Duty LXD-0216
Crawls the web, in Kansas
Kansas Consumer Protection Act, reasonable security and records-destruction duty for holders of personal informationsince 4 lines
K.S.A. 50-6,139b · Read the law's page
- This binds any holder of personal information: any individual, partnership, corporation, trust, estate, cooperative, association, government, governmental subdivision, agency, or other entity that in the ordinary course of business collects, maintains, or possesses another person's personal information.
- Implement and maintain reasonable procedures and practices appropriate to the nature of the information, and exercise reasonable care to protect it from unauthorized access, use, modification, or disclosure. Being subject to and compliant with another federal or state law or regulation governing the same procedures and practices is deemed compliance with this duty.
- Unless a federal law or regulation requires otherwise, destroy or arrange for the destruction of records containing personal information once you no longer intend to maintain or possess them, by shredding, erasing, or otherwise rendering the personal information unreadable or undecipherable.
- There is no private right of action. Only the Kansas Attorney General may enforce this section, as an unconscionable act or practice under the Kansas Consumer Protection Act, seeking a civil penalty of up to $10,000 per violation under K.S.A. 50-636.
Unlawful acts concerning computers (Kansas's computer-crime statute)in force3 lines
K.S.A. 21-5839 · Read the law's page
- Do not knowingly access, or attempt to access, a Kansas-connected computer, computer system, social networking website, computer network, or computer software, program, documentation, data, or property without authorization; paragraph (a)(5) criminalizes bare unauthorized access or an attempt at it alone, even without any intent to defraud, damage, or exceed authorization.
- Do not knowingly and without authorization disclose a password, code, or other means of access to a computer, computer network, social networking website, or another person's personal electronic content.
- Nothing in this statute's own text exempts ordinary, non-disruptive automated access to a publicly available page from the authorization requirement, and no Kansas case confirms how that access is treated in a scraping context.