<section xmlns="http://xml.house.gov/schemas/uslm/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" style="-uslm-lc:I80" id="ida669c951-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b"><num value="405b">§ 405b.</num><heading> Reducing identity fraud</heading><subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669c952-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/a"><num value="a" class="bold">(a)</num><heading class="bold"> Purpose</heading><content><p style="-uslm-lc:I11" class="indent0">The purpose of this section is to reduce the prevalence of synthetic identity fraud, which disproportionally affects vulnerable populations, such as minors and recent immigrants, by facilitating the validation by permitted entities of fraud protection data, pursuant to electronically received consumer consent, through use of a database maintained by the Commissioner.</p>
</content>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669c953-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b"><num value="b" class="bold">(b)</num><heading class="bold"> Definitions</heading><chapeau style="-uslm-lc:I11" class="indent0">In this section:</chapeau><paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669c954-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/1"><num value="1" class="bold">(1)</num><heading class="bold"> Commissioner</heading><content><p style="-uslm-lc:I12" class="indent1">The term “Commissioner” means the Commissioner of the Social Security Administration.</p>
</content>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669c955-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/2"><num value="2" class="bold">(2)</num><heading class="bold"> Financial institution</heading><content><p style="-uslm-lc:I12" class="indent1">The term “financial institution” has the meaning given the term in section 509 of the Gramm-Leach-Bliley Act (<ref href="/us/usc/t15/s6809">15 U.S.C. 6809</ref>).</p>
</content>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669c956-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/3"><num value="3" class="bold">(3)</num><heading class="bold"> Fraud protection data</heading><chapeau style="-uslm-lc:I12" class="indent1">The term “fraud protection data” means a combination of the following information with respect to an individual:</chapeau><subparagraph style="-uslm-lc:I13" class="indent2" id="ida669c957-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/3/A"><num value="A">(A)</num><content> The name of the individual (including the first name and any family forename or surname of the individual).</content>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669c958-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/3/B"><num value="B">(B)</num><content> The social security number of the individual.</content>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669c959-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/3/C"><num value="C">(C)</num><content> The date of birth (including the month, day, and year) of the individual.</content>
</subparagraph>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669c95a-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/b/4"><num value="4" class="bold">(4)</num><heading class="bold"> Permitted entity</heading><content><p style="-uslm-lc:I12" class="indent1">The term “permitted entity” means a financial institution or a service provider, subsidiary, affiliate, agent, subcontractor, or assignee of a financial institution.</p>
</content>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669c95b-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/c"><num value="c" class="bold">(c)</num><heading class="bold"> Efficiency</heading><paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669c95c-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/c/1"><num value="1" class="bold">(1)</num><heading class="bold"> Reliance on existing methods</heading><chapeau style="-uslm-lc:I12" class="indent1">The Commissioner shall evaluate the feasibility of making modifications to any database that is in existence as of <date date="2018-05-24">May 24, 2018</date>, or a similar resource such that the database or resource—</chapeau><subparagraph style="-uslm-lc:I13" class="indent2" id="ida669c95d-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/c/1/A"><num value="A">(A)</num><content> is reasonably designed to effectuate the purpose of this section; and</content>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669c95e-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/c/1/B"><num value="B">(B)</num><content> meets the requirements of subsection (d).</content>
</subparagraph>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f06f-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/c/2"><num value="2" class="bold">(2)</num><heading class="bold"> Execution</heading><content><p style="-uslm-lc:I12" class="indent1">The Commissioner shall make the modifications necessary to any database that is in existence as of <date date="2018-05-24">May 24, 2018</date>, or similar resource, or develop a database or similar resource, to effectuate the requirements described in paragraph (1).</p>
</content>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669f070-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d"><num value="d" class="bold">(d)</num><heading class="bold"> Protection of vulnerable consumers</heading><chapeau style="-uslm-lc:I11" class="indent0">The database or similar resource described in subsection (c) shall—</chapeau><paragraph style="-uslm-lc:I12" class="indent1" id="ida669f071-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d/1"><num value="1">(1)</num><content> compare fraud protection data provided in an inquiry by a permitted entity against such information maintained by the Commissioner in order to confirm (or not confirm) the validity of the information provided;</content>
</paragraph>
<paragraph style="-uslm-lc:I12" class="indent1" id="ida669f072-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d/2"><num value="2">(2)</num><content> be scalable and accommodate reasonably anticipated volumes of verification requests from permitted entities with commercially reasonable uptime and availability; and</content>
</paragraph>
