Section 1 Short title
This Act may be cited as the “Closing the Pre-Paid Mobile Device Security Gap Act of 2016”.
Closing the Pre-Paid Mobile Device Security Gap Act of 2016
A BILL
To require purchasers of pre-paid mobile devices or SIM cards to provide identification, and for other purposes.
Sec. 2 Identification requirement
Prior to the completion of any sale of a pre-paid mobile device or SIM card to a purchaser, an authorized reseller shall require the purchaser to provide the following information:
The full name of the purchaser.
The complete home address of the purchaser.
The date of birth of the purchaser.
Sec. 3 Identification verification
In-Person sales— An authorized reseller making a sale to a purchaser in person shall verify the purchaser information provided under section 2 by requiring the purchaser to display either of the following:
A photographic identification card issued by the Federal Government or a State government, or a document considered acceptable for purposes of subparagraph (B), (C), or (D) of section 274A(b)(1) of the Immigration and Nationality Act (8 U.S.C. 1324a(b)(1)).
Any 2 of the following:
A Form W–2 Wage and Tax Statement received from the Internal Revenue Service, provided that such form has been received from the Internal Revenue Service within the prior 18 months.
A Form 1099 Social Security Benefit Statement received from the Social Security Administration, provided that such form has been received from the Social Security Administration within the prior 18 months.
A Form 1099 received from any other agency of the Federal Government other than the Social Security Administration, including the Internal Revenue Service, provided that such form has been received within the prior 18 months.
Any document containing personal identifying information that the Attorney General finds, by regulation, to be acceptable for purposes of this section.
Other sales— An authorized reseller making a sale to a purchaser not in person shall verify the purchaser information provided under section 2 by requiring the purchaser to submit the following information:
Valid credit or debit card account information.
Social Security number.
Driver’s license number.
Any other personal identifying information that the Attorney General finds, by regulation, to be necessary for purposes of this section.
Sec. 4 Record making requirement
Upon completion of a sale of a pre-paid mobile device or SIM card, an authorized reseller shall make a record of the sale that includes the following information:
The information obtained from the purchaser under section 2, and, if applicable, the information submitted by the purchaser under subsection (b) of section 3.
The date of sale.
The manufacturer of the pre-paid mobile device or SIM card.
The wireless carrier that will provide wireless communication service to the pre-paid mobile device or SIM card.
Any assigned telephone number or other subscriber or account identifier known at the time of purchase.
Any of the following, if applicable to the pre-paid mobile device or SIM card:
International mobile equipment identifier number.
Electronic serial number.
Mobile equipment identifier.
International mobile subscriber identifier.
Machine address code.
Sec. 5 Record transmission requirement
In general— Not later than 30 days after the sale of a pre-paid mobile device or SIM card, an authorized reseller shall transmit the record of the sale made in accordance with section 4 to the wireless carrier that will provide wireless communication service to the pre-paid mobile device or SIM card.
Permissible means of transmission— In complying with the requirements of subsection (a), an authorized reseller may transmit the sale record to the wireless carrier by means of secure electronic transmission.
Sec. 6 Recordkeeping requirement
After an authorized reseller has transmitted a sale record to a wireless carrier in accordance with section 5, the wireless carrier shall—
provide a transmission confirmation receipt to the authorized reseller, after the receipt of which the authorized reseller shall dispose promptly of any retained copy of the record; and
retain the transmitted sale record in accordance with the privacy protections of section 222 of the Communications Act of 1934 (47 U.S.C. 222) for a period of 18 months or until the wireless carrier stops or otherwise discontinues providing service to the pre-paid mobile device or SIM card to which the sale record relates.
Sec. 7 Penalties
False or misleading statements— A purchaser who knowingly provides false or misleading information when providing the identifying information and documents required under sections 2 and 3 shall be fined under title 18, United States Code, imprisoned not more than 5 years or, if the offense involves international or domestic terrorism (as defined in section 2331 of such title), imprisoned not more than 8 years, or both. If the matter relates to an offense under chapter 109A, 109B, 110, or 117, or section 1591 of such title, then the term of imprisonment imposed under this section shall be not more than 8 years.
Failure To comply—
In general— The Attorney General shall assess, against an authorized reseller or wireless carrier who commits an offense under this Act, a civil penalty of $50 for each such offense.
Separate offense—
By authorized reseller— The failure of an authorized reseller, with respect to each separate sale of a pre-paid mobile device or SIM card, to request purchaser identification under section 2, to verify identification under section 3, to make a record under section 4, and to transmit a record under section 5, shall constitute a separate offense.
By wireless carrier— The failure of a wireless carrier, with respect to each separate sale of a pre-paid mobile device or SIM card for which the carrier receives the sale record transmitted under section 5, to provide a transmission confirmation receipt under section 6(1), and to retain the sale record under section 6(2), shall constitute a separate offense.
Rule of construction— Nothing in this section may be construed to—
hold a wireless carrier liable for an offense under this Act committed by an authorized reseller; and
hold an authorized reseller liable for an offense under this Act committed by a wireless carrier.
Sec. 8 Related offenses
Sale by unauthorized resellers—
In general— It shall be unlawful for any person who is not an authorized reseller to sell a pre-paid mobile device or SIM card.
Penalty— Whoever knowingly violates paragraph (1) shall be imprisoned for not more than 2 years or fined under title 18, United States Code, or both.
Notice— The Attorney General shall make rules requiring a manufacturer or authorized reseller to notify a purchaser of a mobile device or SIM card of the offense and penalty established by this section.
Commission of other crimes— If a person knowingly uses a pre-paid mobile device or SIM card obtained by providing false or misleading information in violation of section 2 or 3 to commit a Federal criminal offense, the minimum term of imprisonment for such offense that is required under Federal statute (if any such minimum term is so required) shall be increased by 1 year.
Sec. 9 Preservation of State law
Nothing in this Act is intended to preempt additional State requirements with respect to the distribution and sale of mobile devices or SIM cards, or to otherwise prevent or prohibit any State from enacting any such requirements.
Sec. 10 Definitions
In this Act:
Authorized reseller— The term “authorized reseller” means any person authorized by—
a manufacturer to sell the manufacturer’s mobile devices or SIM cards; or
a wireless carrier to sell pre-paid mobile devices or SIM cards to which the wireless carrier will provide wireless communication service.
Pre-paid mobile device— The term “pre-paid mobile device” means any cellular phone or similar wireless communication device for which the mobile device user purchases a set allotment of wireless communication service.
SIM card— The term “SIM card” means a subscriber identity module or functionally equivalent data storage device.
Wireless carrier— The term “wireless carrier” means a provider of wireless communication service.
Wireless communication service— The term “wireless communication service” means commercial mobile service (as defined in section 332 of the Communications Act of 1934 (47 U.S.C. 332)) or commercial mobile data service (as defined in section 6001 of the Middle Class Tax Relief and Job Creation Act of 2012 (47 U.S.C. 1401)).