Bill > S967

This bill, known as the "Reader Privacy Act," establishes rules for how providers of book services, which are defined as entities primarily offering the rental, purchase, borrowing, browsing, or viewing of books (excluding serial publications like magazines or newspapers), can disclose personal information about their users. Personal information includes data that identifies or relates to a specific user or their reading activity. Generally, providers can only share this information with law enforcement entities if they have a court order demonstrating probable cause that the information is relevant to an ongoing criminal investigation, that there's a compelling interest, that less intrusive means are unavailable, and that the provider has notice to contest the order; additionally, the user must be notified of the order unless there's a judicial determination to delay notification for up to 90 days. Disclosure to other government entities or private parties also requires a court order based on a compelling interest, lack of less intrusive means, and notice to the provider, with the user having 30 days after notification to challenge the order, though an exception exists for institutions of higher education needing to disclose information for student financial aid reimbursements. Providers can also disclose information if the user gives informed consent, or in emergencies where there's an imminent danger of death or serious physical injury and insufficient time to get a court order, provided the government entity asserts the emergency and provides a written statement. Providers may also disclose information if they believe it's evidence of a crime against them or the user. Violations of this act are punishable by a civil penalty of $500 per violation, and aggrieved users can also recover $500 per violation, plus costs and attorney fees, or pursue separate civil actions for damages.