,,ib ,union ,calendar ,no4 #dhg #aaeth ,,congress #b;d ,session ,h4 ,r4 #eaib ,report ,no4 #aae-fcf ,,in ,,the ,,house ,,of ,,representatives ,march #g1 #bjah ,mr4 ,curbelo of ,florida 7for himself1 ,mr4 ,marchant1 ,ms4 ,sinema1 and ,mr4 ,hultgren7 introduced the following bill2 which was referred to the ,committee on ,ways and ,means ,april #ac1 #bjah;,additional sponsors3 ,mr4 ,royce of ,california1 ,mr4 ,messer1 ,mr4 ,mc,henry1 ,mr4 ,himes1 ,mr4 ,perlmutter1 ,mr4 ,duffy1 ,mr4 ,huizenga1 ,mr4 ,delaney1 ,mr4 ,sessions1 ,mr4 ,tipton1 and ,mr4 ,young of ,iowa ,april #ac1 #bjah ,reported with an amendment1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed ,strike out all after the enacting clause and insert the part printed in italic ,for text of introduced bill1 see copy of bill as introduced on ,march #g1 #bjah ,a ,,bill ,to authorize the ,commissioner of ,social ,security to provide confirmation of fraud protection data to certain permitted entities1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,protecting ,children from ,identity ,theft ,act4 #b4 ,reducing identity fraud 7a7 ,purpose ,the purpose of this section is to reduce the prevalence of synthetic identity fraud1 which disproportionally affects vulnerable populations1 such as minors and recent immigrants1 by facilitating the validation by permitted entities of fraud protection data1 pursuant to electronically received consumer consent1 through use of a database maintained by the ,commissioner4 7b7 ,definitions ,in this section3 7#a7 ,commissioner ,the term ,commissioner means the ,commissioner of the ,social ,security ,administration4 7#b7 ,financial institution ,the term financial institution has the meaning given the term in section #eji of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhji74 7#c7 ,fraud protection data ,the term fraud protection data means a combination of the following information with respect to an individual3 7,a7 ,the name of the individual 7including the first name and any family forename or surname of the individual74 7,b7 ,the ,social ,security account number of the individual4 7,c7 ,the date of birth 7including the month1 day1 and year7 of the individual4 7#d7 ,permitted entity ,the term permitted entity means a financial institution or a service provider1 subsidiary1 affiliate1 agent1 contractor1 or assignee of a financial institution4 7c7 ,efficiency 7#a7 ,reliance on existing methods ,the ,commissioner shall evaluate the feasibility of making modifications to any database that is in existence as of the date of enactment of this ,act or a similar resource such that the database or resource-- 7,a7 is reasonably designed to effectuate the purpose of this section2 and 7,b7 meets the requirements of subsection 7d74 7#b7 ,execution ,the ,commissioner shall establish a system to carry out subsection 7a71 in accordance with section #aajf of the ,social ,security ,act4 ,in doing so1 the ,commissioner shall make the modifications necessary to any database that is in existence as of the date of enactment of this ,act or similar resource1 or develop a database or similar resource4 7d7 ,protection of vulnerable consumers ,the database or similar resource described in subsection 7c7 shall-- 7#a7 compare fraud protection data provided in an inquiry by a permitted entity against such information maintained by the ,commissioner in order to confirm 7or not confirm7 the validity of the information provided1 and in such a manner as to deter fraudulent use of the database or similar resource2 7#b7 be scalable and accommodate reasonably anticipated volumes of verification requests from permitted entities with commercially reasonable uptime and availability2 and 7#c7 allow permitted entities to submit-- 7,a7 one or more individual requests electronically for real-time machine-to-machine 7or similar functionality7 accurate responses2 and 7,b7 multiple requests electronically1 such as those provided in a batch format1 for accurate electronic responses within a reasonable period of time from submission1 not to exceed #bd hours4 7e7 ,certification required ,before providing confirmation of fraud protection data to a permitted entity1 the ,commissioner shall ensure that the ,commissioner has a certification from the permitted entity that is dated not more than #b years before the date on which that confirmation is provided that includes the following declarations3 7#a7 ,the entity is a permitted entity4 7#b7 ,the entity is in compliance with this section4 7#c7 ,the entity is1 and will remain1 in compliance with its privacy and data security requirements1 as described in title ,v of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhja et seq47 and as required by the ,commissioner1 with respect to information the entity receives from the ,commissioner pursuant to this section4 7#d7 ,the entity will retain sufficient records to demonstrate its compliance with its certification and this section for