information maintained by an entity as part of a database of
personal information regarding multiple individuals and that
causes or the entity reasonably believes has caused or will
cause loss or injury to a resident of this Commonwealth. The
term does not include good faith acquisition of personal
information by an employee or agent of an entity for the
purposes of the entity if the personal information is not used
for a purpose other than the lawful purpose of the entity and is
not subject to further unauthorized disclosure.
"Business." A sole proprietorship, partnership, corporation,
association or other group, however organized and whether or not
organized to operate at a profit. The term includes a financial
institution organized, chartered or holding a license or
authorization certificate under the laws of this Commonwealth,
any other state, the United States or any other country or the
parent or the subsidiary of a financial institution. The term
also includes an entity that destroys records.
"Card security code." The three-digit or four-digit value
printed on an access device or contained in the microprocessor
chip or magnetic strip of an access device that is used to
validate access device information during the authorization
process.
"Encryption." The use of an algorithmic process to transform
data into a form in which there is a low probability of
assigning meaning without use of a confidential process or key.
"Entity." A State agency, a political subdivision of the
Commonwealth or an individual or a business doing business in
this Commonwealth.
"Financial institution." An office of a bank, bank and
trust, trust company with banking powers, savings bank,
20190SB0955PN1379 - 2 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30