HB 1822 — An Act amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, providing for protection of personal data of certain public servants; imposing duties on data brokers regarding personal data; and providing for civil enforcement.

PRIOR PRINTER'S NO.NOS.

22432243, 2332 PRINTER'S NO.

23322520 THE GENERAL ASSEMBLY OF PENNSYLVANIA HOUSE BILL Session of No.

WILLIAMS, SHUSTERMAN, BOYD, NEILSON, CURRY AND GREEN, AUGUST 26, 2025 AS AMENDED,REPORTED FROM COMMITTEE ON JUDICIARY, HOUSE OF REPRESENTATIVES, SEPTEMBERAS 22,AMENDED, OCTOBER 27, 2025 AN ACT Amending Title 44 (Law and Justice) of the Pennsylvania Consolidated Statutes, providing for protection of personal data of certain public servants;

and providing for civil and <-- The General Assembly of the Commonwealth of Pennsylvania hereby enacts as follows:

(4) Having personal information easily accessible at the click of a button provides negligible value to the public and poses grave danger to our public officials and their 20250HB1822PN233220250HB1822PN2520 - 2 - families.

20250HB1822PN233220250HB1822PN2520 - 3 - (1) A designated trustee or other agent acting under a written power of attorney or other legal instrument on behalf of any covered person who is physically or mentally incapacitated.

20250HB1822PN233220250HB1822PN2520 - 4 - "Home telephone number." A telephone number used primarily for personal communications or associated with personal communications devices, including a landline or cellular number.

or (3) person who holds or previously held a Federal position or a position in THISthis COMMONWEALTHCommonwealth ORor another state <-- comparable to those identified in paragraph (1) or (2) and who has a home address in this Commonwealth.

(b) Data brokers.--Upon notification under subsection (a), 20250HB1822PN233220250HB1822PN2520 - 5 - and not later than 10 20 business days following physical or <-- electronic receipt of the notification, a data broker shall not disclose or redisclose or otherwise make available, including on a publicly accessible Internet website, the protected information of the covered person.

(b) Criminal liability.--In addition to civil liability, a <-- data broker that violates section 904 recklessly or intentionally is subject to criminal prosecution as follows:

or (ii) for a continuing violation, within four years 20250HB1822PN233220250HB1822PN2520 - 6 - from the last date the violation occurred.

(d)(B) Proceedings.--ProceedingsTIME shallLIMITS.--A beCIVIL inACTION accordanceUNDER withTHIS theSECTION following:MUST BE <-- COMMENCED WITHIN THE FOLLOWING PERIODS OF LIMITATION:

(1) InFOUR aYEARS civilFROM judicialTHE proceedingDATE underTHE thisVIOLATION chapter,OCCURRED; the standard of fault shall be ordinary negligence.

OR (2) FOR A CONTINUING VIOLATION, WITHIN FOUR YEARS FROM THE LAST DATE THE VIOLATION OCCURRED.

(d) (C) Proceedings.--Proceedings shall be in accordance <-- with the following:

(1) In a civil judicial proceeding under this chapter, <-- the standard of fault shall be ordinary negligence.

(3)(1) IN A partyCIVIL accessingJUDICIAL aPROCEEDING dataUNDER broker'sTHIS websiteCHAPTER: or other products or services, for the purpose of determining whether the covered person's protected information is disclosed, shall not, as a result of the access, be deemed to have agreed on behalf of the covered person or the covered person's authorized agent or assignee to any website terms and conditions with respect to the covered person, associated person or the covered person or associated person's assignee's rights under this chapter.

(4)<-- No(I) priorTHE verificationSTANDARD ofOF aFAULT coveredSHALL person'sBE statusORDINARY shallNEGLIGENCE; be required for the notice under section 904 to be effective.

AND (II) IT SHALL NOT BE A DEFENSE TO LIABILITY IN THE PROCEEDING THAT THE PROTECTED INFORMATION IS OR WAS AVAILABLE TO THE PUBLIC FROM OTHER SOURCES OR AVAILABLE BY INSPECTION OF PUBLIC RECORDS.

(3) (2) A party accessing a data broker's website or <-- other products or services, for the purpose of determining 20250HB1822PN2520 - 7 - whether the covered person's protected information is disclosed, shall not, as a result of the access, be deemed to have agreed on behalf of the covered person or the covered person's authorized agent or assignee to any website terms and conditions with respect to the covered person, associated person or the covered person or associated person's assignee's rights under this chapter.

(4) (3) No prior verification of a covered person's <-- status shall be required for the notice under section 904 to be effective.

(e) (D) Limitation.--A disclosure of protected information is<-- 20250HB1822PN2332is - 7 - not a violation of this chapter if the disclosure is:

(f) (E) Relief.--In a civil action, for violations of <-- section 904, the court shall award:

20250HB1822PN2520 - 8 - § 906.

(1) A covered person from complying with all required disclosure and filing requirements if the covered person is a candidate for public ORor PARTYparty office.

<-- (2) An individual from challenging the residency of a covered person if the covered person is a candidate for public ORor PARTYparty office.

<-- Section 2.

20250HB1822PN233220250HB1822PN2520 - 89 -