1.1 	A bill for an act
1.2 	relating to consumer protections; reducing identity theft and assisting its 
1.3 	victims; providing penalties;amending Minnesota Statutes 2004, sections 
1.4 	13.05, subdivision 5; 138.17, subdivision 7; 609.527, by adding a subdivision; 
1.5 	Minnesota Statutes 2005 Supplement, section 325E.61, subdivisions 1, 4; 
1.6 	proposing coding for new law in Minnesota Statutes, chapters 13; 13C; 325E; 
1.7 	325G.
1.8 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.9 	Section 1. Minnesota Statutes 2004, section 13.05, subdivision 5, is amended to read:
1.10 		Subd. 5.Data protection. (a) The responsible authority shall (1) establish 
1.11 	procedures to assure that all data on individuals is accurate, complete, and current for the 
1.12 	purposes for which it was collected; and (2) establish appropriate security safeguards for 
1.13 	all records containing data on individuals.
1.14 	(b) When not public data is being disposed of, the data must be destroyed in a way 
1.15 	that prevents its contents from being determined.

1.16 	Sec. 2. [13.651] ATTORNEY GENERAL DATA CODED ELSEWHERE.
1.17 		Subdivision 1.Scope. The sections referred to in subdivision 2 are codified outside 
1.18 	this chapter. Those sections classify attorney general data as other than public, place 
1.19 	restrictions on access to government data, or involve data sharing.
1.20 		Subd. 2.Identify theft passport. Data in an application for an identify theft 
1.21 	passport is classified in section 609.527, subdivision 8.

1.22 	Sec. 3. [13C.015] SECURITY FREEZES ON CREDIT REPORTS REGARDING 
1.23 	MINORS.
2.1 		Subdivision 1.Definitions. (a) For purposes of this section, the terms defined in this 
2.2 	subdivision have the meanings given them. 
2.3 	(b) "Guardian" means a guardian as defined under section 524.5-102, subdivision 5. 
2.4 	(c) "Minor" means an individual under the age of 18 years. 
2.5 	(d) "Parent" means a person who has legal and physical custody of a child. 
2.6 	(e) "Security freeze" means a situation in which a consumer reporting agency will 
2.7 	not provide a consumer report about a specific consumer to anyone, without a request from 
2.8 	the parent or guardian specifying the entity to whom a consumer report may be provided.
2.9 		Subd. 2.Security freeze required at request of parent or guardian of minor.
 2.10 	(a) A consumer reporting agency shall impose a security freeze on the credit reports of 
2.11 	a minor at the written request of a parent or guardian of the minor. The written request 
2.12 	must include: 
2.13 	(1) the full name and address, date of birth, and Social Security number of the minor; 
2.14 	(2) the full name and address of the parent or guardian making the request; 
2.15 	(3) a statement that the requesting parent or guardian is a custodial parent or 
2.16 	guardian of the minor; and 
2.17 	(4) the signature of the requesting parent or guardian and the date of the signature. 
2.18 	(b) The requesting parent or guardian need not give a reason for the request. 
2.19 	(c) The security freeze must remain in place until the minor reaches the age of 18 
2.20 	years, unless terminated sooner at the request of the parent or guardian who requested 
2.21 	the freeze. 
2.22 	(d) The security freeze must terminate automatically when the minor reaches of 
2.23 	the age of 18 years.
2.24 		Subd. 3.Deadlines for imposition of freeze and notice. (a) The consumer 
2.25 	reporting agency must impose the freeze no later than 15 days after its receipt of a request 
2.26 	that complies with this section. 
2.27 	(b) The consumer reporting agency must notify the requesting person of its 
2.28 	imposition of the security freeze or of the request??a??a??s insufficiency under this section no 
2.29 	later than 20 days after its receipt of the request.

