The bill amends the Identity Theft Protection Act of 2004 by updating definitions and clarifying terms used within the legislation. Notably, it redefines "Agency" to include institutions of higher education while explicitly excluding various types of courts. The definitions of "Breach of the security of a database" and "security breach" are refined to specify that unauthorized access by employees is not considered a breach if certain conditions are met, such as acting in good faith and not misusing personal information. Additionally, the term "Child or spousal support" is updated to reflect that it is provided in accordance with state or federal law under a court order.

Further changes include the redefinition of "Financial institution" to encompass a broader range of entities, including various types of lenders and sellers under specific acts. The bill also updates the terminology related to personal identifying information, replacing "social security" with "Social Security" in multiple instances, and clarifies the definition of "redact" to specify how personal information should be altered to protect privacy. The enactment of this bill is contingent upon the passage of Senate Bill No. 739 of the 103rd Legislature.

Statutes affected:
Senate Introduced Bill: 445.63