1.1 	A bill for an act
1.2 	relating to security freezes; authorizing security freezes for protected persons; 
1.3 	providing exceptions;proposing coding for new law in Minnesota Statutes, chapter 
1.4 	13C.
1.5 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.6 	Section 1. [13C.10] PROTECTED PERSONS SECURITY FREEZE.
1.7 		Subdivision 1.Definitions. (a) For purposes of this section, the terms defined in 
1.8 	paragraphs (b) through (g) have the meanings given.
1.9 	(b) "Protected person" means an individual who is under the age of 16 at the time a 
1.10 	request for the placement of a security freeze is made.
1.11 	(c) "Record" means a compilation of information that:
1.12 	(1) identifies a protected person;
1.13 	(2) is created by a consumer reporting agency solely for the purpose of complying with 
1.14 	this section; and
1.15 	(3) may not be created or used to consider the protected person's credit worthiness, credit 
1.16 	standing, credit capacity, character, general reputation, personal characteristics, or mode of 
1.17 	living for any purpose listed in United States Code, title 15, section 1681(b).
1.18 	(d) "Representative" means a person who provides to a consumer reporting agency 
1.19 	sufficient proof of authority to act on behalf of a protected person.
1.20 	(e) "Security freeze for a protected person" means:
2.1 	(1) if a consumer reporting agency does not have a file pertaining to a protected person, 
2.2 	a restriction that:
2.3 	(i) is placed on the protected person's record in accordance with this section; and
2.4 	(ii) prohibits the consumer reporting agency from releasing the protected person's record 
2.5 	except as provided in this section; or
2.6 	(2) if a consumer reporting agency has a file pertaining to the protected person, a 
2.7 	restriction that:
2.8 	(i) is placed on the protected person's consumer report in accordance with this section; 
2.9 	and
2.10 	(ii) prohibits the consumer reporting agency from releasing the protected person's 
2.11 	consumer report or any information derived from the protected person's consumer report 
2.12 	except as provided in this section.
2.13 	(f) "Sufficient proof of authority" means documentation that shows a representative has 
2.14 	authority to act on behalf of a protected person. Sufficient proof of authority includes:
2.15 	(1) an order issued by a court of law;
2.16 	(2) a lawfully executed and valid power of attorney; or
2.17 	(3) a written, notarized statement signed by a representative that expressly describes the 
2.18 	authority of the representative to act on behalf of a protected person.
2.19 	(g) "Sufficient proof of identification" means information or documentation that identifies 
2.20 	a protected person or a representative of a protected person. Sufficient proof of identification 
2.21 	includes:
2.22 	(1) a Social Security number or a copy of a Social Security card issued by the Social 
2.23 	Security Administration;
2.24 	(2) a certified or official copy of a birth certificate issued by the entity authorized to 
2.25 	issue the birth certificate;
2.26 	(3) a copy of a driver's license, an identification card, or any other government-issued 
2.27 	identification; or
2.28 	(4) a copy of a bill, including a bill for telephone, sewer, septic tank, water, electric, oil, 
2.29 	or natural gas services, that shows a name and home address.
2.30 		Subd. 2.Security freeze for protected persons. (a) In general:
2.31 	(1) a consumer reporting agency shall place a security freeze for a protected person if:
3.1 	(i) the consumer reporting agency receives a request from the protected person's 
3.2 	representative for the placement of the security freeze under this section; and
3.3 	(ii) the protected person's representative:
3.4 	(A) submits the request to the consumer reporting agency at the address or other point 
3.5 	of contact and in the manner specified by the consumer reporting agency;
3.6 	(B) provides to the consumer reporting agency sufficient proof of identification of the 
3.7 	protected person and the representative;
3.8 	(C) provides to the consumer reporting agency sufficient proof of authority to act on 
3.9 	behalf of the protected person; and
3.10 	(D) pays to the consumer reporting agency a fee as provided in subdivision 8; and
3.11 	(2) if a consumer reporting agency does not have a file pertaining to a protected person 
3.12 	when the consumer reporting agency receives a request under clause (1), the consumer 
3.13 	reporting agency shall create a record for the protected person.