2.30 	EFFECTIVE DATE. This section is effective August 1, 2006.

2.31 	Sec. 4. [13C.016] VICTIM OF IDENTITY THEFT; SECURITY FREEZE.
2.32 	(a) A victim of identity theft who has submitted a valid police report to a consumer 
2.33 	reporting agency may elect to place a security freeze on his or her report by making 
2.34 	a request in writing by certified mail to a consumer reporting agency. "Security freeze" 
2.35 	means a notice placed in a consumer's credit report, at the request of the consumer and 
3.1 	subject to certain exceptions, that prohibits the consumer reporting agency from releasing 
3.2 	the consumer's credit report or any information from it, in connection with the extension 
3.3 	of credit, without the express authorization of the consumer. If a security freeze is in 
3.4 	place, information from a consumer's credit report may not be released to a third party 
3.5 	without prior express authorization from the consumer. This paragraph does not prevent a 
3.6 	consumer reporting agency from advising a third party that a security freeze is in effect 
3.7 	with respect to the consumer's credit report.
3.8 	(b) For purposes of this section and sections 13C.017 to 13C.0191, a "victim of 
3.9 	identity theft" means:
3.10 	(1) a victim of identity theft as defined in section 609.527; or 
3.11 	(2) a person who has been notified by an agency, person, or business that owns or 
3.12 	licenses computerized data of a breach in a computerized data system which has resulted 
3.13 	in the acquisition of that person's unencrypted personal information by an unauthorized 
3.14 	person or entity.
3.15 	(c) A consumer reporting agency shall place a security freeze on a consumer's credit 
3.16 	report no later than five business days after receiving a written request from the consumer.
3.17 	(d) The consumer reporting agency shall send a written confirmation of the security 
3.18 	freeze to the consumer within ten business days and shall provide the consumer with a 
3.19 	unique personal identification number or password to be used by the consumer when 
3.20 	providing authorization for the release of the consumer's credit report for a specific party 
3.21 	or period of time.
3.22 	(e) If the consumer wishes to allow his or her credit report to be accessed for a 
3.23 	specific party or period of time while a freeze is in place, the consumer shall contact the 
3.24 	consumer reporting agency, request that the freeze be temporarily lifted, and provide 
3.25 	the following:
3.26 	(1) proper identification, which means that information generally deemed sufficient 
3.27 	to identify a person. Only if the consumer is unable to sufficiently identify the consumer 
3.28 	may a consumer reporting agency require additional information concerning the 
3.29 	consumer's employment and personal or family history in order to verify the consumer's 
3.30 	identity;
3.31 	(2) the unique personal identification number or password provided by the credit 
3.32 	reporting agency under paragraph (d); and
3.33 	(3) the proper information regarding the third party who is to receive the credit 
3.34 	report or the time period for which the report is available to users of the credit report.
4.1 	(f) A consumer reporting agency that receives a request from a consumer to 
4.2 	temporarily lift a freeze on a credit report under paragraph (e) shall comply with the 
4.3 	request no later than three business days after receiving the request.
4.4 	(g) A consumer reporting agency may develop procedures involving the use of 
4.5 	telephone, fax, the Internet, or other electronic media to receive and process a request 
4.6 	from a consumer to temporarily lift a freeze on a credit report under paragraph (e) in an 
4.7 	expedited manner.
4.8 	(h) A consumer reporting agency shall remove or temporarily lift a freeze placed 
4.9 	on a consumer's credit report only in the following cases:
4.10 	(1) upon consumer request under paragraph (e) or (k); or
4.11 	(2) when the consumer's credit report was frozen due to a material misrepresentation 
4.12 	of fact by the consumer. When a consumer reporting agency intends to remove a freeze on 
4.13 	a consumer's credit report under this paragraph, the consumer reporting agency shall notify 
4.14 	the consumer in writing prior to removing the freeze on the consumer's credit report.
4.15 	(i) When a third party requests access to a consumer credit report on which a security 
4.16 	freeze is in effect, and this request is in connection with an application for credit or any 
4.17 	other use and the consumer does not allow the consumer's credit report to be accessed for 
4.18 	that specific party or period of time, the third party may treat the application as incomplete.
4.19 	(j) When a consumer requests a security freeze, the consumer reporting agency 
4.20 	shall disclose the process of placing and temporarily lifting a freeze and the process for 
4.21 	allowing access to information from the consumer's credit report for a specific party or 
4.22 	period of time while the freeze is in place.
4.23 	(k) A security freeze remains in place until the consumer requests that the security 
4.24 	freeze be removed. A consumer reporting agency shall remove a security freeze within 
4.25 	three business days of receiving a request for removal from the consumer, who provides 
4.26 	both of the following:
4.27 	(1) proper identification, as defined in paragraph (e), clause (1); and
4.28 	(2) the unique personal identification number or password provided by the consumer 
4.29 	reporting agency under paragraph (d).
4.30 	(l) This section does not apply to the use of a consumer credit report by any of 
4.31 	the following:
4.32 	(1) a person or entity, or a subsidiary, affiliate, or agent of that person or entity, or 
4.33 	an assignee of a financial obligation owing by the consumer to that person or entity, or 
4.34 	a prospective assignee of a financial obligation owing by the consumer to that person 
4.35 	or entity in conjunction with the proposed purchase of the financial obligation, with 
4.36 	which the consumer has or had prior to assignment an account or contract, including a 
5.1 	demand deposit account, or to whom the consumer issued a negotiable instrument, for 
5.2 	the purposes of reviewing the account or collecting the financial obligation owing for the 
5.3 	account, contract, or negotiable instrument. For purposes of this paragraph, "reviewing 
5.4 	the account" includes activities related to account maintenance, monitoring, credit line 
5.5 	increases, and account upgrades and enhancements;
5.6 	(2) a subsidiary, affiliate, agent, assignee, or prospective assignee of a person to 
5.7 	whom access has been granted under paragraph (e) for purposes of facilitating the 
5.8 	extension of credit or other permissible use;
5.9 	(3) any federal, state, or local entity, including a law enforcement agency, court, 
5.10 	or their agents or assigns;
5.11 	(4) a private collection agency acting under a court order, warrant, or subpoena;
5.12 	(5) a child support agency acting under title IV-D of the federal Social Security Act;
5.13 	(6) the Department of Human Services acting to fulfill any of its statutory 
5.14 	responsibilities;
5.15 	(7) the Internal Revenue Service acting to investigate or collect delinquent taxes or 
5.16 	unpaid court orders or to fulfill any of its other statutory responsibilities;
5.17 	(8) the use of credit information for the purposes of prescreening as provided for 
5.18 	by the federal Fair Credit Reporting act;
5.19 	(9) any person or entity administering a credit file monitoring subscription service to 
5.20 	which the consumer has subscribed; and
5.21 	(10) any person or entity for the purpose of providing a consumer with a copy of his 
5.22 	or her credit report upon the consumer's request.

