SENATE Substitute For


A bill to amend 2004 PA 452, entitled

"Identity theft protection act,"

by amending section 4 (MCL 445.64), as added by 2018 PA 649.

the people of the state of michigan enact:

Sec. 4. (1) An entity that is subject to or regulated under the insurance code of 1956, 1956 PA 218, MCL 500.100 to 500.8302, is exempt from this act.

(2) An entity that owns, is owned by, or is under common ownership with an entity described in subsection (1), and maintains the same cybersecurity procedures as that other entity, is exempt from this act.

(3) Sections 12 and 12a of this act do not apply to a covered entity or a third-party agent that is subject to the data breach notification act. As used in this subsection, "covered entity" and "third-party agent" mean those terms as defined in section 3 of the data breach notification act.

Enacting section 1. This amendatory act takes effect January 20, 2022.

Enacting section 2. This amendatory act does not take effect unless House Bill No. 4187 of the 100th Legislature is enacted into law.