HI HB2047

Requires every business maintaining personal information to implement a comprehensive, written identity theft prevention policy by January 1, 2014, including administrative, technical, and physical safeguards.

Policy must be designed to ensure security and confidentiality of personal information and medical, educational, and financial records; protect against threats to security or integrity; and prevent security breaches.

Mandates businesses train all employees on the identity theft prevention policy and maintain signed acknowledgment forms from employees in their personnel files.

Requires businesses to designate an employee by January 1, 2014, to oversee policy compliance, assist individuals with identity theft concerns, provide staff education, and coordinate with law enforcement.

Establishes a penalty of up to $100 per violation for businesses failing to comply with these requirements, in addition to other available legal remedies.