5.23 	Sec. 5. [13C.017] SECURITY FREEZE; CHANGES TO INFORMATION; 
5.24 	WRITTEN CONFIRMATION REQUIRED.
5.25 	If a security freeze is in place, a consumer reporting agency may not change any 
5.26 	of the following official information in a consumer credit report without sending a 
5.27 	written confirmation of the change to the consumer within 30 days of the change being 
5.28 	posted to the consumer's file: name, date of birth, Social Security number, and address. 
5.29 	Written confirmation is not required for technical modifications of a consumer's official 
5.30 	information, including name and street abbreviations, complete spellings, or transposition 
5.31 	of numbers or letters. In the case of an address change, the written confirmation shall be 
5.32 	sent to both the new address and to the former address.

5.33 	Sec. 6. [13C.018] SECURITY FREEZE; NOT APPLICABLE TO CERTAIN 
5.34 	CONSUMER REPORTING AGENCIES.
6.1 	A consumer reporting agency is not required to place a security freeze in a consumer 
6.2 	credit report under section 13C.016 if it acts only as a reseller of credit information by 
6.3 	assembling and merging information contained in the data base of another consumer 
6.4 	reporting agency or multiple consumer reporting agencies, and does not maintain a 
6.5 	permanent data base of credit information from which new consumer credit reports are 
6.6 	produced. However, a consumer reporting agency must honor any security freeze placed 
6.7 	on a consumer credit report by another consumer reporting agency.

6.8 	Sec. 7. [13C.019] SECURITY FREEZE; EXEMPT ENTITIES.
6.9 	The following entities are not required to place a security freeze in a consumer 
6.10 	credit report under section 13C.016:
6.11 	(1) a check services or fraud prevention services company that issues reports on 
6.12 	incidents of fraud or authorizations for the purpose of approving or processing negotiable 
6.13 	instruments, electronic funds transfers, or similar methods of payments; and
6.14 	(2) a deposit account information service company that issues reports regarding 
6.15 	account closures due to fraud, substantial overdrafts, ATM abuse, or similar negative 
6.16 	information regarding a consumer, to inquiring banks or other financial institutions for 
6.17 	use only in reviewing a consumer request for a deposit account at the inquiring bank or 
6.18 	financial institution.

