---

Session of 2000
          HOUSE BILL No. 2896           By Select Committee on Information Management           2-8          

---

  9             AN  ACT enacting the internet privacy protection act; prohibiting certain
10             internet service providers from disclosing personally identifying infor-
11             mation about certain subscribers.
12      
13       Be it enacted by the Legislature of the State of Kansas:
14             Section  1. (a) This act shall be known and may be cited as the inter-
15       net privacy protection act.
16             (b) For purposes of this section:
17             (1) "Internet service provider" means any business or organization
18       qualified to do business in Kansas that provides direct internet access
19       services to residents of Kansas.
20             (2) "Personally identifying information" includes a subscriber's elec-
21       tronic mail address, social security number, date of birth, income, occu-
22       pation, credit card or debit card information, current and prior addresses,
23       telephone number, or mother's maiden name. "Personally identifying in-
24       formation" also includes any information gathered by means of tracking
25       an individual subscriber's internet usage, IP connection history, prefer-
26       ences, equipment, software or user profile. "Personally identifying infor-
27       mation" does not include aggregate data that cannot be used to identify
28       an individual subscriber, or information disclosed by the internet service
29       provider to a third party in connection with the processing, billing, col-
30       lection or maintenance of an individual subscriber's account.
31             (3) "Affirmative consent" means a written statement by the sub-
32       scriber authorizing the internet service provider to gather personally iden-
33       tifying information about the subscriber and distribute it to third parties
34       for marketing or other purposes. For purposes of this section, a sub-
35       scriber's consent must be in writing and secured on a form that is separate
36       and distinct from the internet service provider's generally applicable serv-
37       ice agreement or contract.
38             (4) "Direct internet access services" includes the provision of dial-up
39       modem connections via telephone, ISDN, DSL or coaxial cable, or any
40       other means of providing direct TCP/IP services which include, at a min-
41       imum, access to a domain name server and an electronic mail server.
42             (c) No internet service provider that provides direct internet access
43       services to residents of Kansas shall disclose any personally identifying

2
  1       information about a Kansas subscriber to a third party for marketing or
  2       other purposes without the knowledge and affirmative consent of that
  3       subscriber.
  4             (d) The provisions of this section shall be deemed to be incorporated
  5       into any service agreement or contract between an internet service pro-
  6       vider and a Kansas subscriber that is executed or renewed on or after the
  7       effective date of this section. 
  8        Sec.  2. This act shall take effect and be in force from and after its
  9       publication in the statute book.