IIB 
115TH CONGRESS 
2D SESSION 
H. R. 5192 
IN THE SENATE OF THE UNITED STATES 
APRIL 18, 2018 
Received; read twice and referred to the Committee on Finance 
AN ACT 
To authorize the Commissioner of Social Security to provide 
confirmation of fraud protection data to certain per-
mitted entities, and for other purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
VerDate Sep 11 2014 
22:49 Apr 18, 2018
Jkt 079200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H5192.RFS
H5192
daltland on DSKBBV9HB2PROD with BILLS
HR 5192 RFS
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘Protecting Children 
from Identity Theft Act’’. 
SEC. 2. REDUCING IDENTITY FRAUD. 
(a) PURPOSE.—The purpose of this section is to re-
duce the prevalence of synthetic identity fraud, which 
disproportionally affects vulnerable populations, such as 
minors and recent immigrants, by facilitating the valida-
tion by permitted entities of fraud protection data, pursu-
ant to electronically received consumer consent, through 
use of a database maintained by the Commissioner. 
(b) DEFINITIONS.—In this section: 
(1) 
COMMISSIONER.—The 
term 
‘‘Commis-
sioner’’ means the Commissioner of the Social Secu-
rity Administration. 
(2) FINANCIAL
INSTITUTION.—The term ‘‘fi-
nancial institution’’ has the meaning given the term 
in section 509 of the Gramm-Leach-Bliley Act (15 
U.S.C. 6809). 
(3) FRAUD
PROTECTION
DATA.—The term 
‘‘fraud protection data’’ means a combination of the 
following information with respect to an individual: 
(A) The name of the individual (including 
the first name and any family forename or sur-
name of the individual). 
VerDate Sep 11 2014 
22:49 Apr 18, 2018
Jkt 079200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H5192.RFS
H5192
daltland on DSKBBV9HB2PROD with BILLS
HR 5192 RFS
(B) The Social Security account number of 
the individual. 
(C) The date of birth (including the 
month, day, and year) of the individual. 
(4) PERMITTED ENTITY.—The term ‘‘permitted 
entity’’ means a financial institution or a service 
provider, subsidiary, affiliate, agent, contractor, or 
assignee of a financial institution. 
(c) EFFICIENCY.— 
(1) RELIANCE
ON
EXISTING
METHODS.—The 
Commissioner shall evaluate the feasibility of mak-
ing modifications to any database that is in exist-
ence as of the date of enactment of this Act or a 
similar resource such that the database or re-
source— 
(A) is reasonably designed to effectuate the 
purpose of this section; and 
(B) meets the requirements of subsection 
(d). 
(2) EXECUTION.—The Commissioner shall es-
tablish a system to carry out subsection (a), in ac-
cordance with section 1106 of the Social Security 
Act. In doing so, the Commissioner shall make the 
modifications necessary to any database that is in 
existence as of the date of enactment of this Act or 
VerDate Sep 11 2014 
22:49 Apr 18, 2018
Jkt 079200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H5192.RFS
H5192
daltland on DSKBBV9HB2PROD with BILLS
HR 5192 RFS
similar resource, or develop a database or similar re-
source. 
(d) PROTECTION OF VULNERABLE CONSUMERS.— 
The database or similar resource described in subsection 
(c) shall— 
(1) compare fraud protection data provided in 
an inquiry by a permitted entity against such infor-
mation maintained by the Commissioner in order to 
confirm (or not confirm) the validity of the informa-
tion provided, and in such a manner as to deter 
fraudulent use of the database or similar resource; 
(2) be scalable and accommodate reasonably an-
ticipated volumes of verification requests from per-
mitted entities with commercially reasonable uptime 
and availability; and 
(3) allow permitted entities to submit— 
(A) one or more individual requests elec-
tronically for real-time machine-to-machine (or 
similar functionality) accurate responses; and 
(B) multiple requests electronically, such 
as those provided in a batch format, for accu-
rate electronic responses within a reasonable pe-
riod of time from submission, not to exceed 24 
hours. 
VerDate Sep 11 2014 
22:49 Apr 18, 2018
Jkt 079200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6201
E:\BILLS\H5192.RFS
H5192
daltland on DSKBBV9HB2PROD with BILLS
HR 5192 RFS
(e) CERTIFICATION REQUIRED.—Before providing 
confirmation of fraud protection data to a permitted enti-
ty, the Commissioner shall ensure that the Commissioner 
has a certification from the permitted entity that is dated 
not more than 2 years before the date on which that con-
firmation is provided that includes the following declara-
tions: 
(1) The entity is a permitted entity. 
(2) The entity is in compliance with this sec-
tion. 
(3) The entity is, and will remain, in compli-
ance with its privacy and data security requirements, 
as described in title V of the Gramm-Leach-Bliley 
Act (15 U.S.C. 6801 et seq.) and as required by the 
Commissioner, with respect to information the entity 
receives from the Commissioner pursuant to this sec-
tion. 
(4) The entity will retain sufficient records to 
demonstrate its compliance with its certification and 
this section for a period of not less than 2 years. 
(f) CONSUMER CONSENT.— 
(1) IN GENERAL.—Notwithstanding any other 
provision of law or regulation, a permitted entity 
may submit a request to the database or similar re-
source described in subsection (c) only— 
VerDate Sep 11 2014 
22:49 Apr 18, 2018
Jkt 079200
PO 00000
Frm 00005
Fmt 6652
Sfmt 6201
E:\BILLS\H5192.RFS
H5192
daltland on DSKBBV9HB2PROD with BILLS