1.1                          A bill for an act 
  1.2             relating to government data practices; restricting the 
  1.3             use of certain public data on individuals held by 
  1.4             state agencies; providing civil penalties; amending 
  1.5             Minnesota Statutes 1998, sections 13.87, subdivision 
  1.6             2; 168.346; and 171.12, subdivision 7; Minnesota 
  1.7             Statutes 1999 Supplement, section 13.03, subdivision 
  1.8             3; proposing coding for new law in Minnesota Statutes, 
  1.9             chapter 13. 
  1.10  BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA: 
  1.11                             ARTICLE 1
  1.12                  LIMITING USE OF INDIVIDUAL DATA
  1.13     Section 1.  [13.035] [RESTRICTIONS ON USE OF PUBLIC DATA ON 
  1.14  INDIVIDUALS.] 
  1.15     (a) Public data identifying individuals which is obtained 
  1.16  from a state agency must not be used directly or indirectly to 
  1.17  sell or attempt to sell a product or service.  A person seeking 
  1.18  copies of such data from a state agency must state that: 
  1.19     (1) the data will not be used to sell or attempt to sell a 
  1.20  product or service; or 
  1.21     (2) the data will be used for a purpose authorized by law 
  1.22  and must cite the applicable law. 
  1.23     (b) This section does not prohibit the use of public data 
  1.24  identifying individuals for a scholarly, journalistic, or 
  1.25  governmental purpose or for any purpose authorized by law. 
  1.26     (c) For purposes of this section, "governmental purpose" 
  1.27  includes access to data reasonably necessary to respond to a 
  2.1   request for proposals from a state agency or to bid on or to 
  2.2   carry out a contract with a state agency. 
  2.3      (d) A person who violates this section is subject to a 
  2.4   civil penalty of up to $5,000 for the first violation and up to 
  2.5   $10,000 for each subsequent violation. 
  2.6      Sec. 2.  Minnesota Statutes 1998, section 168.346, is 
  2.7   amended to read: 
  2.8      168.346 [PRIVACY OF NAME OR RESIDENCE ADDRESS.] 
  2.9      (a) The registered owner of a motor vehicle may request in 
  2.10  writing that the owner's residence address or name and residence 
  2.11  address be classified as private data on individuals, as defined 
  2.12  in section 13.02, subdivision 12.  The commissioner shall grant 
  2.13  the classification upon receipt of a signed statement by the 
  2.14  owner that the classification is required for the safety of the 
  2.15  owner or the owner's family, if the statement also provides a 
  2.16  valid, existing address where the owner consents to receive 
  2.17  service of process.  The commissioner shall use the mailing 
  2.18  address in place of the residence address in all documents and 
  2.19  notices pertaining to the motor vehicle.  The residence address 
  2.20  or name and residence address and any information provided in 
  2.21  the classification request, other than the mailing address, are 
  2.22  private data on individuals and may be provided to requesting 
  2.23  law enforcement agencies, probation and parole agencies, and 
  2.24  public authorities, as defined in section 518.54, subdivision 9. 
  2.25     (b) An individual registered owner of a motor vehicle must 
  2.26  be informed in a clear and conspicuous manner on the forms for 
  2.27  issuance or renewal of titles and registrations, that the 
  2.28  owner's personal information may be disclosed to any person who 
  2.29  makes a request for the personal information, and that, except 
  2.30  for uses permitted by United States Code, title 18, section 
  2.31  2721, clause (b), the registered owner may prohibit disclosure 
  2.32  of the personal information by so indicating on the form.  For 
  2.33  purposes of this paragraph, access by requesters making requests 
  2.34  described in section 168.345, subdivision 4, is deemed to be 
  2.35  related to public safety.  
  2.36     (c) At the time of registration or renewal, the individual 
  3.1   registered owner of a motor vehicle must also be informed in a 
  3.2   clear and conspicuous manner on forms that the owner's personal 
  3.3   information may be used, rented, or sold solely for bulk 
  3.4   distribution by organizations for business purposes including 
  3.5   surveys, marketing, and solicitation.  The commissioner shall 
  3.6   implement methods and procedures that enable the registered 
  3.7   owner to request that bulk surveys, marketing, or solicitation 
  3.8   not be directed to the owner.  If the registered owner so 
  3.9   requests, the commissioner shall implement the request in a 
  3.10  timely manner and the personal information may not be so used. 
  3.11     (d) To the extent permitted by United States Code, title 
  3.12  18, section 2721, data on individuals provided to register a 
  3.13  motor vehicle is public data on individuals and shall be 
  3.14  disclosed as permitted by United States Code, title 18, section 
  3.15  2721, clause (b) as provided by paragraph (c). 
