Bill > H298

This bill introduces several provisions aimed at enhancing identity theft protection and consumer data security. It establishes the concept of a "security freeze," which allows consumers to prevent credit reporting agencies from releasing their credit reports without explicit authorization, thereby safeguarding against unauthorized credit applications. The bill also mandates that credit reporting agencies provide secure electronic methods for requesting these freezes and outlines strict timelines for implementing and lifting them. Furthermore, it creates new requirements for "data collectors" (entities that handle personal information) to notify Massachusetts residents of "security breaches," defined as unauthorized acquisition of data that compromises personal information. These notifications must be timely and include details about the breach and how consumers can protect themselves, including offering free credit reports for two years following a breach. The bill also strengthens penalties for identity fraud and trafficking in stolen identities, with increased fines and imprisonment terms, and specifically addresses the misuse of Social Security numbers and the secure disposal of personal information.