BILL ANALYSIS
Senate Research Center C.S.S.B. 327
Committee Report (Substituted)
AUTHOR'S/SPONSOR'S STATEMENT OF INTENT
Currently, advances in technology have made existing law insufficient to combat acts of spyware, which is any technology that aids in gathering information about a person or organization without their knowledge. On the Internet, spyware is programming that is put into a person's computer to gather information about the user and relay it to advertisers or other interested parties. Spyware can be downloaded onto a person's computer when the person installs a new program and often times, users are unaware that they have installed spyware.
C.S.S.B. 327 establishes state laws to specifically prohibit acts of spyware and to create an offense and penalty for the unauthorized collection, transmission, and use of pesonally identifiable information about a person using a computer.
RULEMAKING AUTHORITY
SECTION BY SECTION ANALYSIS
SECTION 1. Amends Title 4, Business & Commerce Code, by adding Chapter 48, as follows:
CHAPTER 48. CONSUMER PROTECTION AGAINST COMPUTER SPYWARE ACT
SUBCHAPTER A. GENERAL PROVISIONS
Sec. 48.001. SHORT TITLE. Authorizes this chapter to be cited as the Consumer Protection Against Computer Spyware Act.
Sec. 48.002. DEFINITIONS. Defines "advertisement," "computer software," "damage," "execute," "keystroke-logging function," "owner or operator of a computer," "person," and "personally identifiable information."
Sec. 48.003. APPLICABILITY OF CHAPTER. Provides specific exceptions to this chapter for the transmission of computer software to the computer of another by a person providing certain services. Provides that Section 48.052, other than Subdivision (1) of that section, and Sections 48.053(4) and 48.055 of this chapter do not apply to certain providers of service.
[Reserves Sections 48.004-48.050 for expansion.]
SUBCHAPTER B. PROHIBITED CONDUCT OR ACTIVITIES
Sec. 48.051. UNAUTHORIZED COLLECTION OR TRANSMISSION OF PERSONALLY IDENTIFIABLE INFORMATION. Prohibits a person, other than the owner or operator of a computer, from knowingly transmitting computer software to a computer in this state and using the software to collect or cull, through intentionally deceptive means, certain personally identifiable information.
Sec. 48.052. UNAUTHORIZED TRANSMISSIONS OR MODIFICATIONS OF COMPUTER SETTINGS; COMPUTER DAMAGE. Prohibits a person, other than the owner or operator of the computer, from knowingly transmitting computer software to a computer in this state and using the software to modify, through intentionally deceptive means, certain settings, including certain security settings, or take control of the computer by accessing or using the computer for certain purposes or opening, without the consent of the owner, certain advertisements.
Sec. 48.053. UNAUTHORIZED INTERFERENCE WITH INSTALLATION OR DISABLING OF COMPUTER SOFTWARE. Prohibits a person, other than the owner or operator of the computer, from knowingly transmitting computer software to a computer in this state and using the software to prevent, through intentionally deceptive means, reasonable efforts of the owner or operator to block the installation or execution of or to disable certain software, to intentionally misrepresent to another that computer software will be uninstalled or disabled by the actions of the owner or operator of the computer, or to remove, disable, or render inoperative, through intentionally deceptive means, security, antispyware, or antivirus software installed on the computer.
Sec. 48.054. KNOWING VIOLATION. Provides that a person knowingly violates Sections 48.051, 48.052, or 48.053, if the person acts with actual knowledge of the facts that constitute the violation or consciously avoids information that would establish actual knowledge of those facts.
Sec. 48.055. OTHER PROHIBITED CONDUCT. Prohibits a person, other than the owner or operator of the computer, from inducing the owner or operator of a computer in this state to install a computer software component by intentionally misrepresenting certain facts or copying and executing or providing for the copying and execution of a computer software component to a computer in this state in a deceptive manner with the intent of causing the owner or operator of the computer to use the component in a manner that violates this chapter.
Sec. 48.056. DECEPTIVE ACT OR OMISSION. Provides that, for purposes of this chapter, a person is considered to have acted through intentionally deceptive means if the person, with the intent to deceive an owner or operator of a computer, intentionally makes certain statements or intentionally and materially fails to provide certain notice to the owner or operator of a computer.
Sec. 48.057. TRANSMISSION OF COMPUTER SOFTWARE. Provides that, for purposes of this chapter, a person is considered to have transmitted computer software to a computer if the person transfers, sends, or makes available computer software, or a component of the software, through certain mediums.
[Reserves Sections 48.058-48.100 for expansion.]
SUBCHAPTER C. CIVIL REMEDIES
Sec. 48.101. CIVIL RELIEF. (a) Authorizes certain persons to bring a civil action against a person who violates this chapter.
(b) Authorizes a person bringing an action under this section, in addition to any other remedy provided by law, to seek injunctive relief to restrain the violator from continuing the violation, recover damages in a specified amount, or both.
(c) Authorizes the court to increase an award of actual damages in an action brought under this section to an amount not to exceed three times the actual damages sustained if the court finds that the violations have occurred with a frequency as to constitute a pattern or practice.
(d) Provides that a plaintiff who prevails in an action filed under this section is entitled to recover reasonable attorney's fees and court costs.
(e) Provides that each separate violation of this chapter is an actionable violation.
(f) Provides that, for purposes of this section, violations are of the same nature if the violations consist of the same course of conduct or action, regardless of the number of times the conduct or act occurred..
SECTION 2. Effective date: September 1, 2005.