<paragraph style="-uslm-lc:I12" class="indent1" id="ida669f073-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d/3"><num value="3">(3)</num><chapeau> allow permitted entities to submit—</chapeau><subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f074-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d/3/A"><num value="A">(A)</num><content> 1 or more individual requests electronically for real-time machine-to-machine (or similar functionality) accurate responses; and</content>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f075-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/d/3/B"><num value="B">(B)</num><content> multiple requests electronically, such as those provided in a batch format, for accurate electronic responses within a reasonable period of time from submission, not to exceed 24 hours.</content>
</subparagraph>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669f076-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/e"><num value="e" class="bold">(e)</num><heading class="bold"> Certification required</heading><chapeau style="-uslm-lc:I11" class="indent0">Before providing confirmation of fraud protection data to a permitted entity, the Commissioner shall ensure that the Commissioner has a certification from the permitted entity that is dated not more than 2 years before the date on which that confirmation is provided that includes the following declarations:</chapeau><paragraph style="-uslm-lc:I12" class="indent1" id="ida669f077-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/e/1"><num value="1">(1)</num><content> The entity is a permitted entity.</content>
</paragraph>
<paragraph style="-uslm-lc:I12" class="indent1" id="ida669f078-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/e/2"><num value="2">(2)</num><content> The entity is in compliance with this section.</content>
</paragraph>
<paragraph style="-uslm-lc:I12" class="indent1" id="ida669f079-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/e/3"><num value="3">(3)</num><content> The entity is, and will remain, in compliance with its privacy and data security requirements, as described in title V of the Gramm-Leach-Bliley Act (<ref href="/us/usc/t15/s6801">15 U.S.C. 6801</ref> et seq.), with respect to information the entity receives from the Commissioner pursuant to this section.</content>
</paragraph>
<paragraph style="-uslm-lc:I12" class="indent1" id="ida669f07a-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/e/4"><num value="4">(4)</num><content> The entity will retain sufficient records to demonstrate its compliance with its certification and this section for a period of not less than 2 years.</content>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669f07b-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f"><num value="f" class="bold">(f)</num><heading class="bold"> Consumer consent</heading><paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f07c-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f/1"><num value="1" class="bold">(1)</num><heading class="bold"> In general</heading><chapeau style="-uslm-lc:I12" class="indent1">Notwithstanding any other provision of law or regulation, a permitted entity may submit a request to the database or similar resource described in subsection (c) only—</chapeau><subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f07d-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f/1/A"><num value="A">(A)</num><content> pursuant to the written, including electronic, consent received by a permitted entity from the individual who is the subject of the request; and</content>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f07e-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f/1/B"><num value="B">(B)</num><content> in connection with a credit transaction or any circumstance described in <ref href="/us/usc/t15/s1681b">section 1681b of title 15</ref>.</content>
</subparagraph>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f07f-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f/2"><num value="2" class="bold">(2)</num><heading class="bold"> Electronic consent requirements</heading><content><p style="-uslm-lc:I12" class="indent1">For a permitted entity to use the consent of an individual received electronically pursuant to paragraph (1)(A), the permitted entity must obtain the individual’s electronic signature, as defined in <ref href="/us/usc/t15/s7006">section 7006 of title 15</ref>.</p>
</content>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f080-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/f/3"><num value="3" class="bold">(3)</num><heading class="bold"> Effectuating electronic consent</heading><content><p style="-uslm-lc:I12" class="indent1">No provision of law or requirement, including <ref href="/us/usc/t5/s552a">section 552a of title 5</ref>, shall prevent the use of electronic consent for purposes of this subsection or for use in any other consent based verification under the discretion of the Commissioner.</p>
</content>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida669f081-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g"><num value="g" class="bold">(g)</num><heading class="bold"> Compliance and enforcement</heading><paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f082-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/1"><num value="1" class="bold">(1)</num><heading class="bold"> Audits and monitoring</heading><chapeau style="-uslm-lc:I12" class="indent1">The Commissioner may—</chapeau><subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f083-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/1/A"><num value="A">(A)</num><chapeau> conduct audits and monitoring to—</chapeau><clause style="-uslm-lc:I14" class="indent3" id="ida669f084-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/1/A/i"><num value="i">(i)</num><content> ensure proper use by permitted entities of the database or similar resource described in subsection (c); and</content>
</clause>
<clause style="-uslm-lc:I14" class="indent3" id="ida669f085-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/1/A/ii"><num value="ii">(ii)</num><content> deter fraud and misuse by permitted entities with respect to the database or similar resource described in subsection (c); and</content>
</clause>
</subparagraph>
<subparagraph style="-uslm-lc:I13" class="indent2" id="ida669f086-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/1/B"><num value="B">(B)</num><content> terminate services for any permitted entity that prevents or refuses to allow the Commissioner to carry out the activities described in subparagraph (A).</content>