  3.16     (c) Data that identifies an individual and is collected, 
  3.17  created, or maintained in connection with the issuance or 
  3.18  renewal of a motor vehicle title may be released only as follows:
  3.19     (1) no such data shall be released for a use described in 
  3.20  United States Code, title 28, section 2721, paragraph (b), 
  3.21  clause (12); 
  3.22     (2) the social security number, photograph or image, or 
  3.23  medical or disability information on the individual shall be 
  3.24  released if the individual gives express consent for a use 
  3.25  described in United States Code, title 28, section 2721, 
  3.26  paragraph (b), clauses (1) to (11) and (13); except that the 
  3.27  individual's consent is not required to release any of this data 
  3.28  for a use described in United States Code, title 28, section 
  3.29  2721, paragraph (b), clause (1), (4), (6), or (9); 
  3.30     (3) data, other than the data described in clause (2), 
  3.31  which identifies an individual may be released without the 
  3.32  express consent of the individual for a use described in United 
  3.33  States Code, title 28, section 2721, paragraph (b), clauses (1) 
  3.34  to (10); and 
  3.35     (4) data that identifies an individual may be released as 
  3.36  provided in section 168.345, subdivision 4. 
  4.1      Sec. 3.  Minnesota Statutes 1998, section 171.12, 
  4.2   subdivision 7, is amended to read: 
  4.3      Subd. 7.  [PRIVACY OF RESIDENCE ADDRESS.] (a) An applicant 
  4.4   for a driver's license or a Minnesota identification card may 
  4.5   request that the applicant's residence address be classified as 
  4.6   private data on individuals, as defined in section 13.02, 
  4.7   subdivision 12.  The commissioner shall grant the classification 
  4.8   upon receipt of a signed statement by the individual that the 
  4.9   classification is required for the safety of the applicant or 
  4.10  the applicant's family, if the statement also provides a valid, 
  4.11  existing address where the applicant consents to receive service 
  4.12  of process.  The commissioner shall use the mailing address in 
  4.13  place of the residence address in all documents and notices 
  4.14  pertaining to the driver's license or identification card.  The 
  4.15  residence address and any information provided in the 
  4.16  classification request, other than the mailing address, are 
  4.17  private data on individuals and may be provided to requesting 
  4.18  law enforcement agencies, probation and parole agencies, and 
  4.19  public authorities, as defined in section 518.54, subdivision 9. 
  4.20     (b) An applicant for a driver's license or a Minnesota 
  4.21  identification card must be informed in a clear and conspicuous 
  4.22  manner on the forms for the issuance or renewal that the 
  4.23  applicant's personal information may be disclosed to any person 
  4.24  who makes a request for the personal information, and that 
  4.25  except for uses permitted by United States Code, title 18, 
  4.26  section 2721, clause (b), the applicant may prohibit disclosure 
  4.27  of the personal information by so indicating on the form. 
  4.28     (c) An applicant for a driver's license or a Minnesota 
  4.29  identification card must be also informed in a clear and 
  4.30  conspicuous manner on forms that the applicant's personal 
  4.31  information may be used, rented, or sold solely for bulk 
  4.32  distribution by organizations for business purposes, including 
  4.33  surveys, marketing, or solicitation.  The commissioner shall 
  4.34  implement methods and procedures that enable the applicant to 
  4.35  request that bulk surveys, marketing, or solicitation not be 
  4.36  directed to the applicant.  If the applicant so requests, the 
  5.1   commissioner shall implement the request in a timely manner and 
  5.2   the personal information may not be so used. 
  5.3      (d) To the extent permitted by United States Code, title 
  5.4   18, section 2721, data on individuals provided to obtain a 
  5.5   Minnesota identification card or a driver's license is public 
  5.6   data on individuals and shall be disclosed as permitted by 
  5.7   United States Code, title 18, section 2721, clause (b) as 
  5.8   provided by paragraph (c). 
  5.9      (c) Data that identifies an individual and is collected, 
  5.10  created, or maintained in connection with the issuance or 
  5.11  renewal of a Minnesota identification card or driver's license 
  5.12  may be released as follows: 
  5.13     (1) no such data shall be released for a use described in 
  5.14  United States Code, title 28, section 2721, paragraph (b), 
  5.15  clause (12); 
  5.16     (2) the individual's photograph or image, social security 
  5.17  number, or medical or disability information relating to the 
  5.18  individual shall be released if the individual gives express 
  5.19  consent for a use described in United States Code, title 28, 
  5.20  section 2721, paragraph (b), clauses (1) to (11) and (13); 
