1.1 	A bill for an act
1.2 	relating to data practices; regulating the collection, use, and disclosure of certain 
1.3 	data; classifying certain data; modifying the powers and duties of certain 
1.4 	commissioners; regulating tribal identification cards; authorizing the exchange of 
1.5 	certain information; permitting the use of a secure subscription service; providing 
1.6 	civil remedies; providing criminal penalties;amending Minnesota Statutes 2004, 
1.7 	sections 13.072, subdivision 1; 13.3805, by adding a subdivision; 13.87, by 
1.8 	adding a subdivision; 136A.162; 138.17, subdivisions 7, 8; 144.128; 144.335, by 
1.9 	adding a subdivision; 181.032; 626.557, subdivision 9a; Minnesota Statutes 2005 
1.10 	Supplement, sections 171.02, subdivision 1; 270C.03, subdivision 1; 299C.40, 
1.11 	subdivisions 1, 6; 299C.405; 325E.59, subdivision 1; proposing coding for new 
1.12 	law in Minnesota Statutes, chapters 10A; 13; 171; 299A; 325F.
1.13 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.14 	Section 1. [10A.027] INFORMATION ON WEB SITE.
1.15 	The board must not post on its Web site any canceled checks, bank account numbers, 
1.16 	credit card account numbers, or Social Security numbers that may be in the board's 
1.17 	possession as a result of report or statement filings, complaints, or other proceedings 
1.18 	under this chapter. 

1.19 	Sec. 2.  Minnesota Statutes 2004, section 13.072, subdivision 1, is amended to read:
1.20 		Subdivision 1.Opinion; when required. (a) Upon request of a government entity, 
1.21 	the commissioner may give a written opinion on any question relating to public access 
1.22 	to government data, rights of subjects of data, or classification of data under this chapter 
1.23 	or other Minnesota statutes governing government data practices. Upon request of any 
1.24 	person who disagrees with a determination regarding data practices made by a government 
1.25 	entity, the commissioner may give a written opinion regarding the person's rights as a 
1.26 	subject of government data or right to have access to government data.
2.1 	(b) Upon request of a body subject to chapter 13D, the commissioner may give a 
2.2 	written opinion on any question relating to the body's duties under chapter 13D. Upon 
2.3 	request of a person who disagrees with the manner in which members of a governing body 
2.4 	perform their duties under chapter 13D, the commissioner may give a written opinion 
2.5 	on compliance with chapter 13D. A governing body or person requesting an opinion 
2.6 	under this paragraph must pay the commissioner a fee of $200. Money received by the 
2.7 	commissioner under this paragraph is appropriated to the commissioner for the purposes 
2.8 	of this section.
2.9 	(c) If the commissioner determines that no opinion will be issued, the commissioner 
2.10 	shall give the government entity or body subject to chapter 13D or person requesting 
2.11 	the opinion notice of the decision not to issue the opinion within five businessdays of 
2.12 	receipt of the request. If this notice is not given, the commissioner shall issue an opinion 
2.13 	within 20 days of receipt of the request.
2.14 	(d) For good cause and upon written notice to the person requesting the opinion, 
2.15 	the commissioner may extend this deadline for one additional 30-day period. The notice 
2.16 	must state the reason for extending the deadline. The government entity or the members 
2.17 	of a body subject to chapter 13D must be provided a reasonable opportunity to explain the 
2.18 	reasons for its decision regarding the data or how they perform their duties under chapter 
2.19 	13D. The commissioner or the government entity or body subject to chapter 13D may 
2.20 	choose to give notice to the subject of the data concerning the dispute regarding the data 
2.21 	or compliance with chapter 13D.
2.22 	(e) This section does not apply to a determination made by the commissioner of 
2.23 	health under section  13.3805, subdivision 1, paragraph (b), or  144.6581. 
2.24 	(f) A written opinion issued by the attorney general shall take precedence over an 
2.25 	opinion issued by the commissioner under this section.

2.26 	Sec. 3. Minnesota Statutes 2004, section 13.3805, is amended by adding a subdivision 
2.27 	to read:
2.28 		Subd. 4.Drinking water testing data. Data maintained by the Department 
2.29 	of Health or community public water systems that identify the address of the testing 
2.30 	site and the name, address, and telephone number of residential homeowners of each 
2.31 	specific site that is tested for lead and copper as required by the federal Safe Drinking 
2.32 	Water Act, the United States Environmental Protection Agency's lead and copper rule, 
2.33 	and the department's drinking water protection program are private data on individuals 
2.34 	or nonpublic data.

