| 1 | A bill to be entitled |
| 2 | An act relating to criminal use of personal |
| 3 | identification; amending s. 817.568, F.S.; providing that |
| 4 | it is a third-degree felony to willfully and without |
| 5 | authorization disclose, sell, or transfer, or attempt to |
| 6 | disclose, sell, or transfer, personal identification |
| 7 | information concerning an individual, including |
| 8 | information sent to a foreign country, without first |
| 9 | obtaining the consent of the individual; providing |
| 10 | criminal penalties; providing that a violation of s. |
| 11 | 817.568, F.S., is a deceptive and unfair trade practice |
| 12 | and a violation of part II of ch. 501, F.S.; providing |
| 13 | civil penalties; providing that the remedies are |
| 14 | cumulative and not exclusive; providing an effective date. |
| 15 |
|
| 16 | Be It Enacted by the Legislature of the State of Florida: |
| 17 |
|
| 18 | Section 1. Section 817.568, Florida Statutes, is amended |
| 19 | to read: |
| 20 | 817.568 Criminal use of personal identification |
| 21 | information.-- |
| 22 | (1) As used in this section, the term: |
| 23 | (a) "Access device" means any card, plate, code, account |
| 24 | number, electronic serial number, mobile identification number, |
| 25 | personal identification number, or other telecommunications |
| 26 | service, equipment, or instrument identifier, or other means of |
| 27 | account access that can be used, alone or in conjunction with |
| 28 | another access device, to obtain money, goods, services, or any |
| 29 | other thing of value, or that can be used to initiate a transfer |
| 30 | of funds, other than a transfer originated solely by paper |
| 31 | instrument. |
| 32 | (b) "Authorization" means empowerment, permission, or |
| 33 | competence to act. |
| 34 | (c) "Harass" means to engage in conduct directed at a |
| 35 | specific person that is intended to cause substantial emotional |
| 36 | distress to such person and serves no legitimate purpose. |
| 37 | "Harass" does not mean to use personal identification |
| 38 | information for accepted commercial purposes. The term does not |
| 39 | include constitutionally protected conduct such as organized |
| 40 | protests or the use of personal identification information for |
| 41 | accepted commercial purposes. |
| 42 | (d) "Individual" means a single human being and does not |
| 43 | mean a firm, association of individuals, corporation, |
| 44 | partnership, joint venture, sole proprietorship, or any other |
| 45 | entity. |
| 46 | (e) "Person" means a "person" as defined in s. 1.01(3). |
| 47 | (f) "Personal identification information" means any name |
| 48 | or number that may be used, alone or in conjunction with any |
| 49 | other information, to identify a specific individual, including |
| 50 | any: |
| 51 | 1. Name, postal or electronic mail address, telephone |
| 52 | number, social security number, date of birth, mother's maiden |
| 53 | name, official state-issued or United States-issued driver's |
| 54 | license or identification number, alien registration number, |
| 55 | government passport number, employer or taxpayer identification |
| 56 | number, Medicaid or food stamp account number, bank account |
| 57 | number, credit or debit card number, or personal identification |
| 58 | number or code assigned to the holder of a debit card by the |
| 59 | issuer to permit authorized electronic use of such card; |
| 60 | 2. Unique biometric data, such as fingerprint, voice |
| 61 | print, retina or iris image, or other unique physical |
| 62 | representation; |
| 63 | 3. Unique electronic identification number, address, or |
| 64 | routing code; |
| 65 | 4. Medical records; |
| 66 | 5. Telecommunication identifying information or access |
| 67 | device; or |
| 68 | 6. Other number or information that can be used to access |
| 69 | a person's financial resources. |
| 70 | (g) "Counterfeit or fictitious personal identification |
| 71 | information" means any counterfeit, fictitious, or fabricated |
| 72 | information in the similitude of the data outlined in paragraph |
| 73 | (f) that, although not truthful or accurate, would in context |
| 74 | lead a reasonably prudent person to credit its truthfulness and |
| 75 | accuracy. |
| 76 | (2)(a) Any person who willfully and without authorization |
| 77 | fraudulently uses, or possesses with intent to fraudulently use, |
| 78 | personal identification information concerning an individual |
| 79 | without first obtaining that individual's consent, commits the |
| 80 | offense of fraudulent use of personal identification |
| 81 | information, which is a felony of the third degree, punishable |
| 82 | as provided in s. 775.082, s. 775.083, or s. 775.084. |
| 83 | (b) Any person who willfully and without authorization |
| 84 | fraudulently uses personal identification information concerning |
| 85 | an individual without first obtaining that individual's consent |
| 86 | commits a felony of the second degree, punishable as provided in |
