Bill Text: NY S08595 | 2017-2018 | General Assembly | Introduced
Bill Title: Adds medical and health insurance information within the definitions of identity theft.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Introduced - Dead) 2018-05-10 - REFERRED TO CODES [S08595 Detail]
Download: New_York-2017-S08595-Introduced.html
STATE OF NEW YORK ________________________________________________________________________ 8595 IN SENATE May 10, 2018 ___________ Introduced by Sen. PERSAUD -- read twice and ordered printed, and when printed to be committed to the Committee on Codes AN ACT to amend the penal law, the general business law and the state technology law, in relation to adding medical and health insurance information within the definitions of identity theft The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. Section 190.78 of the penal law, as added by chapter 619 of 2 the laws of 2002, is amended to read as follows: 3 § 190.78 Identity theft in the third degree. 4 A person is guilty of identity theft in the third degree when he or 5 she knowingly and with intent to defraud assumes the identity of another 6 person by presenting himself or herself as that other person, or by 7 acting as that other person or by using personal identifying information 8 of that other person, and thereby: 9 1. obtains goods, money, medical information, health insurance infor- 10 mation, property or services or uses credit in the name of such other 11 person or causes financial loss to such person or to another person or 12 persons; or 13 2. commits a class A misdemeanor or higher level crime. 14 3. (a) For the purposes of this section, the term "medical informa- 15 tion" means any information regarding an individual's medical history, 16 mental or physical condition, or medical treatment or diagnosis by a 17 health care professional. 18 (b) For the purposes of this section, the term "health insurance 19 information" means an individual's health insurance policy number or 20 subscriber identification number, any unique identifier used by a health 21 insurer to identify the individual or any information in an individual's 22 application and claims history, including, but not limited to, appeals 23 history. 24 Identity theft in the third degree is a class A misdemeanor. 25 § 2. Section 190.79 of the penal law, as added by chapter 619 of the 26 laws of 2002 and subdivision 4 as amended by chapter 279 of the laws 27 2008, is amended to read as follows: EXPLANATION--Matter in italics (underscored) is new; matter in brackets [] is old law to be omitted. LBD08927-01-7S. 8595 2 1 § 190.79 Identity theft in the second degree. 2 A person is guilty of identify theft in the second degree when he or 3 she knowingly and with intent to defraud assumes the identity of another 4 person by presenting himself or herself as that other person, or by 5 acting as that other person or by using personal identifying information 6 of that other person, and thereby: 7 1. obtains goods, money, medical information, health insurance infor- 8 mation, property or services or uses credit in the name of such other 9 person in an aggregate amount that exceeds five hundred dollars; or 10 2. causes financial loss to such person or to another person or 11 persons in an aggregate amount that exceeds five hundred dollars; or 12 3. commits or attempts to commit a felony or acts as an accessory to 13 the commission of a felony; or 14 4. commits the crime of identity theft in the third degree as defined 15 in section 190.78 of this article and has been previously convicted 16 within the last five years of identity theft in the third degree as 17 defined in section 190.78, identity theft in the second degree as 18 defined in this section, identity theft in the first degree as defined 19 in section 190.80, unlawful possession of personal identification infor- 20 mation in the third degree as defined in section 190.81, unlawful 21 possession of personal identification information in the second degree 22 as defined in section 190.82, unlawful possession of personal identifi- 23 cation information in the first degree as defined in section 190.83, 24 unlawful possession of a skimmer device in the second degree as defined 25 in section 190.85, unlawful possession of a skimmer device in the first 26 degree as defined in section 190.86, grand larceny in the fourth degree 27 as defined in section 155.30, grand larceny in the third degree as 28 defined in section 155.35, grand larceny in the second degree as defined 29 in section 155.40 or grand larceny in the first degree as defined in 30 section 155.42 of this chapter. 31 5. (a) For the purposes of this section, the term "medical informa- 32 tion" means any information regarding an individual's medical history, 33 mental or physical condition, or medical treatment or diagnosis by a 34 health care professional. 35 (b) For the purposes of this section, the term "health insurance 36 information" means an individual's health insurance policy number or 37 subscriber identification number, any unique identifier used by a health 38 insurer to identify the individual or any information in an individual's 39 application and claims history, including, but not limited to, appeals 40 history. 41 Identity theft in the second degree is a class E felony. 42 § 3. Subparagraph 3 of paragraph (b) of subdivision 1 of section 899- 43 aa of the general business law, as added by chapter 442 of the laws of 44 2005, is amended and two new subparagraphs 4 and 5 and two new closing 45 paragraphs are added to read as follows: 46 (3) account number, credit or debit card number, in combination with 47 any required security code, access code, or password that would permit 48 access to an individual's financial account; or 49 (4) medical information; or 50 (5) health insurance information; 51 For the purposes of this paragraph, "medical information" means any 52 information regarding an individual's medical history, mental or phys- 53 ical condition, or medical treatment or diagnosis by a health care 54 professional. 55 For the purposes of this paragraph, "health insurance information" 56 means an individual's health insurance policy number or subscriber iden-S. 8595 3 1 tification number, any unique identifier used by a health insurer to 2 identify the individual or any information in an individual's applica- 3 tion and claims history, including, but not limited to, appeals history. 4 § 4. Subparagraph 3 of paragraph (a) of subdivision 1 of section 208 5 of the state technology law, as added by chapter 442 of the laws of 6 2005, is amended and two new subparagraphs 4 and 5 and two new closing 7 paragraphs are added to read as follows: 8 (3) account number, credit or debit card number, in combination with 9 any required security code, access code, or password which would permit 10 access to an individual's financial account[.]; or 11 (4) medical information; or 12 (5) health insurance information. 13 For the purposes of this paragraph, "medical information" means any 14 information regarding an individual's medical history, mental or phys- 15 ical condition, or medical treatment or diagnosis by a health care 16 professional. 17 For the purposes of this paragraph, "health insurance information" 18 means an individual's health insurance policy number or subscriber iden- 19 tification number, any unique identifier used by a health insurer to 20 identify the individual or any information in an individual's applica- 21 tion and claims history, including, but not limited to, appeals history. 22 § 5. This act shall take effect on the ninetieth day after it shall 23 have become a law; provided, however, that effective immediately, the 24 addition, amendment and/or repeal of any rule or regulation necessary 25 for the implementation of this act on its effective date are authorized 26 and directed to be made and completed on or before such effective date.