3.1 	Sec. 4. [13.386] TREATMENT OF GENETIC INFORMATION HELD BY 
3.2 	GOVERNMENT ENTITIES AND OTHER PERSONS.
3.3 		Subdivision 1.Definition.  (a) "Genetic information" means information about an 
3.4 	identifiable individual derived from the presence, absence, alteration, or mutation of 
3.5 	a gene, or the presence or absence of a specific DNA or RNA marker, which has been 
3.6 	obtained from an analysis of:
3.7 	(1) the individual's biological information or specimen; or 
3.8 	(2) the biological information or specimen of a person to whom the individual 
3.9 	is related.
3.10 	(b) "Genetic information" also means medical or biological information collected 
3.11 	from an individual about a particular genetic condition that is or might be used to provide 
3.12 	medical care to that individual or the individual's family members.
3.13 		Subd. 2. Private data. Genetic information held by a government entity is private 
3.14 	data on individuals as defined by section 13.02, subdivision 12.
3.15 		Subd. 3. Collection, storage, use, and dissemination of genetic information.
 3.16 	Unless otherwise expressly provided by law, genetic information about an individual:
3.17 	(1) may be collected by a government entity, as defined in section 13.02, subdivision 
3.18 	7a, or any other person only with the written informed consent of the individual; 
3.19 	(2) may be used only for purposes to which the individual has given written 
3.20 	informed consent;
3.21 	(3) may be stored only for a period of time to which the individual has given written 
3.22 	informed consent; and
3.23 	(4) may be disseminated only:
3.24 	(i) with the individual's written informed consent; or
3.25 	(ii) if necessary in order to accomplish purposes described by clause (2). A consent 
3.26 	to disseminate genetic information under item (i) must be signed and dated.  Unless 
3.27 	otherwise provided by law, such a consent is valid for one year or for a lesser period 
3.28 	specified in the consent.

3.29 	EFFECTIVE DATE. This section is effective August 1, 2006, and applies to 
3.30 	genetic information collected on or after that date.

3.31 	Sec. 5.  Minnesota Statutes 2004, section 13.87, is amended by adding a subdivision to 
3.32 	read:
3.33 		Subd. 4.Name and index service data. (a) For purposes of this section, "name 
3.34 	and event index service data" means data of the Bureau of Criminal Apprehension that 
4.1 	link data on an individual that are stored in one or more databases maintained by criminal 
4.2 	justice agencies, as defined in section 299C.46, subdivision 2, or the judiciary.
4.3 	(b) Name and event index service data are private data on individuals, provided 
4.4 	that if the data link private or public data on an individual to confidential data on that 
4.5 	individual, the data are confidential data on that individual. The data become private data 
4.6 	if the data no longer link private or public data to confidential data. The classification of 
4.7 	data in the name and event index service does not change the classification of the data in 
4.8 	the databases linked by the service.

4.9 	Sec. 6. Minnesota Statutes 2004, section 136A.162, is amended to read:
4.10 	136A.162 CLASSIFICATION OF DATA.
4.11 	All (a) Except as provided in paragraphs (b) and (c), data on applicants for financial 
4.12 	assistance collected and used by the Higher Education Services Office for student 
4.13 	financial aid programs administered by that office shall be classified as are private data 
4.14 	on individuals under as defined in section  13.02, subdivision 12. Exceptions to this 
4.15 	classification are that: 
4.16 	(a) the names and addresses of program recipients or participants are public data;
4.17 	(b) Data on applicants may be disclosed to the commissioner of human services 
4.18 	to the extent necessary to determine eligibility under section  136A.121, subdivision 2, 
4.19 	clause (5); and.
4.20 	(c) The following data collected in the Minnesota supplemental loan program under 
4.21 	section  136A.1701 may be disclosed to a consumer credit reporting agency only if the 
4.22 	borrower and the cosigner give informed consent, according to section  13.05, subdivision 
4.23 	4, at the time of application for a loan: 
4.24 	(1) the lender-assigned borrower identification number;
4.25 	(2) the name and address of borrower;
4.26 	(3) the name and address of cosigner;
4.27 	(4) the date the account is opened;
4.28 	(5) the outstanding account balance;
4.29 	(6) the dollar amount past due;
4.30 	(7) the number of payments past due;
4.31 	(8) the number of late payments in previous 12 months;
4.32 	(9) the type of account;
4.33 	(10) the responsibility for the account; and
4.34 	(11) the status or remarks code.