</subparagraph>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida669f087-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/2"><num value="2" class="bold">(2)</num><heading class="bold"> Enforcement</heading><subparagraph style="-uslm-lc:I18" class="indent4 firstIndent-2" id="ida669f088-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/2/A"><num value="A" class="bold">(A)</num><heading class="bold"> In general</heading><content><p style="-uslm-lc:I13" class="indent2">Notwithstanding any other provision of law, including the matter preceding paragraph (1) of section 505(a) of the Gramm-Leach-Bliley Act (<ref href="/us/usc/t15/s6805/a">15 U.S.C. 6805(a)</ref>), any violation of this section and any certification made under this section shall be enforced in accordance with paragraphs (1) through (7) of such section 505(a) by the agencies described in those paragraphs.</p>
</content>
</subparagraph>
<subparagraph style="-uslm-lc:I18" class="indent4 firstIndent-2" id="ida669f089-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/g/2/B"><num value="B" class="bold">(B)</num><heading class="bold"> Relevant information</heading><content><p style="-uslm-lc:I13" class="indent2">Upon discovery by the Commissioner, pursuant to an audit described in paragraph (1), of any violation of this section or any certification made under this section, the Commissioner shall forward any relevant information pertaining to that violation to the appropriate agency described in subparagraph (A) for evaluation by the agency for purposes of enforcing this section.</p>
</content>
</subparagraph>
</paragraph>
</subsection>
<subsection style="-uslm-lc:I19" class="indent2 firstIndent-2" id="ida66a179a-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h"><num value="h" class="bold">(h)</num><heading class="bold"> Recovery of costs</heading><paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida66a179b-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/1"><num value="1" class="bold">(1)</num><heading class="bold"> In general</heading><subparagraph style="-uslm-lc:I18" class="indent4 firstIndent-2" id="ida66a179c-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/1/A"><num value="A" class="bold">(A)</num><heading class="bold"> In general</heading><content><p style="-uslm-lc:I13" class="indent2">Amounts obligated to carry out this section shall be fully recovered from the users of the database or verification system by way of advances, reimbursements, user fees, or other recoveries as determined by the Commissioner. The funds recovered under this paragraph shall be deposited as an offsetting collection to the account providing appropriations for the Social Security Administration, to be used for the administration of this section without fiscal year limitation.</p>
</content>
</subparagraph>
<subparagraph style="-uslm-lc:I18" class="indent4 firstIndent-2" id="ida66a179d-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/1/B"><num value="B" class="bold">(B)</num><heading class="bold"> Prices fixed by Commissioner</heading><content><p style="-uslm-lc:I13" class="indent2">The Commissioner shall establish the amount to be paid by the users under this paragraph, including the costs of any services or work performed, such as any appropriate upgrades, maintenance, and associated direct and indirect administrative costs, in support of carrying out the purposes described in this section, by reimbursement or in advance as determined by the Commissioner. The amount of such prices shall be periodically adjusted by the Commissioner to ensure that amounts collected are sufficient to fully offset the cost of the administration of this section.</p>
</content>
</subparagraph>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida66a179e-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/2"><num value="2" class="bold">(2)</num><heading class="bold"> Initial development</heading><content><p style="-uslm-lc:I12" class="indent1">The Commissioner shall not begin development of a verification system to carry out this section until the Commissioner determines that amounts equal to at least 50 percent of program start-up costs have been collected under paragraph (1).</p>
</content>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida66a179f-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/3"><num value="3" class="bold">(3)</num><heading class="bold"> Existing resources</heading><content><p style="-uslm-lc:I12" class="indent1">The Commissioner may use funds designated for information technology modernization to carry out this section.</p>
</content>
</paragraph>
<paragraph style="-uslm-lc:I79" class="indent3 firstIndent-2" id="ida66a17a0-09a0-11eb-a85b-f5cef3d06f4d" identifier="/us/usc/t42/s405b/h/4"><num value="4" class="bold">(4)</num><heading class="bold"> Annual report</heading><content><p style="-uslm-lc:I12" class="indent1">The Commissioner shall annually submit to the Committee on Ways and Means of the House of Representatives and the Committee on Finance of the Senate a report on the amount of indirect costs to the Social Security Administration arising as a result of the implementation of this section.</p>
</content>
</paragraph>
</subsection>
<sourceCredit id="ida66a17a1-09a0-11eb-a85b-f5cef3d06f4d">(<ref href="/us/pl/115/174/tII/s215">Pub. L. 115–174, title II, § 215</ref>, <date date="2018-05-24">May 24, 2018</date>, <ref href="/us/stat/132/1323">132 Stat. 1323</ref>.)</sourceCredit>
<notes type="uscNote" id="ida66a17a2-09a0-11eb-a85b-f5cef3d06f4d">
<note style="-uslm-lc:I75" topic="referencesInText" id="ida66a17a3-09a0-11eb-a85b-f5cef3d06f4d">
<heading class="centered smallCaps">References in Text</heading><p style="-uslm-lc:I21" class="indent0">The Gramm-Leach-Bliley Act, referred to in subsec. (e)(3), is <ref href="/us/pl/106/102">Pub. L. 106–102</ref>, <date date="1999-11-12">Nov. 12, 1999</date>, <ref href="/us/stat/113/1338">113 Stat. 1338</ref>. Title V of the Act is classified principally to chapter 94 (§ 6801 et seq.) of Title 15, Commerce and Trade. For complete classification of this Act to the Code, see Short Title of 1999 Amendment note set out under <ref href="/us/usc/t12/s1811">section 1811 of Title 12</ref>, Banks and Banking, and Tables.</p>
</note>
<note style="-uslm-lc:I76" topic="codification" id="ida66a17a4-09a0-11eb-a85b-f5cef3d06f4d"><heading class="centered smallCaps">Codification</heading>
<p style="-uslm-lc:I21" class="indent0">Section was enacted as part of the Economic Growth, Regulatory Relief, and Consumer Protection Act, and not as part of the Social Security Act which comprises this chapter.</p>
</note>
</notes>
</section>