BILL ANALYSIS Ó SENATE COMMITTEE ON APPROPRIATIONS Senator Ricardo Lara, Chair 2015 - 2016 Regular Session AB 2636 (Linder) - Certified copies of marriage, birth, and death certificates: electronic application ----------------------------------------------------------------- | | | | | | ----------------------------------------------------------------- |--------------------------------+--------------------------------| | | | |Version: August 2, 2016 |Policy Vote: JUD. 7 - 0 | | | | |--------------------------------+--------------------------------| | | | |Urgency: No |Mandate: No | | | | |--------------------------------+--------------------------------| | | | |Hearing Date: August 8, 2016 |Consultant: Jolie Onodera | | | | ----------------------------------------------------------------- This bill meets the criteria for referral to the Suspense File. Bill Summary: AB 2636 would authorize, until January 1, 2021, if a request for a certified copy of a birth, death, or marriage record is made electronically, a state or local official to accept electronic acknowledgement verifying the identity of the applicant using a multilayered remote identity proofing process, as specified. This bill would require local agencies fulfilling electronic requests for certified copies of records to report specified information to the Attorney General and the Legislature by January 1, 2019. Fiscal Impact: Department of Public Health (DPH) : Potential staffing costs of about $275,000 (General Fund or Special Fund*) through 2020 to support two positions should the DPH opt to establish a secure online verification process. The estimated costs would support two positions to manage a vendor contract for payment processing and reconciling, as well as modifications to the current customer request tracking system. The cost to contract AB 2636 (Linder) Page 1 of ? with a private vendor to provide the electronic authentication system and the public interface for accepting electronic applications is undetermined at this time. County registrar/recorder : Potentially significant one-time and ongoing non-reimbursable local costs (Local Funds) for local agencies to establish and operate a secure online verification process. Vital records fee revenue : Potential shift of fee revenues collected by the state and local agencies should the DPH opt to establish an electronic verification system. Data through FY 2013-14 indicates that counties have historically processed more than 90 percent of certified copy requests for vital records each year. The adoption of an online verification system by the DPH could increase state fee revenues, and reduce the volume and demand for services in the counties, resulting in reduced local fee revenues and unknown impacts on local operations. Attorney General : Potential minor one-time costs (General Fund) to accept the information reported by local agencies on the electronic verification process. *Health Statistics Special Fund Background: Under existing law, a certified copy of a birth, death, marriage, or military service record may only be supplied by the State Registrar, local registrar, or county recorder to an authorized person who submits a written, faxed, or digitized image request accompanied by a notarized statement sworn under penalty of perjury that the applicant is an authorized person, as specified. (Health and Safety Code § 103526.) The Little Hoover Commission, in its 2015 report, A Customer-Centric Upgrade for California Government, identified opportunities for improved customer experience across state government, including its vital records program. The report noted that Proposed Law: This bill would authorize, until January 1, 2021, the State Registrar, local registrar, or county recorder to accept requests for certified copies of birth, death, or marriage AB 2636 (Linder) Page 2 of ? records made electronically through electronic acknowledgement verifying the identity of the applicant using a multilayered remote identity proofing process that complies with all of the following requirements: Meets or exceeds the National Institute of Standards and Technology (NIST) electronic authentication guideline for multilayered remote identity proofing. Verifies specified information provided by the applicant. Meets or exceeds the information security requirements of the Uniform Electronic Transactions Act, the Federal Information Security Management Act of 2002 (Public Law 107-347), and all other applicable state and federal laws and regulations to protect the personal information of the applicant and guard against identity theft. Retains for each electronic verification, as required by the NIST electronic authentication guideline, a record of the applicant whose identity has been verified and the steps taken to verify the identity. If an applicant's identity cannot be established electronically as specified above, this bill requires the applicant to include with his or her request a statement of identity that has been notarized. AB 2636 (Linder) Page 3 of ? This bill requires on or before January 1, 2019, a city or county that fulfills electronic requests for certified copies of birth, death, or marriage records without being provided a notarized statement that the requester is an authorized person to report the following information to the Attorney General, the Assembly and Senate Judiciary Committees, and the Assembly Committee on Privacy and Consumer Protection: All of the following non-personally identifiable information: o The total number of written, electronic, faxed, or in-person requests that include a notarized statement that the requester is an authorized person. o The total number of electronic requests utilizing the multilayered remote identity proofing process. o The total number of electronic requests denied while using the multilayered remote identity proofing process due to insufficient information or failed authentication. o The total number of repeat electronic requests using the multilayered remote identity proofing process for the same record and the same individual. A description of the mechanism and process, if any, by which consumers who have been victims of identity theft may temporarily limit electronic access to certified vital records, including all of the following: o The number of consumers who have utilized this mechanism and process. o The total number of electronic requests that utilize the multilayered remote identity proofing process, without a notarized statement, requesting records of consumers who have used the temporary limited access mechanism and process. o The total number of electronic requests for records of consumers who have utilized this temporary limited access mechanism and process that were denied while using the multilayered remote identity proofing process. A description of the mechanism and process by which a consumer may report identity theft resulting from an alleged fraudulent records request, as well as the number AB 2636 (Linder) Page 4 of ? of consumers who have used this mechanism and process. Related Legislation: AB 2275 (Ridley-Thomas) 2014 was similar in purpose to this bill but did not include the level of data security authentication required in this measure. AB 2275 failed passage in the Senate Committee on Judiciary. Recommended Amendments: To the extent the DPH opts to fulfill electronic requests for certified copies of birth, death, or marriage records without being provided a notarized statement that the requester is an authorized person, the author may wish to consider an amendment to additionally require the DPH to report to the AG with information on the newly adopted system. -- END --