5.1 	Sec. 7. Minnesota Statutes 2004, section 138.17, subdivision 7, is amended to read:
5.2 		Subd. 7.Records management program. A records management program for the 
5.3 	application of efficient and economical management methods to the creation, utilization, 
5.4 	maintenance, retention, preservation, and disposal of official records shall be administered 
5.5 	by the commissioner of administration with assistance from the director of the historical 
5.6 	society. The State Records Center which stores and services state records not in state 
5.7 	archives shall be administered by the commissioner of administration. The commissioner 
5.8 	of administration is empowered to (1) establish standards, procedures, and techniques for 
5.9 	effective management of government records, (2) make continuing surveys of paper work 
5.10 	operations, and (3) recommend improvements in current records management practices 
5.11 	including the use of space, equipment, and supplies employed in creating, maintaining, 
5.12 	preserving and disposing of government records. It shall be the duty of the head of each 
5.13 	state agency and the governing body of each county, municipality, and other subdivision 
5.14 	of government to cooperate with the commissioner in conducting surveys and to establish 
5.15 	and maintain an active, continuing program for the economical and efficient management 
5.16 	of the records of each agency, county, municipality, or other subdivision of government. 
5.17 	When requested by the commissioner, Public officials shall assist in the preparation of
5.18 	prepare an inclusive inventory of records in their custody, to which shall be attached 
5.19 	a schedule, approved by the head of the governmental unit or agency having custody 
5.20 	of the records and the commissioner, establishing a time period for the retention or 
5.21 	disposal of each series of records. When the schedule is unanimously approved by the 
5.22 	records disposition panel, the head of the governmental unit or agency having custody 
5.23 	of the records may dispose of the type of records listed in the schedule at a time and in 
5.24 	a manner prescribed in the schedule for particular records which were created after the 
5.25 	approval. A list of records disposed of pursuant to this subdivision shall be maintained by 
5.26 	the governmental unit or agency.

5.27 	Sec. 8. Minnesota Statutes 2004, section 138.17, subdivision 8, is amended to read:
5.28 		Subd. 8.Emergency records preservation. In light of the danger of nuclear or 
5.29 	natural disaster, the commissioner of administration, with the assistance of the director 
5.30 	of the historical society, shall establish and maintain a program for the selection and 
5.31 	preservation of public records considered essential to the operation of government and to 
5.32 	the protection of the rights and interests of persons, and shall make or cause to be made 
5.33 	preservation duplicates or designate as preservation duplicates existing copies of such 
5.34 	essential public records. Preservation duplicates shall be durable, accurate, complete, and 
5.35 	clear, and such duplicates reproduced by photographic or other process which accurately 
6.1 	reproduces and forms a durable medium for so reproducing the original shall have the 
6.2 	same force and effect for all purposes as the original record whether the original record is 
6.3 	in existence or not. A transcript, exemplification, or certified copy of such preservation 
6.4 	duplicate shall be deemed for all purposes to be a transcript, exemplification, or certified 
6.5 	copy of the original record. Such preservation duplicates shall be preserved in the place 
6.6 	and manner of safekeeping prescribed by the commissioner.
6.7 	Every county, municipality, or other subdivision of government may institute 
6.8 	a program for the preservation of necessary documents essential to the continuity of 
6.9 	government in the event of a disaster or emergency. Such a program shall first be 
6.10 	submitted to the commissioner for approval or disapproval and no such program shall be 
6.11 	instituted until such approval is obtained.

6.12 	Sec. 9. Minnesota Statutes 2004, section 144.128, is amended to read:
6.13 	144.128 COMMISSIONER'S DUTIES.
6.14 	The commissioner shall:
6.15 	(1) notify the physicians of newborns tested of the results of the tests performed;
6.16 	(2) make referrals for the necessary treatment of diagnosed cases of heritable and 
6.17 	congenital disorders when treatment is indicated;
6.18 	(3) maintain a registry of the cases of heritable and congenital disorders detected by 
6.19 	the screening program for the purpose of follow-up services; and
6.20 	(4) prepare a separate form for use by parents or by adults who were tested as minors 
6.21 	to direct that blood samples and test results be destroyed;
6.22 	(5) comply with a destruction request within 45 days after receiving it;
6.23 	(6) notify individuals who request destruction of samples and test results that the 
6.24 	samples and test results have been destroyed; and 
6.25 	(7) adopt rules to carry out sections  144.125 to  144.128.

