By Mr. Lantigua of Lawrence, petition (accompanied by bill, House, No. 1559) of William Lantigua for legislation to require security measures for businesses storing personal information by electronic means.  The Judiciary.

The Commonwealth of Massachusetts

——————

PETITION OF:

William Lantigua

——————

In the Year Two Thousand and Seven.

——————

An Act relative to identity fraud

    Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority of the same, as follows:

Chapter 266 of the General Laws is hereby amended by inserting after section 37E the following section:-

Section 37F.  Any business that stores personal identifying information, as defined in section 37E shall, by electronic means, install basic security measures.  Any business of offering internet access shall post signs warning users to have firewalls or other security measures.

Any person found guilty of violating this section shall be ordered to make restitution for financial loss sustained by a victim as a result of such violation.  Financial loss may include any costs incurred by such victim in correcting the credit history of such victim or any cost incurred in connection with any civil or administrative proceeding to satisfy any debt or other obligation of such victim, including lost wages and attorney’s fees.