| 87 | s. 775.082, s. 775.083, or s. 775.084, if the pecuniary benefit, |
| 88 | the value of the services received, the payment sought to be |
| 89 | avoided, or the amount of the injury or fraud perpetrated is |
| 90 | $5,000 or more or if the person fraudulently uses the personal |
| 91 | identification information of 10 or more individuals, but fewer |
| 92 | than 20 individuals, without their consent. Notwithstanding any |
| 93 | other provision of law, the court shall sentence any person |
| 94 | convicted of committing the offense described in this paragraph |
| 95 | to a mandatory minimum sentence of 3 years' imprisonment. |
| 96 | (c) Any person who willfully and without authorization |
| 97 | fraudulently uses personal identification information concerning |
| 98 | an individual without first obtaining that individual's consent |
| 99 | commits a felony of the first degree, punishable as provided in |
| 100 | s. 775.082, s. 775.083, or s. 775.084, if the pecuniary benefit, |
| 101 | the value of the services received, the payment sought to be |
| 102 | avoided, or the amount of the injury or fraud perpetrated is |
| 103 | $50,000 or more or if the person fraudulently uses the personal |
| 104 | identification information of 20 or more individuals, but fewer |
| 105 | than 30 individuals, without their consent. Notwithstanding any |
| 106 | other provision of law, the court shall sentence any person |
| 107 | convicted of committing the offense described in this paragraph |
| 108 | to a mandatory minimum sentence of 5 years' imprisonment. If the |
| 109 | pecuniary benefit, the value of the services received, the |
| 110 | payment sought to be avoided, or the amount of the injury or |
| 111 | fraud perpetrated is $100,000 or more, or if the person |
| 112 | fraudulently uses the personal identification information of 30 |
| 113 | or more individuals without their consent, notwithstanding any |
| 114 | other provision of law, the court shall sentence any person |
| 115 | convicted of committing the offense described in this paragraph |
| 116 | to a mandatory minimum sentence of 10 years' imprisonment. |
| 117 | (3) Neither paragraph (2)(b) nor paragraph (2)(c) prevents |
| 118 | a court from imposing a greater sentence of incarceration as |
| 119 | authorized by law. If the minimum mandatory terms of |
| 120 | imprisonment imposed under paragraph (2)(b) or paragraph (2)(c) |
| 121 | exceed the maximum sentences authorized under s. 775.082, s. |
| 122 | 775.084, or the Criminal Punishment Code under chapter 921, the |
| 123 | mandatory minimum sentence must be imposed. If the mandatory |
| 124 | minimum terms of imprisonment under paragraph (2)(b) or |
| 125 | paragraph (2)(c) are less than the sentence that could be |
| 126 | imposed under s. 775.082, s. 775.084, or the Criminal Punishment |
| 127 | Code under chapter 921, the sentence imposed by the court must |
| 128 | include the mandatory minimum term of imprisonment as required |
| 129 | by paragraph (2)(b) or paragraph (2)(c). |
| 130 | (4) Any person who willfully and without authorization |
| 131 | possesses, uses, or attempts to use personal identification |
| 132 | information concerning an individual without first obtaining |
| 133 | that individual's consent, and who does so for the purpose of |
| 134 | harassing that individual, commits the offense of harassment by |
| 135 | use of personal identification information, which is a |
| 136 | misdemeanor of the first degree, punishable as provided in s. |
| 137 | 775.082 or s. 775.083. |
| 138 | (5) If an offense prohibited under this section was |
| 139 | facilitated or furthered by the use of a public record, as |
| 140 | defined in s. 119.011, the offense is reclassified to the next |
| 141 | higher degree as follows: |
| 142 | (a) A misdemeanor of the first degree is reclassified as a |
| 143 | felony of the third degree. |
| 144 | (b) A felony of the third degree is reclassified as a |
| 145 | felony of the second degree. |
| 146 | (c) A felony of the second degree is reclassified as a |
| 147 | felony of the first degree. |
| 148 |
|
| 149 | For purposes of sentencing under chapter 921 and incentive gain- |
| 150 | time eligibility under chapter 944, a felony offense that is |
| 151 | reclassified under this subsection is ranked one level above the |
| 152 | ranking under s. 921.0022 of the felony offense committed, and a |
| 153 | misdemeanor offense that is reclassified under this subsection |
| 154 | is ranked in level 2 of the offense severity ranking chart in s. |
| 155 | 921.0022. |
| 156 | (6) Any person who willfully and without authorization |
| 157 | fraudulently uses personal identification information concerning |
| 158 | an individual who is less than 18 years of age without first |
| 159 | obtaining the consent of that individual or of his or her legal |
| 160 | guardian commits a felony of the second degree, punishable as |
| 161 | provided in s. 775.082, s. 775.083, or s. 775.084. |