6.26 	Sec. 10. Minnesota Statutes 2004, section 144.335, is amended by adding a subdivision 
6.27 	to read:
6.28 		Subd. 3d.Release of records for family and caretaker involvement in mental 
6.29 	health care. (a) Notwithstanding subdivision 3a, a provider providing mental health care 
6.30 	and treatment may disclose health record information described in paragraph (b) about a 
6.31 	patient to a family member of the patient or other person who requests the information if:
6.32 	(1) the request for information is in writing;
6.33 	(2) the family member or other person lives with, provides care for, or is directly 
6.34 	involved in monitoring the treatment of the patient;
7.1 	(3) the involvement under clause (2) is verified by the patient's mental health care 
7.2 	provider, the patient's attending physician, or a person other than the person requesting the 
7.3 	information, and is documented in the patient's medical record;
7.4 	(4) before the disclosure, the patient is informed in writing of the request, the name 
7.5 	of the person requesting the information, the reason for the request, and the specific 
7.6 	information being requested;
7.7 	(5) the patient agrees to the disclosure, does not object to the disclosure, or is 
7.8 	unable to consent or object, and the patient's decision or inability to make a decision is 
7.9 	documented in the patient's medical record; and 
7.10 	(6) the disclosure is necessary to assist in the provision of care or monitoring of the 
7.11 	patient's treatment. 
7.12 	(b) The information disclosed under this subdivision is limited to diagnosis, 
7.13 	admission to or discharge from treatment, the name and dosage of the medications 
7.14 	prescribed, side effects of the medication, consequences of failure of the patient to take the 
7.15 	prescribed medication, and a summary of the discharge plan.
7.16 	(c) If a provider reasonably determines that providing information under this 
7.17 	subdivision would be detrimental to the physical or mental health of the patient or is 
7.18 	likely to cause the patient to inflict self harm or to harm another, the provider must not 
7.19 	disclose the information.
7.20 	(d) This subdivision does not apply to disclosures for a medical emergency or to 
7.21 	family members as authorized or required under subdivision 3a, paragraph (b), clause 
7.22 	(1), or paragraph (f).

7.23 	Sec. 11. Minnesota Statutes 2005 Supplement, section 171.02, subdivision 1, is 
7.24 	amended to read:
7.25 		Subdivision 1.License required. Except when expressly exempted, a person 
7.26 	shall not drive a motor vehicle upon a street or highway in this state unless the person 
7.27 	has a license valid under this chapter for the type or class of vehicle being driven. The 
7.28 	department shall not issue a driver's license to a person unless and until the person's license 
7.29 	from any jurisdiction has been invalidated. The department shall provide to the issuing 
7.30 	department of any jurisdiction, information that the licensee is now licensed in Minnesota. 
7.31 	A person is not permitted to have more than one valid driver's license at any time. The 
7.32 	department shall not issue to a person to whom a current Minnesota identification card has 
7.33 	been issued a driver's license, other than a limited license, unless the person's Minnesota 
7.34 	identification card has been invalidated. This subdivision does not require invalidation of 
7.35 	a tribal identification card as a condition of receiving a driver's license.

8.1 	Sec. 12. [171.072] TRIBAL IDENTIFICATION CARD.
8.2 	(a) If a Minnesota identification card is deemed an acceptable form of identification 
8.3 	in Minnesota Statutes or Rules, a tribal identification card is also an acceptable form 
8.4 	of identification. A tribal identification card is a primary document for purposes of 
8.5 	Minnesota Rules, part 7410.0400, and successor rules.
8.6 	(b) For purposes of this subdivision, "tribal identification card" means an unexpired 
8.7 	identification card issued by a Minnesota tribal government of a tribe recognized by the 
8.8 	Bureau of Indian Affairs, United States Department of the Interior, that contains the legal 
8.9 	name, date of birth, signature, and picture of the enrolled tribal member.
8.10 	(c) The tribal identification card must contain security features that make it as 
8.11 	impervious to alteration as is reasonably practicable in its design and quality of material 
8.12 	and technology. The security features must use materials that are not readily available to 
8.13 	the general public. The tribal identification card must not be susceptible to reproduction 
8.14 	by photocopying or simulation and must be highly resistant to data or photograph 
8.15 	substitution and other tampering. The requirements of this section do not apply to tribal 
8.16 	identification cards used to prove an individual's residence for purposes of section 
8.17 	201.061, subdivision 3.

