1-1 AN ACT 1-2 relating to state government privacy policy. 1-3 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: 1-4 SECTION 1. Subtitle A, Title 5, Government Code, is amended 1-5 by adding Chapter 559 to read as follows: 1-6 CHAPTER 559. STATE GOVERNMENT PRIVACY POLICIES 1-7 Sec. 559.001. DEFINITION. In this chapter, "state 1-8 governmental body" means a governmental body as defined by Section 1-9 552.003 that is part of state government. 1-10 Sec. 559.002. RIGHT TO BE INFORMED ABOUT INFORMATION 1-11 COLLECTED. It is the policy of this state that an individual is 1-12 entitled to be informed about information that a state governmental 1-13 body collects about the individual unless the state governmental 1-14 body is allowed to withhold the information from the individual 1-15 under Section 552.023. 1-16 Sec. 559.003. RIGHT TO NOTICE ABOUT CERTAIN INFORMATION LAWS 1-17 AND PRACTICES. (a) Each state governmental body that collects 1-18 information about an individual by means of a form that the 1-19 individual completes and files with the governmental body in a 1-20 paper format or in an electronic format on an Internet site shall 1-21 prominently state, on the paper form and prominently post on the 1-22 Internet site in connection with the electronic form, that: 1-23 (1) with few exceptions, the individual is entitled on 1-24 request to be informed about the information that the state 2-1 governmental body collects about the individual; 2-2 (2) under Sections 552.021 and 552.023 of the 2-3 Government Code, the individual is entitled to receive and review 2-4 the information; and 2-5 (3) under Section 559.004 of the Government Code, the 2-6 individual is entitled to have the state governmental body correct 2-7 information about the individual that is incorrect. 2-8 (b) Each state governmental body that collects information 2-9 about an individual by means of an Internet site or that collects 2-10 information about the computer network location or identity of a 2-11 user of the Internet site shall prominently post on the Internet 2-12 site what information is being collected through the site about the 2-13 individual or about the computer network location or identity of a 2-14 user of the site, including what information is being collected by 2-15 means that are not obvious. 2-16 Sec. 559.004. RIGHT TO CORRECTION OF INCORRECT INFORMATION. 2-17 Each state governmental body shall establish a reasonable procedure 2-18 under which an individual is entitled to have the state 2-19 governmental body correct information about the individual that is 2-20 possessed by the state governmental body and that is incorrect. 2-21 The procedure may not unduly burden an individual using the 2-22 procedure. 2-23 Sec. 559.005. APPLICABILITY OF AND CONSTRUCTION WITH PUBLIC 2-24 INFORMATION LAW. (a) Chapter 552 governs the charges that a state 2-25 governmental body may impose on an individual who requests 2-26 information the governmental body collects about the individual. 2-27 The governmental body may not charge an individual to correct 3-1 information about the individual. 3-2 (b) To the extent of a conflict between this chapter and the 3-3 public information law, Chapter 552, Chapter 552 controls. 3-4 SECTION 2. (a) The lieutenant governor and the speaker of 3-5 the house of representatives shall establish a privacy task force 3-6 to study issues related to the information practices of state 3-7 government that affect personal privacy. 3-8 (b) The lieutenant governor and the speaker shall each 3-9 appoint seven members to the task force. Two of the members 3-10 appointed by the lieutenant governor must be members of the senate. 3-11 Two of the members appointed by the speaker must be members of the 3-12 house of representatives. In making the appointments, the 3-13 lieutenant governor and the speaker shall make an effort to ensure 3-14 that the composition of the task force includes members with a 3-15 demonstrated interest in and knowledge regarding: 3-16 (1) consumer issues; 3-17 (2) business issues; 3-18 (3) issues related to the openness and accessibility 3-19 of government records; and 3-20 (4) issues related to conducting business transactions 3-21 electronically. 3-22 (c) The task force shall elect a presiding officer and 3-23 assistant presiding officer from among its members. 3-24 (d) The task force shall meet: 3-25 (1) as directed by the lieutenant governor and the 3-26 speaker, if applicable; and 3-27 (2) otherwise as determined by the members of the task 4-1 force but not less often than quarterly, beginning not later than 4-2 September 30, 2001. 4-3 (e) A legislative agency shall assist the task force at the 4-4 request of the lieutenant governor or the speaker, and a state 4-5 agency in the executive branch of state government shall assist the 4-6 task force at the request of the task force. 4-7 (f) The task force shall: 4-8 (1) identify the types of personal information about 4-9 individuals that are being collected by state governmental bodies 4-10 and how the information, once collected, is used; 4-11 (2) identify how state governmental bodies disseminate 4-12 personal information about individuals, including the extent to 4-13 which the information is sold or given to commercial enterprises; 4-14 (3) identify existing protections in state law and 4-15 administrative rules against unwarranted disclosure of personal 4-16 information about individuals and recommend legislation or rule 4-17 changes to enhance protections against unwarranted disclosure; 4-18 (4) assess the impact that evolving technologies have 4-19 on the collection, dissemination, and use of personal information 4-20 by state governmental bodies; 4-21 (5) identify the benefits and detriments of 4-22 information sharing among state governmental bodies that collect, 4-23 store, and disseminate information relating to individuals and 4-24 businesses; 4-25 (6) determine the proper role of state government in 4-26 the context of federal law and federal regulations in establishing 4-27 statutory and regulatory privacy protections; 5-1 (7) recommend steps to ensure that personal 5-2 information transmitted to, by, or from state governmental bodies 5-3 in an electronic format is adequately encrypted and secured to 5-4 protect individuals' privacy; 5-5 (8) recommend legislation and changes in 5-6 administrative policy governing the collection, storage, and 5-7 transfer of information among and within state governmental bodies; 5-8 (9) recommend legislation under which an individual 5-9 would have the right to be notified if a state governmental body 5-10 proposed to sell personally identifiable information about the 5-11 individual and would have the right to prohibit the sale unless the 5-12 sale was in furtherance of the statutory duties of the state 5-13 governmental body; and 5-14 (10) assess and analyze federal laws, regulations, and 5-15 practices that affect, may affect, or could serve as a model for 5-16 state government or commercial privacy practices and recommend 5-17 legislation based on its assessment and analysis. 5-18 (g) The task force shall report the results of its study and 5-19 its recommendations to the lieutenant governor and the speaker by 5-20 September 1, 2002. 5-21 (h) Unless continued in existence at the direction of the 5-22 lieutenant governor and the speaker, the task force is abolished 5-23 and this section expires September 1, 2003. 5-24 SECTION 3. Each state governmental body must be in compliance 5-25 with Chapter 559, Government Code, as added by this Act, before 5-26 January 1, 2002. 5-27 SECTION 4. This Act takes effect September 1, 2001. _______________________________ _______________________________ President of the Senate Speaker of the House I certify that H.B. No. 1922 was passed by the House on April 11, 2001, by a non-record vote; that the House refused to concur in Senate amendments to H.B. No. 1922 on May 21, 2001, and requested the appointment of a conference committee to consider the differences between the two houses; and that the House adopted the conference committee report on H.B. No. 1922 on May 26, 2001, by a non-record vote. _______________________________ Chief Clerk of the House I certify that H.B. No. 1922 was passed by the Senate, with amendments, on May 17, 2001, by a viva-voce vote; at the request of the House, the Senate appointed a conference committee to consider the differences between the two houses; and that the Senate adopted the conference committee report on H.B. No. 1922 on May 26, 2001, by a viva-voce vote. _______________________________ Secretary of the Senate APPROVED: __________________________ Date __________________________ Governor