6.19 	Sec. 8. [13C.0191] INFORMATION FURNISHED TO A GOVERNMENTAL 
6.20 	AGENCY.
6.21 	Notwithstanding section 13C.016, a consumer reporting agency may furnish to a 
6.22 	governmental agency a consumer's name, address, former address, places of employment, 
6.23 	or former places of employment.

6.24 	Sec. 9. Minnesota Statutes 2004, section 138.17, subdivision 7, is amended to read:
6.25 		Subd. 7.Records management program. A records management program for the 
6.26 	application of efficient and economical management methods to the creation, utilization, 
6.27 	maintenance, retention, preservation, and disposal of official records shall be administered 
6.28 	by the commissioner of administration with assistance from the director of the historical 
6.29 	society. The State Records Center which stores and services state records not in state 
6.30 	archives shall be administered by the commissioner of administration. The commissioner 
6.31 	of administration is empowered to (1) establish standards, procedures, and techniques for 
6.32 	effective management of government records, (2) make continuing surveys of paper work 
6.33 	operations, and (3) recommend improvements in current records management practices 
7.1 	including the use of space, equipment, and supplies employed in creating, maintaining, 
7.2 	preserving and disposing of government records. It shall be the duty of the head of each 
7.3 	state agency and the governing body of each county, municipality, and other subdivision 
7.4 	of government to cooperate with the commissioner in conducting surveys and to establish 
7.5 	and maintain an active, continuing program for the economical and efficient management 
7.6 	of the records of each agency, county, municipality, or other subdivision of government. 
7.7 	When requested by the commissioner, public officials shall assist in the preparation of 
7.8 	an inclusive inventory of records in their custody, to which shall be attached a schedule, 
7.9 	approved by the head of the governmental unit or agency having custody of the records 
7.10 	and the commissioner, establishing a time period for the retention or disposal of each 
7.11 	series of records. When the schedule is unanimously approved by the records disposition 
7.12 	panel, the head of the governmental unit or agency having custody of the records may 
7.13 	dispose of the type of records listed in the schedule at a time and in a manner prescribed in 
7.14 	the schedule for particular records which were created after the approval. A list of records 
7.15 	disposed of pursuant to this subdivision shall be maintained by the governmental unit or 
7.16 	agency. When records containing not public data as defined in section 13.02, subdivision 
7.17 	8a, are being disposed of under this subdivision, the records must be destroyed in a way 
7.18 	that prevents their contents from being determined.

7.19 	Sec. 10. Minnesota Statutes 2005 Supplement, section 325E.61, subdivision 1, is 
7.20 	amended to read:
7.21 		Subdivision 1.Disclosure of personal information; notice required. (a) Any 
7.22 	person or business that conducts business in this state, and that owns or licenses data that 
7.23 	includes personal information, shall disclose any breach of the security of the system 
7.24 	following discovery or notification of the breach in the security of the data to any resident 
7.25 	of this state whose unencrypted personal information was, or is reasonably believed to 
7.26 	have been, acquired by an unauthorized person. The disclosure must be made in the most 
7.27 	expedient time possible and without unreasonable delay, consistent with the legitimate 
7.28 	needs of law enforcement, as provided in paragraph (c), or with any measures necessary 
7.29 	to determine the scope of the breach, identify the individuals affected, and restore the 
7.30 	reasonable integrity of the data system.
7.31 	(b) Any person or business that maintains data that includes personal information 
7.32 	that the person or business does not own shall notify the owner or licensee of the 
7.33 	information of any breach of the security of the data immediately following discovery, 
7.34 	if the personal information was, or is reasonably believed to have been, acquired by 
7.35 	an unauthorized person.
8.1 	(c) The notification required by this section may be delayed to a date certain if a law 
8.2 	enforcement agency affirmatively determines that the notification will impede a criminal 
8.3 	investigation.
8.4 	(d) For purposes of this section, "breach of the security of the system" means 
8.5 	successful unauthorized acquisition of computerized data that compromises the security, 
8.6 	confidentiality, or integrity of personal information maintained by the person or business. 
8.7 	Good faith acquisition of personal information by an employee or agent of the person or 
8.8 	business for the purposes of the person or business is not a breach of the security system, 
8.9 	provided that the personal information is not used or subject to further unauthorized 
8.10 	disclosure.
8.11 	(e) For purposes of this section, "personal information" means an individual's first 
8.12 	name or first initial and last name in combination with any one or more of the following 
8.13 	data elements, when either the name or the data elements is not encrypted:
8.14 	(1) Social Security number;
8.15 	(2) driver's license number or Minnesota identification card number; or
8.16 	(3) account number or credit or debit card number, in combination with any required 
8.17 	security code, access code, or password that would permit access to an individual's 
8.18 	financial account.
8.19 	(f) For purposes of this section, "personal information" does not include publicly 
8.20 	available information that is lawfully made available to the general public from federal, 
8.21 	state, or local government records.
8.22 	(g) For purposes of this section, "notice" may be provided by one of the following 
8.23 	methods:
8.24 	(1) written notice to the most recent available address the person or business has 
8.25 	in its records;
8.26 	(2) electronic notice, if the notice provided is consistent with the provisions 
8.27 	regarding electronic records and signatures in United States Code, title 15, section 7001; or
8.28 	(3) substitute notice, if the person or business demonstrates that the cost of providing 
8.29 	notice would exceed $250,000, or that the affected class of subject persons to be notified 
8.30 	exceeds 500,000, or the person or business does not have sufficient contact information. 
8.31 	Substitute notice must consist of all of the following:
8.32 	(i) e-mail notice when the person or business has an e-mail address for the subject 
8.33 	persons;
8.34 	(ii) conspicuous posting of the notice on the Web site page of the person or business, 
8.35 	if the person or business maintains one; and
8.36 	(iii) notification to major statewide media.
9.1 	(h) Notwithstanding paragraph (g), a person or business that maintains its own 
9.2 	notification procedures as part of an information security policy for the treatment of 
9.3 	personal information and is otherwise consistent with the timing requirements of this 
9.4 	section, shall be deemed to be in compliance with the notification requirements of this 
9.5 	section if the person or business notifies subject persons in accordance with its policies in 
9.6 	the event of a breach of security of the system.

