73 Pa. Stat. § 2305d

Current through Pa Acts 2024-53, 2024-56 through 2024-111
Section 2305d - Credit reporting and monitoring.
(a)Assumption of costs.--An entity that provides notification under section 5 and meets the requirements of subsection (b) shall assume all costs and fees in providing the affected individuals:
(1) Access to one independent credit report from a consumer reporting agency if the individual is not eligible to obtain an independent credit report from a consumer reporting agency for free under 15 U.S.C. § 1681 (relating to congressional findings and statement of purpose).
(2) Access to credit monitoring services for a period of 12 months following notification. An entity may satisfy the requirements of this paragraph by providing notice to the individual of the availability of monitoring services for a period of 12 months at no cost to the individual.
(b) Data subject to credit reporting and monitoring.--Notwithstanding any other provision of law, an entity shall be subject to the requirements of this section if that entity makes a determination that a breach of the security of the system has occurred and reasonably believes that an individual's first name and last name or an individual's first initial and last name, in combination with any of the following information, has been accessed:
(1) Social Security number.
(2) Bank account number.
(3) Driver's license or State ID number.
(c) Notice.--The entity shall inform the affected individual of the availability of no-cost services under subsection (a) upon notification in compliance with this act.

73 P.S. § 2305d

Added by P.L. (number not assigned at time of publication) 2024 No. 33,§ 3, eff. 9/26/2024.