a period of not less than #b years4 7f7 ,consumer consent 7#a7 ,in general ,notwithstanding any other provision of law or regulation1 a permitted entity may submit a request to the database or similar resource described in subsection 7c7 only-- 7,a7 pursuant to the written1 including electronic1 consent received by a permitted entity from the individual who is the subject of the request2 and 7,b7 in connection with any circumstance described in section #fjd of the ,fair ,credit ,reporting ,act 7#ae ,u4,s4,c4 #afha;b74 7#b7 ,electronic consent requirements ,for a permitted entity to use the consent of an individual received electronically pursuant to paragraph 7#a77;,a71 the permitted entity must obtain the individual's electronic signature1 as defined in section #ajf of the ,electronic ,signatures in ,global and ,national ,commerce ,act 7#ae ,u4,s4,c4 #gjjf74 ,permitted entities must develop and use an electronic signature process in accordance with all ,federal laws and requirements as designated by the ,commissioner4 7#c7 ,effectuating electronic consent ,no provision of law or requirement1 including section #eeb;a of title #e1 ,united ,states ,code1 shall prevent the use of electronic consent for purposes of this subsection or for use in any other consent based verification under the discretion of the ,commissioner4 7g7 ,compliance and enforcement 7#a7 ,audits and monitoring 7,a7 ,in general ,the ,commissioner-- 7i7 shall conduct audits and monitoring to-- 7,i7 ensure proper use by permitted entities of the database or similar resource described in subsection 7c72 and 7,,ii7 deter fraud and misuse by permitted entities with respect to the database or similar resource described in subsection 7c72 and 7ii7 may terminate services for any permitted entity that prevents or refuses to allow the ,commissioner to carry out the activities described in clause 7i7 and may terminate or suspend services for any permitted entity as necessary to enforce any violation of this section or of any certification made under this section4 7#b7 ,enforcement 7,a7 ,in general ,notwithstanding any other provision of law1 including the matter preceding paragraph 7#a7 of section #eje7;a7 of the ,gramm-,leach-,bliley ,act 7#ae ,u4,s4,c4 #fhje7;a771 any violation of this section and any certification made under this section shall be enforced in accordance with paragraphs 7#a7 through 7#g7 of such section #eje7;a7 by the agencies described in those paragraphs4 7,b7 ,relevant information ,upon discovery by the ,commissioner of any violation of this section or any certification made under this section1 the ,commissioner shall forward any relevant information pertaining to that violation to the appropriate agency described in subparagraph 7,a7 for evaluation by the agency for purposes of enforcing this section4 7h7 ,recovery of costs 7#a7 ,in general 7,a7 ,in general ,amounts obligated to carry out this section shall be fully recovered from the users of the database or verification system by way of advances1 reimbursements1 user fees1 or other recoveries as determined by the ,commissioner4 ,the funds recovered under this paragraph shall be deposited as an offsetting collection to the account providing appropriations for the ,social ,security ,administration1 to be used for the administration of this section without fiscal year limitation4 7,b7 ,prices fixed by commissioner ,the ,commissioner shall establish the amount to be paid by the users under this paragraph1 including the costs of any services or work performed1 such as any appropriate upgrades1 maintenance1 and associated direct and indirect administrative costs1 in support of carrying out the purposes described in this section1 by reimbursement or in advance as determined by the ,commissioner4 ,the amount of such prices shall be periodically adjusted by the ,commissioner to ensure that amounts collected are sufficient to fully offset the cost of the administration of this section4 7#b7 ,initial development ,the ,commissioner shall not begin development of a verification system to carry out this section until the ,commissioner determines that amounts equal to at least #ej percent of program start-up costs have been collected under paragraph 7#a74 7#c7 ,existing resources ,the ,commissioner of ,social ,security may use funds designated for information technology modernization to carry out this section1 but in all cases shall be fully reimbursed under paragraph 7#a77;,a74 7#d7 ,annual report ,the ,commissioner of ,social ,security shall annually submit to the ,committee on ,ways and ,means of the ,house of ,representatives and the ,committee on ,finance of the ,senate a report on the amount of indirect costs to the ,social ,security ,administration arising as a result of the implementation of this section4 ,april #ac1 #bjah ,reported with an amendment1 committed to the ,committee of the ,whole ,house on the ,state of the ,union1 and ordered to be printed