/SB0824A01100 - 1 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
Section 1.1. Section 3 of the act is amended by adding a
subsection to read:
2023/90MSP/SB0824A01100 - 2 -
1
2