9.7 	Sec. 11. Minnesota Statutes 2005 Supplement, section 325E.61, subdivision 4, is 
9.8 	amended to read:
9.9 		Subd. 4.Exemption. This section does not apply to any "financial institution" 
9.10 	as defined by United States Code, title 15, section 6809(3), and to entities subject to 
9.11 	the federal privacy and security regulations adopted under the federal Health Insurance 
9.12 	Portability and Accountability Act of 1996, Public Law 104-191.

9.13 	Sec. 12. [325E.62] RESPONSIBLE DISPOSAL OF PERSONAL 
9.14 	INFORMATION.
9.15 	(a) Any individual or business entity, including any nonprofit entity, that conducts 
9.16 	business in this state must dispose of its paper or electronic records containing personal 
9.17 	information regarding customers, employees, and other persons only in a manner that 
9.18 	prevents their contents from being determined.
9.19 	(b) For purposes of this section, "personal information" has the meaning given in 
9.20 	section 325E.61, subdivision 1.
9.21 	(c) If an individual or business entity is licensed or regulated by a state agency, that 
9.22 	agency shall enforce this section under its enforcement powers that otherwise apply to 
9.23 	that individual or business entity. If an individual or other business entity is not licensed 
9.24 	or regulated by a state agency, then the attorney general shall enforce this section under 
9.25 	section 8.31.
9.26 	(d) This section does not apply to an individual or business entity that is regulated by 
9.27 	a state or federal agency with respect to disposal of personal information.

9.28 	Sec. 13. [325E.63] CREDIT FREEZE REGARDING MINORS.
9.29 		Subdivision 1.Definitions. (a) For purposes of this section, the terms defined in this 
9.30 	subdivision have the meanings given them.
9.31 	(b) "Credit" means the right granted to a borrower to defer payment of a debt, to 
9.32 	incur debt and defer its payment, or to purchase property or services and defer payment. 
9.33 	Credit does not include an overdraft from a person's deposit account, whether through 
10.1 	a check, ATM withdrawal, debit card, or otherwise, that is not pursuant to a written 
10.2 	agreement to pay overdrafts with the right to defer payment of them.
10.3 	(c) "Creditor" means a person or entity doing business in this state.
10.4 	(d) "Guardian" means a guardian as defined under section 524.5-102, subdivision 5. 
10.5 	(e) "Minor" means an individual under the age of 18 years. 
10.6 	(f) "Parent" means a person who has legal and physical custody of a child. 
10.7 		Subd. 2.Credit freeze. No creditor shall knowingly offer or provide credit to a 
10.8 	minor except at the written request of the parent or guardian of the minor, until the minor 
10.9 	reaches the age of 18 years.