8.18 	Sec. 13. Minnesota Statutes 2004, section 181.032, is amended to read:
8.19 	181.032 REQUIRED STATEMENT OF EARNINGS BY EMPLOYER.
8.20 	At the end of each pay period, the employer shall give provide each employee an 
8.21 	earnings statement, either in writing or by electronic means, covering that pay period. 
8.22 	An employer who chooses to provide an earnings statement by electronic means must 
8.23 	provide employee access to an employer-owned computer during an employee's regular 
8.24 	working hours to review and print earnings statements. The earnings statement may be in 
8.25 	any form determined by the employer but must include:
8.26 	(a) the name of the employee;
8.27 	(b) the hourly rate of pay (if applicable);
8.28 	(c) the total number of hours worked by the employee unless exempt from chapter 
8.29 	177;
8.30 	(d) the total amount of gross pay earned by the employee during that period;
8.31 	(e) a list of deductions made from the employee's pay;
8.32 	(f) the net amount of pay after all deductions are made;
8.33 	(g) the date on which the pay period ends; and
8.34 	(h) the legal name of the employer and the operating name of the employer if 
8.35 	different from the legal name.
9.1 	An employer must provide earnings statements to an employee in writing, rather 
9.2 	than by electronic means, if the employer has received at least 24 hours notice from an 
9.3 	employee that the employee would like to receive earnings statements in written form. 
9.4 	Once an employer has received notice from an employee that the employee would like to 
9.5 	receive earnings statements in written form, the employer must comply with that request 
9.6 	on an ongoing basis.

9.7 	Sec. 14. Minnesota Statutes 2005 Supplement, section 270C.03, subdivision 1, is 
9.8 	amended to read:
9.9 		Subdivision 1.Powers and duties. The commissioner shall have and exercise 
9.10 	the following powers and duties:
9.11 	(1) administer and enforce the assessment and collection of taxes;
9.12 	(2) make determinations, corrections, and assessments with respect to taxes, 
9.13 	including interest, additions to taxes, and assessable penalties;
9.14 	(3) use statistical or other sampling techniques consistent with generally accepted 
9.15 	auditing standards in examining returns or records and making assessments;
9.16 	(4) investigate the tax laws of other states and countries, and formulate and submit 
9.17 	to the legislature such legislation as the commissioner may deem expedient to prevent 
9.18 	evasions of state revenue laws and to secure just and equal taxation and improvement in 
9.19 	the system of state revenue laws;
9.20 	(5) consult and confer with the governor upon the subject of taxation, the 
9.21 	administration of the laws in regard thereto, and the progress of the work of the 
9.22 	department, and furnish the governor, from time to time, such assistance and information 
9.23 	as the governor may require relating to tax matters;
9.24 	(6) execute and administer any agreement with the secretary of the treasury or the 
9.25 	Bureau of Alcohol, Tobacco, Firearms, and Explosives in the Department of Justice of the 
9.26 	United States or a representative of another state regarding the exchange of information 
9.27 	and administration of the state revenue laws;
9.28 	(7) require town, city, county, and other public officers to report information as to the 
9.29 	collection of taxes received from licenses and other sources, and such other information 
9.30 	as may be needful in the work of the commissioner, in such form as the commissioner 
9.31 	may prescribe;
9.32 	(8) authorize the use of unmarked motor vehicles to conduct seizures or criminal 
9.33 	investigations pursuant to the commissioner's authority; and
9.34 	(9) exercise other powers and authority and perform other duties required of or 
9.35 	imposed upon the commissioner by law.

10.1 	EFFECTIVE DATE. This section is effective the day following final enactment. 

10.2 	Sec. 15. [299A.59] NOTICE OF MULTIPLE LAW ENFORCEMENT 
10.3 	OPERATIONS CONFLICTS.
10.4 	(a) Notwithstanding section 299C.405, the Department of Public Safety may employ 
10.5 	a secure subscription service designed to promote and enhance officer safety during 
10.6 	tactical operations by and between federal, state, and local law enforcement agencies 
10.7 	by notifying law enforcement agencies of conflicts where multiple law enforcement 
10.8 	operations may be occurring on the same subject or vehicle or on or near the same 
10.9 	location. The notification may include warrant executions, surveillance activities, SWAT 
10.10 	activities, and undercover operations.
10.11 	(b) Data created, collected, received, maintained, or disseminated by this system is 
10.12 	classified as criminal investigative data as defined in section 13.82, subdivision 7.

10.13 	Sec. 16. Minnesota Statutes 2005 Supplement, section 299C.40, subdivision 1, is 
10.14 	amended to read:
10.15 		Subdivision 1.Definitions. (a) The definitions in this subdivision apply to this 
10.16 	section.
10.17 	(b) "CIBRS" means the Comprehensive Incident-Based Reporting System, located 
10.18 	in the Department of Public Safety and managed by the Bureau of Criminal Apprehension, 
10.19 	Criminal Justice Information Systems Section. A reference in this section to "CIBRS" 
10.20 	includes the Bureau of Criminal Apprehension.
10.21 	(c) "Law enforcement agency" means a Minnesota municipal police department, 
10.22 	the Metropolitan Transit Police, the Metropolitan Airports Police, the University of 
10.23 	Minnesota Police Department, the Department of Corrections' Fugitive Apprehension 
10.24 	Unit, a Minnesota county sheriff's department, the Bureau of Criminal Apprehension, or 
10.25 	the Minnesota State Patrol.

