| 1 | The Committee on Education K-20 recommends the following: |
| 2 |
|
| 3 | Committee Substitute |
| 4 | Remove the entire bill and insert: |
| 5 | A bill to be entitled |
| 6 | An act relating to the use of social security numbers in |
| 7 | public postsecondary education; creating s. 1004.09, F.S.; |
| 8 | prohibiting certain uses of student social security |
| 9 | numbers by state universities, community colleges, and |
| 10 | public postsecondary technical centers; requiring each |
| 11 | state university, community college, and public |
| 12 | postsecondary technical center to review policies and |
| 13 | procedures and submit a plan; requiring each state |
| 14 | university, community college, and public postsecondary |
| 15 | technical center to annually document compliance in a |
| 16 | report; providing for injunctive relief; providing an |
| 17 | effective date. |
| 18 |
|
| 19 | Be It Enacted by the Legislature of the State of Florida: |
| 20 |
|
| 21 | Section 1. Section 1004.09, Florida Statutes, is created |
| 22 | to read: |
| 23 | 1004.09 Improper use of social security numbers.-- |
| 24 | (1) No state university, community college, or public |
| 25 | postsecondary technical center shall: |
| 26 | (a) Require a student to transmit his or her social |
| 27 | security number over the Internet unless the connection is |
| 28 | secure and the social security number is encrypted. |
| 29 | (b) Require a student to use his or her social security |
| 30 | number to access an Internet website unless a password or unique |
| 31 | personal identification number or other authentication device is |
| 32 | also required to access the Internet website. |
| 33 | (2) Each state university, community college, and public |
| 34 | postsecondary technical center shall review its policies and |
| 35 | procedures relating to social security numbers and other student |
| 36 | identifying information and submit a plan that minimizes the |
| 37 | opportunity for student identify theft. The plan shall describe |
| 38 | how subsection (1) is to be implemented. The plan shall also |
| 39 | include provisions for educating staff regarding the proper and |
| 40 | improper uses of social security numbers and other student |
| 41 | identifying information. Each state university shall submit the |
| 42 | plan to the Governor, the Board of Governors, the President of |
| 43 | the Senate, and the Speaker of the House of Representatives by |
| 44 | February 1, 2005, and shall implement the plan no later than |
| 45 | July 1, 2005. Each community college and public postsecondary |
| 46 | technical center shall submit the plan to the Governor, the |
| 47 | State Board of Education, the President of the Senate, and the |
| 48 | Speaker of the House of Representatives by February 1, 2005, and |
| 49 | shall implement the plan no later than July 1, 2005. |
| 50 | (3) Each state university shall annually submit a report |
| 51 | documenting compliance with the provisions of ss. 119.0721 and |
| 52 | 1002.22 to the Board of Governors, and each community college |
| 53 | and public postsecondary technical center shall annually submit |
| 54 | a report documenting compliance with the provisions of ss. |
| 55 | 119.0721 and 1002.22 to the State Board of Education. |
| 56 | (4) Beginning December 1, 2005, any affected student may |
| 57 | petition the circuit court for an order directing compliance |
| 58 | with this section. |
| 59 | Section 2. This act shall take effect July 1, 2004. |