  5.21  except that the individual's consent is not required to release 
  5.22  the data for a use described in United States Code, title 28, 
  5.23  section 2721, paragraph (b), clause (1), (4), (6), or (9); and 
  5.24     (3) data, other than the data described in clause (2), that 
  5.25  identifies an individual may be released without the express 
  5.26  consent of the individual for a use described in United States 
  5.27  Code, title 28, section 2721, paragraph (b), clauses (1) to (10).
  5.28                             ARTICLE 2
  5.29                       CONFORMING AMENDMENTS
  5.30     Section 1.  Minnesota Statutes 1999 Supplement, section 
  5.31  13.03, subdivision 3, is amended to read: 
  5.32     Subd. 3.  [REQUEST FOR ACCESS TO DATA.] (a) Upon request to 
  5.33  a responsible authority or designee, a person shall be permitted 
  5.34  to inspect and copy public government data at reasonable times 
  5.35  and places, and, upon request, shall be informed of the data's 
  5.36  meaning.  If a person requests access for the purpose of 
  6.1   inspection, the responsible authority may not assess a charge or 
  6.2   require the requesting person to pay a fee to inspect data.  
  6.3      (b) For purposes of this section, "inspection" includes, 
  6.4   but is not limited to, the visual inspection of paper and 
  6.5   similar types of government data.  Inspection does not include 
  6.6   printing copies by the government entity, unless printing a copy 
  6.7   is the only method to provide for inspection of the data.  In 
  6.8   the case of data stored in electronic form and made available in 
  6.9   electronic form on a remote access basis to the public by the 
  6.10  government entity, inspection includes remote access to the data 
  6.11  by the public and the ability to print copies of or download the 
  6.12  data on the public's own computer equipment.  Nothing in this 
  6.13  section prohibits a government entity from charging a reasonable 
  6.14  fee for remote access to data under a specific statutory grant 
  6.15  of authority.  A government entity may charge a fee for remote 
  6.16  access to data where either the data or the access is enhanced 
  6.17  at the request of the person seeking access. 
  6.18     (c) The responsible authority or designee shall provide 
  6.19  copies of public data upon request, except as otherwise limited 
  6.20  by section 13.035.  If a person requests copies or electronic 
  6.21  transmittal of the data to the person, the responsible authority 
  6.22  may require the requesting person to pay the actual costs of 
  6.23  searching for and retrieving government data, including the cost 
  6.24  of employee time, and for making, certifying, compiling, and 
  6.25  electronically transmitting the copies of the data or the data, 
  6.26  but may not charge for separating public from not public data.  
  6.27  If the responsible authority or designee is not able to provide 
  6.28  copies at the time a request is made, copies shall be supplied 
  6.29  as soon as reasonably possible. 
  6.30     (d) When a request under this subdivision involves any 
  6.31  person's receipt of copies of public government data that has 
  6.32  commercial value and is a substantial and discrete portion of or 
  6.33  an entire formula, pattern, compilation, program, device, 
  6.34  method, technique, process, database, or system developed with a 
  6.35  significant expenditure of public funds by the agency, the 
  6.36  responsible authority may charge a reasonable fee for the 
  7.1   information in addition to the costs of making, certifying, and 
  7.2   compiling the copies.  Any fee charged must be clearly 
  7.3   demonstrated by the agency to relate to the actual development 
  7.4   costs of the information.  The responsible authority, upon the 
  7.5   request of any person, shall provide sufficient documentation to 
  7.6   explain and justify the fee being charged.  
  7.7      (e) If the responsible authority or designee determines 
  7.8   that the requested data is classified so as to deny the 
  7.9   requesting person access, the responsible authority or designee 
  7.10  shall inform the requesting person of the determination either 
  7.11  orally at the time of the request, or in writing as soon after 
  7.12  that time as possible, and shall cite the specific statutory 
  7.13  section, temporary classification, or specific provision of 
  7.14  federal law on which the determination is based.  Upon the 
  7.15  request of any person denied access to data, the responsible 
  7.16  authority or designee shall certify in writing that the request 
  7.17  has been denied and cite the specific statutory section, 
  7.18  temporary classification, or specific provision of federal law 
  7.19  upon which the denial was based.  
  7.20     Sec. 2.  Minnesota Statutes 1998, section 13.87, 
  7.21  subdivision 2, is amended to read: 
  7.22     Subd. 2.  [CLASSIFICATION.] Criminal history data 
  7.23  maintained by agencies, political subdivisions and statewide 
  7.24  systems are classified as private, pursuant to section 13.02, 
  7.25  subdivision 12, except that data created, collected, or 
  7.26  maintained by the bureau of criminal apprehension that identify 
  7.27  an individual who was convicted of a crime and the offense of 
  7.28  which the individual was convicted are public data for 15 years 
  7.29  following the discharge of the sentence imposed for the offense. 
  7.30     The bureau of criminal apprehension shall provide to the 
  7.31  public at the central office of the bureau the ability to 
  7.32  inspect in person, at no charge, through a computer monitor the 
  7.33  criminal conviction data classified as public under this 
  7.34  subdivision. 
  7.35     Notwithstanding section 13.035, criminal history data 
  7.36  classified as public by this subdivision may be used for any 
  8.1   purpose.