10.26 	Sec. 17. Minnesota Statutes 2005 Supplement, section 299C.40, subdivision 6, is 
10.27 	amended to read:
10.28 		Subd. 6.Access to CIBRS data by data subject. (a) Upon request to the Bureau 
10.29 	of Criminal Apprehension or to a law enforcement agency participating in CIBRS an 
10.30 	individual shall be informed whether the individual is the subject of private or confidential 
10.31 	data held by CIBRS. An individual who is the subject of private data held by CIBRS may 
10.32 	obtain access to the data by making a request to the Bureau of Criminal Apprehension 
10.33 	or to a participating law enforcement agency. Private data provided to the subject under 
11.1 	this subdivision must also include the name of the law enforcement agency that submitted 
11.2 	the data to CIBRS and the name, telephone number, and address of the responsible 
11.3 	authority for the data.
11.4 	(b) If an individual who is the subject of private data held by CIBRS requests access 
11.5 	to the data or release of the data to a third party, the individual must appear in person at 
11.6 	the Bureau of Criminal Apprehension or a participating law enforcement agency to give 
11.7 	informed consent to the data access or release. 

11.8 	Sec. 18. Minnesota Statutes 2005 Supplement, section 299C.405, is amended to read:
11.9 	299C.405 SUBSCRIPTION SERVICE.
11.10 	(a) For the purposes of this section "subscription service" means a process by which 
11.11 	law enforcement agency personnel may obtain ongoing, automatic electronic notice of any 
11.12 	contacts an individual has with any criminal justice agency.
11.13 	(b) The Department of Public Safety must not establish a subscription service 
11.14 	without prior legislative authorization; except that, the Bureau of Criminal Apprehension 
11.15 	may employ a secure subscription service designed to promote and enhance officer safety 
11.16 	during tactical operations by and between federal, state, and local law enforcement 
11.17 	agencies by notifying law enforcement agencies of conflicts where multiple law 
11.18 	enforcement operations may be occurring on the same subject or vehicle or on or near the 
11.19 	same location. The notification may include warrant executions, surveillance activities, 
11.20 	SWAT activities, and undercover operations.

11.21 	Sec. 19. Minnesota Statutes 2005 Supplement, section 325E.59, subdivision 1, is 
11.22 	amended to read:
11.23 		Subdivision 1.Generally. (a) A person or entity, not including a government entity, 
11.24 	may not do any of the following:
11.25 	(1) publicly post or publicly display in any manner an individual's Social Security 
11.26 	number. "Publicly post" or "publicly display" means to intentionally communicate or 
11.27 	otherwise make available to the general public;
11.28 	(2) print an individual's Social Security number on any card required for the 
11.29 	individual to access products or services provided by the person or entity;
11.30 	(3) require an individual to transmit the individual's Social Security number over 
11.31 	the Internet, unless the connection is secure or the Social Security number is encrypted, 
11.32 	except as required by titles XVIII and XIX of the Social Security Act and by Code of 
11.33 	Federal Regulations, title 42, section 483.20;
12.1 	(4) require an individual to use the individual's Social Security number to access an 
12.2 	Internet Web site, unless a password or unique personal identification number or other 
12.3 	authentication device is also required to access the Internet Web site; or
12.4 	(5) print a number that the person or entity knows to be an individual's Social 
12.5 	Security number on any materials that are mailed to the individual, unless state or federal 
12.6 	law requires the Social Security number to be on the document to be mailed. If, in 
12.7 	connection with a transaction involving or otherwise relating to an individual, a person 
12.8 	or entity receives a number from a third party, that person or entity is under no duty to 
12.9 	inquire or otherwise determine whether the number is or includes that individual's Social 
12.10 	Security number and may print that number on materials mailed to the individual, unless 
12.11 	the person or entity receiving the number has actual knowledge that the number is or 
12.12 	includes the individual's Social Security number.; 
12.13 	(6) assign or use a number as the primary account identifier that is identical to or 
12.14 	incorporates an individual's complete Social Security number; or 
12.15 	(7) sell Social Security numbers obtained from individuals in the course of business.
12.16 	Notwithstanding clauses (1) to (5), Social Security numbers may be included in 
12.17 	applications and forms sent by mail, including documents sent as part of an application or 
12.18 	enrollment process, or to establish, amend, or terminate an account, contract, or policy, 
12.19 	or to confirm the accuracy of the Social Security number. Nothing in this paragraph 
12.20 	authorizes inclusion of a Social Security number on the outside of a mailing or in the bulk 
12.21 	mailing of a credit card solicitation offer.
12.22 	(b) A person or entity, not including a government entity, must restrict access to 
12.23 	individual Social Security numbers it holds so that only employees who require the 
12.24 	numbers in order to perform their job duties have access to the numbers, except as required 
12.25 	by titles XVIII and XIX of the Social Security Act and by Code of Federal Regulations, 
12.26 	title 42, section 483.20. 
12.27 	(c) Except as provided in subdivision 2, this section applies only to the use of Social 
12.28 	Security numbers on or after July 1, 2007.