| 162 | (7) Any person who is in the relationship of parent or |
| 163 | legal guardian, or who otherwise exercises custodial authority |
| 164 | over an individual who is less than 18 years of age, who |
| 165 | willfully and fraudulently uses personal identification |
| 166 | information of that individual commits a felony of the second |
| 167 | degree, punishable as provided in s. 775.082, s. 775.083, or s. |
| 168 | 775.084. |
| 169 | (8)(a) Any person who willfully and fraudulently uses, or |
| 170 | possesses with intent to fraudulently use, personal |
| 171 | identification information concerning a deceased individual |
| 172 | commits the offense of fraudulent use or possession with intent |
| 173 | to use personal identification information of a deceased |
| 174 | individual, a felony of the third degree, punishable as provided |
| 175 | in s. 775.082, s. 775.083, or s. 775.084. |
| 176 | (b) Any person who willfully and fraudulently uses |
| 177 | personal identification information concerning a deceased |
| 178 | individual commits a felony of the second degree, punishable as |
| 179 | provided in s. 775.082, s. 775.083, or s. 775.084, if the |
| 180 | pecuniary benefit, the value of the services received, the |
| 181 | payment sought to be avoided, or the amount of injury or fraud |
| 182 | perpetrated is $5,000 or more, or if the person fraudulently |
| 183 | uses the personal identification information of 10 or more but |
| 184 | fewer than 20 deceased individuals. Notwithstanding any other |
| 185 | provision of law, the court shall sentence any person convicted |
| 186 | of committing the offense described in this paragraph to a |
| 187 | mandatory minimum sentence of 3 years' imprisonment. |
| 188 | (c) Any person who willfully and fraudulently uses |
| 189 | personal identification information concerning a deceased |
| 190 | individual commits the offense of aggravated fraudulent use of |
| 191 | the personal identification information of multiple deceased |
| 192 | individuals, a felony of the first degree, punishable as |
| 193 | provided in s. 775.082, s. 775.083, or s. 775.084, if the |
| 194 | pecuniary benefit, the value of the services received, the |
| 195 | payment sought to be avoided, or the amount of injury or fraud |
| 196 | perpetrated is $50,000 or more, or if the person fraudulently |
| 197 | uses the personal identification information of 20 or more but |
| 198 | fewer than 30 deceased individuals. Notwithstanding any other |
| 199 | provision of law, the court shall sentence any person convicted |
| 200 | of the offense described in this paragraph to a minimum |
| 201 | mandatory sentence of 5 years' imprisonment. If the pecuniary |
| 202 | benefit, the value of the services received, the payment sought |
| 203 | to be avoided, or the amount of the injury or fraud perpetrated |
| 204 | is $100,000 or more, or if the person fraudulently uses the |
| 205 | personal identification information of 30 or more deceased |
| 206 | individuals, notwithstanding any other provision of law, the |
| 207 | court shall sentence any person convicted of an offense |
| 208 | described in this paragraph to a mandatory minimum sentence of |
| 209 | 10 years' imprisonment. |
| 210 | (9) Any person who willfully and fraudulently creates or |
| 211 | uses, or possesses with intent to fraudulently use, counterfeit |
| 212 | or fictitious personal identification information concerning a |
| 213 | fictitious individual, or concerning a real individual without |
| 214 | first obtaining that real individual's consent, with intent to |
| 215 | use such counterfeit or fictitious personal identification |
| 216 | information for the purpose of committing or facilitating the |
| 217 | commission of a fraud on another person, commits the offense of |
| 218 | fraudulent creation or use, or possession with intent to |
| 219 | fraudulently use, counterfeit or fictitious personal |
| 220 | identification information, a felony of the third degree, |
| 221 | punishable as provided in s. 775.082, s. 775.083, or s. 775.084. |
| 222 | (10) Any person who commits an offense described in this |
| 223 | section and for the purpose of obtaining or using personal |
| 224 | identification information misrepresents himself or herself to |
| 225 | be a law enforcement officer; an employee or representative of a |
| 226 | bank, credit card company, credit counseling company, or credit |
| 227 | reporting agency; or any person who wrongfully represents that |
| 228 | he or she is seeking to assist the victim with a problem with |
| 229 | the victim's credit history shall have the offense reclassified |
| 230 | as follows: |
| 231 | (a) In the case of a misdemeanor, the offense is |
| 232 | reclassified as a felony of the third degree. |
| 233 | (b) In the case of a felony of the third degree, the |
| 234 | offense is reclassified as a felony of the second degree. |
| 235 | (c) In the case of a felony of the second degree, the |
