S.Amdt. 2879
What it does: Adds SEC. __. TRANSMISSION OF PERSONALLY IDENTIFIABLE INFORMATION TO FOREIGN AFFILIATES OR SUBCONTRACTORS wherever appropriate
Sen. Hillary Rodham Clinton (D-NY)What it changes
1 change to S. 1637
Adds SEC. __. TRANSMISSION OF PERSONALLY IDENTIFIABLE INFORMATION TO FOREIGN AFFILIATES OR SUBCONTRACTORS wherever appropriate
Adds a sectionInserted: SEC. __. TRANSMISSION OF PERSONALLY IDENTIFIABLE INFORMATION TO FOREIGN AFFILIATES OR SUBCONTRACTORS.
Inserted: (a) Definitions.--As used in this section, the following definitions shall apply:
Inserted: (1) Business enterprise.--The term "business enterprise" means any organization, association, or venture established to make a profit.
Inserted: (2) Country with adequate privacy protection.--The term "country with adequate privacy protection" means a country that has been certified by the Federal Trade Commission as having a legal system that provides adequate privacy protection for such information.
Inserted: (3) Health care business.--The term "health care business" means any business enterprise or nonprofit organization that collects or retains personally identifiable information about consumers in relation to medical care, including--
Inserted: (A) hospitals;
Inserted: (B) health maintenance organizations;
Inserted: (C) medical partnerships;
Inserted: (D) emergency medical transportation companies;
Inserted: (E) medical transcription companies; and
Inserted: (F) subcontractors, or potential subcontractors, of the entities described in subparagraphs (A) through (E).
Inserted: (4) Personally identifiable information.--The term "personally identifiable information" includes name, bank account information, social security number, address, telephone number, passwords, mother's maiden name, and age.
Show 12 more inserted paragraphsShow less
Inserted: (b) Transmission of Information.--
Inserted: (1) In general.--A business enterprise may transmit personally identifiable information regarding a citizen of the United States to any foreign affiliate or subcontractor located in a country that is a country with adequate privacy protection.
Inserted: (2) Consent required.--A business enterprise may not transmit personally identifiable information regarding a citizen of the United States to any foreign affiliate or subcontractor located in a country that is not a country with adequate privacy protection, unless--
Inserted: (A) the business enterprise obtains consent from the citizen, before a consumer relationship is established or before the effective date of this section, to transmit such information to such foreign affiliate or subcontractor; and
Inserted: (B) the consent referred to in subparagraph (A) is renewed by the citizen within 1 year before such information is transmitted.
Inserted: (3) Liability.--A business enterprise shall be liable for any damages arising from the improper storage, duplication, sharing, or other misuse of personally identifiable information by the business enterprise or by any of its foreign affiliates or subcontractors that received such information from the business enterprise.
Inserted: (4) Rulemaking.--The Chairman of the Federal Trade Commission shall promulgate regulations through which the Chairman may enforce the provisions of this subsection and impose a fine for a violation of this subsection.
Inserted: (c) Health Care Information.--
Inserted: (1) In general.--A health care business shall be liable for any damages arising from the improper storage, duplication, sharing, or other misuse of personally identifiable information by the business enterprise or by any of its foreign affiliates or subcontractors that received such information from the business enterprise.
Inserted: (2) No opt out provision.--A health care business may not terminate an existing relationship with a consumer of health care services to avoid the consent requirement under subsection (b)(2).
Inserted: (3) Rulemaking.--The Secretary of Health and Human Services shall promulgate regulations through which the Secretary may enforce the provisions of this subsection and impose a fine for the violation of this subsection.
Inserted: (d) Effective Date.--This section shall take effect on the date which is 90 days after the date of enactment of this Act.
The amendment doesn't say where this goes; the clerk decides.
Original wording
At the appropriate place, insert the following:
Read automatically from the Congressional Record. Check the original before relying on it.
As printed
SA 2879. Mrs. CLINTON submitted an amendment intended to be proposed by her to the bill S. 1637, to amend the Internal Revenue Code of 1986 to comply with the World Trade Organization rulings on the FSC/ETI benefit in a manner that preserves jobs and production activities in the United States, to reform and simplify the international taxation rules of the United States, and for other purposes; which was ordered to lie on the table as follows:
At the appropriate place, insert the following:
SEC. __. TRANSMISSION OF PERSONALLY IDENTIFIABLE INFORMATION TO FOREIGN AFFILIATES OR SUBCONTRACTORS.
(a) Definitions.--As used in this section, the following definitions shall apply:
(1) Business enterprise.--The term “business enterprise” means any organization, association, or venture established to make a profit.
(2) Country with adequate privacy protection.--The term “country with adequate privacy protection” means a country that has been certified by the Federal Trade Commission as having a legal system that provides adequate privacy protection for such information.
(3) Health care business.--The term “health care business” means any business enterprise or nonprofit organization that collects or retains personally identifiable information about consumers in relation to medical care, including--
(A) hospitals;
(B) health maintenance organizations;
(C) medical partnerships;
(D) emergency medical transportation companies;
(E) medical transcription companies; and
(F) subcontractors, or potential subcontractors, of the entities described in subparagraphs (A) through (E).
(4) Personally identifiable information.--The term “personally identifiable information” includes name, bank account information, social security number, address, telephone number, passwords, mother's maiden name, and age.
(b) Transmission of Information.--
(1) In general.--A business enterprise may transmit personally identifiable information regarding a citizen of the United States to any foreign affiliate or subcontractor located in a country that is a country with adequate privacy protection.
(2) Consent required.--A business enterprise may not transmit personally identifiable information regarding a citizen of the United States to any foreign affiliate or subcontractor located in a country that is not a country with adequate privacy protection, unless--
(A) the business enterprise obtains consent from the citizen, before a consumer relationship is established or before the effective date of this section, to transmit such information to such foreign affiliate or subcontractor; and
(B) the consent referred to in subparagraph (A) is renewed by the citizen within 1 year before such information is transmitted.
(3) Liability.--A business enterprise shall be liable for any damages arising from the improper storage, duplication, sharing, or other misuse of personally identifiable information by the business enterprise or by any of its foreign affiliates or subcontractors that received such information from the business enterprise.
(4) Rulemaking.--The Chairman of the Federal Trade Commission shall promulgate regulations through which the Chairman may enforce the provisions of this subsection and impose a fine for a violation of this subsection.
(c) Health Care Information.--
(1) In general.--A health care business shall be liable for any damages arising from the improper storage, duplication, sharing, or other misuse of personally identifiable information by the business enterprise or by any of its foreign affiliates or subcontractors that received such information from the business enterprise.
(2) No opt out provision.--A health care business may not terminate an existing relationship with a consumer of health care services to avoid the consent requirement under subsection (b)(2).
(3) Rulemaking.--The Secretary of Health and Human Services shall promulgate regulations through which the Secretary may enforce the provisions of this subsection and impose a fine for the violation of this subsection.
(d) Effective Date.--This section shall take effect on the date which is 90 days after the date of enactment of this Act.
Legislative Activity
Stay on top of the latest movement without scrolling through every action
Senate amendment submitted
March 22, 2004