12.29 	Sec. 20. [325F.675] FRAUD RELATED TO CONSUMER TELEPHONE 
12.30 	RECORDS.
12.31 		Subdivision 1.Prohibited acts.  Whoever: 
12.32 	(1) knowingly procures, attempts to procure, solicits, or conspires with another to 
12.33 	procure, a telephone record of any resident of this state without the authorization of the 
12.34 	customer to whom the record pertains or by fraudulent, deceptive, or false means; 
13.1 	(2) knowingly sells, or attempts to sell, a telephone record of any resident of this 
13.2 	state without the authorization of the customer to whom the record pertains; or 
13.3 	(3) receives a telephone record of any resident of this state knowing that such record 
13.4 	has been obtained without the authorization of the customer to whom the record pertains 
13.5 	or by fraudulent, deceptive, or false means, 
13.6 	is guilty of a violation of this section. 
13.7 		Subd. 2. Penalties.  (a) A violation of this section is a gross misdemeanor punishable 
13.8 	by a sentence of up to one year, a fine of $3,000, or both. 
13.9 	(b) Each subsequent violation is a felony punishable by a sentence of up to five 
13.10 	years, a fine of $5,000, or both. 
13.11 	(c) A violation of this section is subject to a $5,000 civil penalty. 
13.12 		Subd. 3. Definitions.  For purposes of this subdivision: 
13.13 	(1) "Telephone record" means information retained by a telephone company that 
13.14 	relates to a telephone number dialed from the customer's telephone, an incoming call 
13.15 	directed to a customer's telephone, or other data related to calls typically contained on 
13.16 	a customer's telephone bill, including, but not limited to, the time the call started and 
13.17 	ended, the duration of the call, the time of day the call was made, charges applied, and 
13.18 	information indicating the location from which or to which calls were made. For purposes 
13.19 	of this section, any information collected and retrieved by customers using caller ID or 
13.20 	other similar technology is not a telephone record. 
13.21 	(2) "Procure" means to obtain by any means, whether electronically, in writing, or in 
13.22 	oral form, with or without consideration. 
13.23 	(3) "Telephone company" means any person or other entity that provides commercial 
13.24 	telephone service to a customer, irrespective of the communications technology used to 
13.25 	provide the service, including, but not limited to, traditional wireline or cable telephone 
13.26 	service; cellular, broadband PCS, or other wireless telephone service; microwave, satellite, 
13.27 	or other terrestrial telephone service; and voice over Internet telephone service. 
13.28 		Subd. 4. Unfair or deceptive trade practices; consumer protection.  Except as 
13.29 	otherwise provided by this section, a violation of this section constitutes an unfair or 
13.30 	deceptive trade practice under section 325D.44. 
13.31 		Subd. 5. Information security.  (a) Telephone companies that maintain telephone 
13.32 	records of a resident of this state shall establish reasonable procedures to protect against 
13.33 	unauthorized or fraudulent disclosure of such records which could result in substantial 
13.34 	harm or inconvenience to a customer. 
13.35 	(b) No private right of action is authorized under this subdivision. 
14.1 		Subd. 6. Nonapplicability to telephone companies.  No provisions of this section 
14.2 	shall be construed to prohibit a telephone company from obtaining, using, disclosing, or 
14.3 	permitting access to any telephone record, either directly or indirectly, through its agents: 
14.4 	(1) unless prohibited by law; 
14.5 	(2) with the lawful consent of the customer or subscriber; 
14.6 	(3) as may be necessarily incident to the rendition of the service, to initiate, render, 
14.7 	bill, and collect customer charges, or to the protection of the rights or property of the 
14.8 	provider of that service, or to protect users of those services and other carriers from 
14.9 	fraudulent, abusive, or unlawful use of, or subscription to, such services; 
14.10 	(4) in connection with the sale or transfer of all or part of a business, or the purchase 
14.11 	or acquisition of a portion or all of a business, or the migration of a customer from one 
14.12 	carrier to another; 
14.13 	(5) to a governmental entity, if the telephone company reasonably believes that an 
14.14 	emergency involving immediate danger of death or serious physical injury to any person 
14.15 	justifies disclosure of the information; or 
14.16 	(6) to the National Center for Missing and Exploited Children, in connection with a 
14.17 	report submitted under section 227 of the federal Victims of Child Abuse Act of 1990. 
14.18 		Subd. 7. Enforcement.  Violations of this section are enforced under section 8.31. 