3.14 		Subd. 3.Timing. Within 30 days after receiving a request, a consumer reporting agency 
3.15 	shall place a security freeze for the protected person.
3.16 		Subd. 4.Release of consumer report prohibited. Unless a security freeze for a protected 
3.17 	person is removed in accordance with subdivision 6 or 9, a consumer reporting agency may 
3.18 	not release the protected person's consumer report, any information derived from the protected 
3.19 	person's consumer report, or any record created for the protected person.
3.20 		Subd. 5.Period of security freeze for a protected person. A security freeze for a 
3.21 	protected person placed under subdivision 2 remains in effect until:
3.22 	(1) the protected person or the protected person's representative requests the consumer 
3.23 	reporting agency to remove the security freeze for a protected person in accordance with 
3.24 	subdivision 6; or
3.25 	(2) the security freeze for a protected person is removed in accordance with subdivision 
3.26 	9.
3.27 		Subd. 6.Removal of security freeze for a protected person. If a protected person or 
3.28 	a protected person's representative wishes to remove a security freeze for a protected person, 
3.29 	the protected person or the protected person's representative shall:
3.30 	(1) submit a request for the removal of the security freeze to the consumer reporting 
3.31 	agency at the address or other point of contact and in the manner specified by the consumer 
3.32 	reporting agency;
4.1 	(2) provide to the consumer reporting agency:
4.2 	(i) in the case of a request by the protected person:
4.3 	(A) proof that the sufficient proof of authority for the protected person's representative 
4.4 	to act on behalf of the protected person is no longer valid; and
4.5 	(B) sufficient proof of identification of the protected person; or
4.6 	(ii) in the case of a request by the representative of a protected person:
4.7 	(A) sufficient proof of identification of the protected person and the representative;
4.8 	(B) sufficient proof of authority to act on behalf of the protected person; and
4.9 	(C) pay to the consumer reporting agency a fee as provided in subdivision 8.
4.10 		Subd. 7.Removal of security freeze; timing. Within 30 days after receiving a request 
4.11 	that meets the requirements of subdivision 6, the consumer reporting agency shall remove 
4.12 	the security freeze for the protected person.
4.13 		Subd. 8.Fees. (a) A consumer reporting agency may charge a reasonable fee, not 
4.14 	exceeding $10, for each placement or removal of a security freeze for a protected person.
4.15 	(b) Notwithstanding paragraph (a), a consumer reporting agency may not charge a fee 
4.16 	under this section if:
4.17 	(1) the protected person's representative:
4.18 	(i) has obtained a report from a law enforcement agency alleging identity fraud against 
4.19 	the protected person; and
4.20 	(ii) provides a copy of the report to the consumer reporting agency; or
4.21 	(2) a request for the placement or removal of a security freeze is for a protected person 
4.22 	who is under the age of 16 at the time of the request; and
4.23 	(3) the consumer reporting agency has a consumer report pertaining to the protected 
4.24 	person.
4.25 		Subd. 9.Effect of material misrepresentation of fact. A consumer reporting agency 
4.26 	may remove a security freeze for a protected person or delete a record of a protected person 
4.27 	if the security freeze was placed or the record was created based on a material 
4.28 	misrepresentation of fact by the protected person or the protected person's representative. 
4.29 	A consumer reporting agency shall not charge a fee for removal of a security freeze under 
4.30 	this subdivision.
5.1 		Subd. 10.Remedy for violation of section. A consumer reporting agency's sole liability 
5.2 	is for actual damages as a result of a violation of this section.
5.3 		Subd. 11.Exceptions. This section does not apply to:
5.4 	(1) a person or entity described in section 13C.016, subdivision 6, clause (3), (5), (6), 
5.5 	or (7);
5.6 	(2) a person or entity described in sections 13C.018 to 13C.019; or
5.7 	(3) a person or entity that maintains a database used solely for the following:
5.8 	(i) criminal record information;
5.9 	(ii) personal loss history information;
5.10 	(iii) fraud prevention or detection;
5.11 	(iv) employment screening; or
5.12 	(v) tenant screening.

5.13 	EFFECTIVE DATE. This section is effective January 1, 2019.