HB 1012-S.E - DIGEST

(DIGEST AS ENACTED)

Declares that it is unlawful for a person who is not an owner or operator to transmit computer software to the owner or operator's computer with actual knowledge or with conscious avoidance of actual knowledge and to use such software to do any of the following: (1) Modify, through intentionally deceptive means, settings that control any of the following: (a) The page that appears when an owner or operator launches an internet browser or similar computer software used to access and navigate the internet; (b) the default provider or web proxy the owner or operator uses to access or search the internet; and (c) the owner or operator's list of bookmarks used to access web pages;

(2) Collect, through intentionally deceptive means, personally identifiable information: (a) Through the use of a keystroke-logging function that records all keystrokes made by an owner or operator and transfers that information from the computer to another person; (b) in a manner that correlates such information with data respecting all or substantially all of the web sites visited by an owner or operator, other than web sites operated by the person collecting such information; and (c) described in section 1(10) (d), (e), or (f)(i) or (ii) of this act by extracting the information from the owner or operator's hard drive;

(3) Prevent, through intentionally deceptive means, an owner or operator's reasonable efforts to block the installation or execution of, or to disable, computer software by causing the software that the owner or operator has properly removed or disabled automatically to reinstall or reactivate on the computer;

(4) Intentionally misrepresent that computer software will be uninstalled or disabled by an owner or operator's action; and

(5) Through intentionally deceptive means, remove, disable, or render inoperative security, antispyware, or antivirus computer software installed on the computer.

Declares that it is unlawful for a person who is not an owner or operator to transmit computer software to the owner or operator's computer with actual knowledge or with conscious avoidance of actual knowledge and to use the software to do any of the following: (1) Take control of the computer by: (a) Accessing or using the modem or internet service for such computer to cause damage to the computer or cause an owner or operator to incur financial charges for a service that is not authorized by the owner or operator; (b) opening multiple, sequential, stand-alone advertisements in the owner or operator's internet browser without the authorization of an owner or operator and that a reasonable computer user cannot close without turning off the computer or closing the internet browser;

(2) Modify any of the following settings related to the computer's access to, or use of, the internet: (a) Settings that protect information about the owner or operator in order to steal the owner or operator's personally identifiable information; and (b) security settings in order to cause damage to a computer; and

(3) Prevent an owner or operator's reasonable efforts to block the installation of, or to disable, computer software by doing any of the following: (a) Presenting the owner or operator with an option to decline installation of computer software with knowledge that, when the option is selected, the installation nevertheless proceeds; and (b) falsely representing that computer software has been disabled.

Declares that it is unlawful for a person who is not an owner or operator to do any of the following with regard to the owner or operator's computer: (1) Induce an owner or operator to install a computer software component onto the computer by intentionally misrepresenting the extent to which installing the software is necessary for security or privacy reasons or in order to open, view, or play a particular type of content; and

(2) Deceptively cause the execution on the computer of a computer software component with the intent of causing an owner or operator to use the component in a manner that violates any other provision of this act.

Authorizes a person who is injured under this act to bring a civil action in the superior court to enjoin further violations, or to seek up to one thousand dollars per violation, or actual damages, whichever is greater. The injured individuals may not bring their cause of action as a class action. Nothing in this section prohibits the attorney general from bringing a class action suit under chapter 19.86 RCW.

Provides that, in an action under this act, a court may increase the damages up to three times the damages allowed if the defendant has engaged in a pattern and practice of violating this act. The court may also award costs and reasonable attorneys' fees to the prevailing party.

Declares an intent that this act is a matter of statewide concern. This act supersedes and preempts all rules, regulations, codes, ordinances, and other laws adopted by a city, county, city and county, municipality, or local agency regarding spyware and notices to consumers from computer software providers regarding information collection.