14.19 	Sec. 21. Minnesota Statutes 2004, section 626.557, subdivision 9a, is amended to read:
14.20 		Subd. 9a.Evaluation and referral of reports made to a common entry 
14.21 	point unit. The common entry point must screen the reports of alleged or suspected 
14.22 	maltreatment for immediate risk and make all necessary referrals as follows:
14.23 	(1) if the common entry point determines that there is an immediate need for 
14.24 	adult protective services, the common entry point agency shall immediately notify the 
14.25 	appropriate county agency;
14.26 	(2) if the report contains suspected criminal activity against a vulnerable adult, the 
14.27 	common entry point shall immediately notify the appropriate law enforcement agency;
14.28 	(3) if the report references alleged or suspected maltreatment and there is no 
14.29 	immediate need for adult protective services, the common entry point shall notify the 
14.30 	appropriate lead agency as soon as possible, but in any event no longer than two working 
14.31 	days;
14.32 	(4) if the report does not reference alleged or suspected maltreatment, the common 
14.33 	entry point may determine whether the information will be referred; and
14.34 	(5) if the report contains information about a suspicious death, the common entry 
14.35 	point shall immediately notify the appropriate law enforcement agencies, the local medical 
15.1 	examiner, and the ombudsman established under section  245.92. Law enforcement 
15.2 	agencies shall coordinate with the local medical examiner and the ombudsman as provided 
15.3 	by law.

15.4 	Sec. 22. REPORTS REQUIRED.
 15.5 		Subdivision 1. Genetic information; work group. (a) The commissioner must 
15.6 	create a work group to develop principles for public policy on the use of genetic 
15.7 	information. The work group must include representatives of state government, including 
15.8 	the judicial branch, local government, prosecutors, public defenders, the American Civil 
15.9 	Liberties Union - Minnesota, the Citizens Council on Health Care, the University of 
15.10 	Minnesota Center on Bioethics, the Minnesota Medical Association, the Mayo Clinic 
15.11 	and Foundation, the March of Dimes, and representatives of employers, researchers, 
15.12 	epidemiologists, laboratories, and insurance companies.
15.13 	(b) The commissioner of administration and the work group must conduct reviews 
15.14 	of the topics in paragraphs (c) to (f), in light of the issues raised in the report on treatment 
15.15 	of genetic information under state law required by Laws 2005, chapter 163, section 87. 
15.16 	The commissioner must report the results, including any recommendations for legislative 
15.17 	changes, to the chairs of the house Civil Law Committee and the senate Judiciary 
15.18 	Committee and the ranking minority members of those committees by January 15, 2008.
15.19 	(c) The commissioner and the work group must determine whether changes are 
15.20 	needed in Minnesota Statutes, section 144.69, dealing with collection of information 
15.21 	from cancer patients and their relatives.
15.22 	(d) The commissioner and the work group must make recommendations whether 
15.23 	all relatives affected by a formal three-generation pedigree created by the Department of 
15.24 	Health should be able to access the entire data set, rather than only allowing individuals 
15.25 	access to the data of which they are the subject.
15.26 	(e) The commissioner and the work group must identify, and may make 
15.27 	recommendations among, options for resolving questions of secondary uses of genetic 
15.28 	information.
15.29 	(f) The commissioner and the work group must make recommendations whether 
15.30 	legislative changes are needed regarding access to DNA test results and the specimens 
15.31 	used to create the test results held by the Bureau of Criminal Apprehension as part of 
15.32 	a criminal investigation.
15.33 		Subd. 2. Further issues for study.  Upon completion of the reports required by 
15.34 	subdivision 1, the commissioner and the work group must address the following issues 
15.35 	and report to the legislature as provided by subdivision 1:
16.1 	(1) how genetic information is used by local government entities;
16.2 	(2) what are common uses of genetic information by the private sector;
16.3 	(3) retention schedules for genetic information held by government entities;
16.4 	(4) whether regulation  is needed of private companies that test biological samples to 
16.5 	perform genetic testing;
16.6 	(5) whether a mechanism is needed to provide for sharing genetic test results on an 
16.7 	individual with relatives whose lives would be impacted by the information in the test 
16.8 	results; and
16.9 	(6) whether individuals required to provide genetic information to government or 
16.10 	private entities need protection against genetic discrimination.