PENNSYLVANIA, March 18 - (2) Promise, guarantee or imply a specific outcome,

veterans' benefits level, disability rating or increase in

veterans' benefits.

(3) Utilize an international call center for the

processing of a veteran's personal information.

(4) Obtain, request or retain a veteran's personal

medical, financial or government benefits login credentials,

including usernames or passwords.

(5) Receive compensation for referring or directing a

veteran, service member or eligible dependent to another

person for veterans' benefits claim assistance services.

(6) REPRESENT THAT A PERSON HAS SPECIAL ACCESS TO

GOVERNMENT CLAIMS SYSTEMS OR THE ABILITY TO EXPEDITE

VETERANS' BENEFITS CLAIMS.

(g) Data security and access.--

(1) A person subject to this section shall maintain a

veteran's personal medical and financial information only on

a secure system or server that complies with applicable

standards of the National Institute of Standards and

Technology on the effective date of this paragraph.

(2) Before a person subject to this section authorizes

an individual to access a veteran's personal medical or

financial information, the person shall ensure that the

individual submits to and passes a background check conducted

by a reputable source that includes identity verification and

a criminal history records check.

(3) A PERSON SUBJECT TO THIS SECTION MAY NOT REQUEST,

REQUIRE OR INDUCE A VETERAN, SERVICE MEMBER OR DEPENDENT TO

PROVIDE LOGIN CREDENTIALS, PASSWORDS, AUTHENTICATION TOKENS

OR OTHER SECURE ACCESS INFORMATION FOR ANY FEDERAL OR STATE

20260SB1209PN1508 - 6 -

<--

<--

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30