| 236 | offense is reclassified as a felony of the first degree. |
| 237 | (d) In the case of a felony of the first degree or a |
| 238 | felony of the first degree punishable by a term of imprisonment |
| 239 | not exceeding life, the offense is reclassified as a life |
| 240 | felony. |
| 241 |
|
| 242 | For purposes of sentencing under chapter 921, a felony offense |
| 243 | that is reclassified under this subsection is ranked one level |
| 244 | above the ranking under s. 921.0022 or s. 921.0023 of the felony |
| 245 | offense committed, and a misdemeanor offense that is |
| 246 | reclassified under this subsection is ranked in level 2 of the |
| 247 | offense severity ranking chart. |
| 248 | (11) A person who willfully and without authorization |
| 249 | discloses, sells, or transfers, or attempts to disclose, sell, |
| 250 | or transfer, personal identification information concerning an |
| 251 | individual, including personal identification information sent |
| 252 | to a foreign country, without first obtaining the consent of the |
| 253 | individual commits the offense of fraudulent disclosure, sale, |
| 254 | or transfer of personal identification information, a felony of |
| 255 | the third degree. |
| 256 | (12) A person who violates this section commits a |
| 257 | deceptive and unfair trade practice in violation of part II of |
| 258 | chapter 501 and is subject to the penalties and remedies |
| 259 | provided under that chapter, in addition to remedies otherwise |
| 260 | available for such conduct. |
| 261 | (13)(11) The prosecutor may move the sentencing court to |
| 262 | reduce or suspend the sentence of any person who is convicted of |
| 263 | a violation of this section and who provides substantial |
| 264 | assistance in the identification, arrest, or conviction of any |
| 265 | of that person's accomplices, accessories, coconspirators, or |
| 266 | principals or of any other person engaged in fraudulent |
| 267 | possession or use of personal identification information. The |
| 268 | arresting agency shall be given an opportunity to be heard in |
| 269 | aggravation or mitigation in reference to any such motion. Upon |
| 270 | good cause shown, the motion may be filed and heard in camera. |
| 271 | The judge hearing the motion may reduce or suspend the sentence |
| 272 | if the judge finds that the defendant rendered such substantial |
| 273 | assistance. |
| 274 | (14)(12) This section does not prohibit any lawfully |
| 275 | authorized investigative, protective, or intelligence activity |
| 276 | of a law enforcement agency of this state or any of its |
| 277 | political subdivisions, of any other state or its political |
| 278 | subdivisions, or of the Federal Government or its political |
| 279 | subdivisions. |
| 280 | (15)(13)(a) In sentencing a defendant convicted of an |
| 281 | offense under this section, the court may order that the |
| 282 | defendant make restitution under s. 775.089 to any victim of the |
| 283 | offense. In addition to the victim's out-of-pocket costs, |
| 284 | restitution may include payment of any other costs, including |
| 285 | attorney's fees incurred by the victim in clearing the victim's |
| 286 | credit history or credit rating, or any costs incurred in |
| 287 | connection with any civil or administrative proceeding to |
| 288 | satisfy any debt, lien, or other obligation of the victim |
| 289 | arising as the result of the actions of the defendant. |
| 290 | (b) The sentencing court may issue such orders as are |
| 291 | necessary to correct any public record that contains false |
| 292 | information given in violation of this section. |
| 293 | (16)(14) Prosecutions for violations of this section may |
| 294 | be brought on behalf of the state by any state attorney or by |
| 295 | the statewide prosecutor. |
| 296 | (17)(15) The Legislature finds that, in the absence of |
| 297 | evidence to the contrary, the location where a victim gives or |
| 298 | fails to give consent to the use of personal identification |
| 299 | information is the county where the victim generally resides. |
| 300 | (18)(16) Notwithstanding any other provision of law, venue |
| 301 | for the prosecution and trial of violations of this section may |
| 302 | be commenced and maintained in any county in which an element of |
| 303 | the offense occurred, including the county where the victim |
| 304 | generally resides. |
| 305 | (19)(17) A prosecution of an offense prohibited under |
| 306 | subsection (2), subsection (6), or subsection (7) must be |
| 307 | commenced within 3 years after the offense occurred. However, a |
| 308 | prosecution may be commenced within 1 year after discovery of |
| 309 | the offense by an aggrieved party, or by a person who has a |
| 310 | legal duty to represent the aggrieved party and who is not a |
| 311 | party to the offense, if such prosecution is commenced within 5 |
| 312 | years after the violation occurred. |
| 313 | Section 2. This act shall take effect July 1, 2006. |