10.10 	Sec. 14. [325G.052] CREDIT CARD OFFERS AND SOLICITATIONS; 
10.11 	ADDRESS VERIFICATIONS.
10.12 	(a) A credit card issuer that mails an offer or solicitation to receive a credit card and, 
10.13 	in response, receives a completed application for a credit card that lists an address that is 
10.14 	different from the address on the offer or solicitation shall verify the change of address 
10.15 	before issuing a credit card. 
10.16 	(b) Notwithstanding any other provision of law, a person to whom an offer or 
10.17 	solicitation to receive a credit card is made is not liable for the unauthorized use of a 
10.18 	credit card issued in response to that offer or solicitation if the credit card issuer does not 
10.19 	verify the change of address pursuant to paragraph (a) before the issuance of the credit 
10.20 	card, unless the credit card issuer proves that this person actually incurred the charge 
10.21 	on the credit card.  
10.22 	(c) When a credit card issuer receives a written or oral request for a change of the 
10.23 	cardholder's billing address and then receives a written or oral request for an additional 
10.24 	credit card within ten days after the requested address change, the credit card issuer shall 
10.25 	not mail the requested additional credit card to the new address or, alternatively, activate 
10.26 	the requested additional credit card, unless the credit card issuer has verified the change 
10.27 	of address.

10.28 	Sec. 15. Minnesota Statutes 2004, section 609.527, is amended by adding a subdivision 
10.29 	to read:
10.30 		Subd. 8.Identity theft passport. (a) For purposes of this subdivision: 
10.31 	(1) "identity theft" means a violation of subdivision 2; and 
10.32 	(2) "identity theft passport" means a card or certificate issued by the attorney general 
10.33 	that identifies a person who has filed with a local or state law enforcement agency in this 
10.34 	state a signed written report that the person is a victim of an alleged crime of identity theft. 
11.1 	(b) A person who is a victim of identity theft in this state, or who is a resident of 
11.2 	this state, and who has filed with a law enforcement agency in this state a signed written 
11.3 	report stating that the person is a victim of identity theft, may apply for an identity theft 
11.4 	passport through any law enforcement agency of this state. 
11.5 	(c) A law enforcement agency that receives an application for an identity theft 
11.6 	passport shall submit the application and a copy of the written report to the attorney 
11.7 	general for processing and issuance of an identity theft passport to the applicant. 
11.8 	(d) The attorney general, in cooperation with a law enforcement agency, may issue 
11.9 	an identity theft passport under this subdivision to a victim of identity theft. 
11.10 	(e) A person who has been issued an identity theft passport under this subdivision 
11.11 	may present it to: 
11.12 	(1) a law enforcement agency to aid in the investigation of identity theft or to help 
11.13 	prevent the arrest or prosecution of the person for an offense committed by another person 
11.14 	using the identity of the holder of the passport; or 
11.15 	(2) a creditor to aid in the investigation of any fraudulent account opened in the 
11.16 	person's name or of any fraudulent charge made against an account in the person's name. 
11.17 	(f) A law enforcement agency or creditor that is presented with an identity theft 
11.18 	passport has sole discretion to accept or reject the passport.  In making that determination, 
11.19 	the law enforcement agency or creditor may consider the surrounding circumstances and 
11.20 	available information regarding the alleged identity theft. 
11.21 	(g) An application for an identity theft passport, including any supporting 
11.22 	documentation, is private data on individuals as defined in section 13.02, subdivision 12, 
11.23 	except that it may be released to a law enforcement agency in this or another state.

11.24 	EFFECTIVE DATE. This section is effective August 1, 2006.

11.25 	Sec. 16. ADMISSIBILITY OF EVIDENCE OF IDENTITY THEFT; REQUEST 
11.26 	TO SUPREME COURT.
 11.27 	The Minnesota Supreme Court is requested to consider amending its rules of 
11.28 	evidence to permit admission of business records, at least in civil and criminal cases 
11.29 	alleging identity theft, based upon an authenticating affidavit of the custodian of the 
11.30 	business records, rather than requiring the in-person authentication testimony of the 
11.31 	custodian of the business records. One model for such a rule is California Evidence Code, 
11.32 	sections 1560 to 1567.