Section 1 Short title
This Act may be cited as the “Securing Social Security Numbers Act”.
Securing Social Security Numbers Act
A BILL
To prohibit requests for the disclosure of a social security account number in commercial transactions, and for other purposes.
Sec. 2 Prohibition on requesting disclosure of a social security account number for consumer transactions
In general— A commercial entity shall not request that an individual provide the individual’s social security account number when purchasing a commercial good or service or deny an individual the good or service for refusing to provide that number except—
for any purpose relating to—
obtaining a consumer report for any purpose permitted under the Fair Credit Reporting Act;
a background check of the individual conducted by a landlord, lessor, employer, or voluntary service agency;
law enforcement; or
a Federal, State, or local law requirement; or
if the social security account number is necessary to verify the identity of the consumer to effect, administer, or enforce the specific transaction requested or authorized by the consumer, or to prevent fraud.
Purging of collected social security account numbers— A commercial entity that has acquired social security account numbers prior to the enactment of this Act is prohibited from intentional continued possession of such social security account numbers and must purge all such social security account numbers from its records not later than 180 days after the effective date of this Act, unless the commercial entity would qualify for an exception under subsection (a).
Limitation on predispute arbitration agreements— No predispute arbitration agreement shall be valid or enforceable if it requires arbitration of a violation of this section.
State attorney general enforcement— In any case in which the attorney general of a State has reason to believe that an interest of the residents of that State has been or is threatened or adversely affected by the engagement of any person in a practice that is prohibited under this section, the State, as parens patriae, may bring a civil action on behalf of the residents of the State in a district court of the United States of appropriate jurisdiction to—
enjoin that practice;
enforce compliance with such section;
obtain damages, restitution, or other compensation on behalf of residents of the State; or
obtain such other relief as the court may consider appropriate.
Sec. 3 Civil actions and civil penalties
Civil action in state courts—
Statute of limitations— An action may be commenced under this subsection not later than the earlier of—
5 years after the date on which the alleged violation occurred; or
3 years after the date on which the alleged violation was or should have been reasonably discovered by the aggrieved individual.
Nonexclusive remedy— The remedy provided under this subsection shall be in addition to any other remedies available to the individual.
Civil penalties—
In general— Any person who the Attorney General determines has violated any section of this Act or of any amendments made by this Act shall be subject, in addition to any other penalties that may be prescribed by law—
to a civil penalty of not more than $5,000 for each such violation; and
to a civil penalty of not more than $50,000, if the violations have occurred with such frequency as to constitute a pattern or practice of violations.
Determination of violations— Any intentional violation committed contemporaneously with respect to the social security account numbers of 2 or more individuals shall be treated as a separate violation with respect to each such individual.
Sec. 4 Effective date
The amendment made by this Act shall be in effect 1 year after the date of enactment of this Act.