Existing law prohibits a state agency from sending any outgoing United States mail to an individual that contains personal information about that individual, including, but not limited to, the individual's social security number, telephone number, driver's license number, or credit card account number, unless that personal information is contained within sealed correspondence and cannot be viewed from the outside of that sealed correspondence.
This bill would prohibit a state agency from sending any outgoing mail that contains an individual's full social security number unless, under the particular circumstances, federal law requires inclusion of the full social security number. The bill would require each state agency, on or before September 1, 2021, to report to the Legislature when and why it mails documents that contain individuals' full social security numbers. The bill would require a state agency that, in its own estimation, is unable to comply with the prohibition to submit an annual corrective action plan to the Legislature until it is in compliance. The bill would require a state agency that is not in compliance with the prohibition to offer to provide appropriate identity theft prevention and mitigation services to any individual, at no cost to the individual, to whom it sent outgoing United States mail that contained the individual's full social security number, as specified.

Statutes affected:
AB499: 11019.7 GOV
02/13/19 - Introduced: 11019.7 GOV
04/11/19 - Amended Assembly: 11019.7 GOV
01/15/20 - Amended Assembly: 11019.7 GOV