Bill Text: CA SB58 | 2021-2022 | Regular Session | Introduced

California Senate Bill 58 (Prior Session Legislation)

NOTE: There are more recent revisions of this legislation. Read Latest Draft

Bill Title: Personal information: social security numbers: state agencies: Employment Development Department: fraud prevention.

Spectrum: Slight Partisan Bill (Republican 13-7)

Status: (Engrossed - Dead) 2021-08-26 - August 26 hearing: Held in committee and under submission. [SB58 Detail]

Download: California-2021-SB58-Introduced.html

CALIFORNIA LEGISLATURE— 2021–2022 REGULAR SESSION

Senate Bill

No. 58

Introduced by Senators Wilk and Hurtado
(Coauthors: Senators Bates and Caballero)
(Coauthors: Assembly Members Lackey and Valladares)

December 07, 2020

An act to amend Section 11019.7 of the Government Code, relating to state government, and declaring the urgency thereof, to take effect immediately.

LEGISLATIVE COUNSEL'S DIGEST

SB 58, as introduced, Wilk. Personal information: social security numbers: Employment Development Department.

Existing law prohibits a state agency from sending any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individual’s social security number, telephone number, driver’s license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence. Existing law, commencing on or before January 1, 2023, prohibits a state agency from sending any outgoing United States mail that contains an individual’s social security number unless the number is truncated to its last 4 digits or in specified circumstances.

This bill, commencing on or before ____, would prohibit the Employment Development Department from sending any outgoing United States mail to an individual that contains any of its top three highest-volume mailed documents containing the individual’s social security number, unless that social security number is replaced with a modified unique identifier.

This bill would declare that it is to take effect immediately as an urgency statute.

Vote: 2/3 Appropriation: NO Fiscal Committee: YES Local Program: NO

The people of the State of California do enact as follows:

SECTION 1.

Section 11019.7 of the Government Code is amended to read:

11019.7.

(a) A state agency shall not send any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individual’s social security number, telephone number, driver’s license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.

(b) (1) Notwithstanding any other law, commencing on or before January 1, 2023, a state agency shall not send any outgoing United States mail to an individual that contains the individual’s social security number unless the number is truncated to its last four digits, except in the following circumstances:

(A) Federal law requires inclusion of the social security number.

(B) The documents are mailed to a current or prospective state employee.

(C) An individual erroneously mailed a document containing a social security number to a state agency, and the state agency is returning the original document by certified or registered United States mail.

(D) The Controller is returning documents to an individual previously submitted by the individual pursuant to Chapter 7 (commencing with Section 1500) of Title 10 of Part 3 of the Code of Civil Procedure.

(E) The document is sent in response to a valid request for access to personal information, pursuant to Section 1798.34 of the Civil Code.

(2) (A) On or before September 1, 2021, each state agency that mails an individual’s full or truncated part of a social security number to that individual, other than as permitted by paragraph (1), shall report to the Legislature regarding when and why it does so.

(B) A state agency that, in its own estimation, is unable to comply with the requirements of paragraph (1) of this subdivision shall submit an annual corrective action plan to the Legislature until it is in compliance with that paragraph.

(C) A report required by subparagraph (A) of this paragraph or corrective action plan required by subparagraph (B) of this paragraph and communications made in connection with these documents that bear on what mailings do and do not contain an individual’s social security number, are confidential and shall not be disclosed to the public pursuant to any state law, including, but not limited to, the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1 of the Government Code).

(3) (A) The requirement for submitting a report imposed under subparagraph (A) of paragraph (2) is inoperative on January 1, 2024, pursuant to Section 10231.5 of the Government Code.

(B) A report to be submitted pursuant to subparagraph (A) or (B) of paragraph (2) shall be submitted in compliance with Section 9795 of the Government Code.

(c) Notwithstanding subdivisions (a) and (b), commencing on or before ____, the Employment Development Department shall not send any outgoing United States mail to an individual that contains any of its top three highest-volume mailed documents containing the individual’s social security number, unless that social security number is replaced with a modified unique identifier.
~~(c)~~

(d) “Outgoing United States mail” for the purposes of this section includes correspondence sent via a common carrier, including, but not limited to, a package express service and a courier service.

~~(d)~~

(e) Notwithstanding subdivision (a) of Section 11000, “state agency” includes the California State University.

SEC. 2.

This act is an urgency statute necessary for the immediate preservation of the public peace, health, or safety within the meaning of Article IV of the California Constitution and shall go into immediate effect. The facts constituting the necessity are:

In order to protect and better safeguard the identities of millions of unemployment insurance claimants served by the Employment Development Department as quickly as possible, it is necessary that this act take effect immediately.