Section 30-16-24.1 - Theft of identity; obtaining identity by electronic fraudA. Theft of identity consists of willfully obtaining, recording or transferring personal identifying information of another person without the authorization or consent of that person and with the intent to defraud that person or another or with the intent to sell or distribute the information to another for an illegal purpose. B. Obtaining identity by electronic fraud consists of knowingly and willfully soliciting, requesting or taking any action by means of a fraudulent electronic communication with intent to obtain the personal identifying information of another. C. As used in this section: (1) "fraudulent electronic communication" means a communication by a person that is an electronic mail message, web site or any other use of the internet that contains fraudulent, false, fictitious or misleading information that depicts or includes the name, logo, web site address, email address, postal address, telephone number or any other identifying information of a business, organization or state agency, to which the person has no legitimate claim of right; (2) "personal identifying information" means information that alone or in conjunction with other information identifies a person, including the person's name, address, telephone number, driver's license number, social security number, date of birth, biometric data, place of employment, mother's maiden name, demand deposit account number, checking or savings account number, credit card or debit card number, personal identification number, electronic identification code, automated or electronic signature, passwords or any other numbers or information that can be used to obtain access to a person's financial resources, obtain identification, act as identification or obtain goods or services; and (3) "biometric data" means data, such as finger, voice, retina or iris prints or deoxyribonucleic acid, that capture, represent or enable the reproduction of unique physical attributes of a person. D. Whoever commits theft of identity is guilty of a fourth degree felony. E. Whoever commits obtaining identity by electronic fraud is guilty of a fourth degree felony. F. Prosecution pursuant to this section shall not prevent prosecution pursuant to any other provision of the law when the conduct also constitutes a violation of that other provision. G. In a prosecution brought pursuant to this section, the theft of identity or obtaining identity by electronic fraud shall be considered to have been committed in the county: (1) where the person whose identifying information was appropriated, obtained or sought resided at the time of the offense; or (2) in which any part of the offense took place, regardless of whether the defendant was ever actually present in the county. H. A person found guilty of theft of identity or of obtaining identity by electronic fraud shall, in addition to any other punishment, be ordered to make restitution for any financial loss sustained by a person injured as the direct result of the offense. In addition to out-of-pocket costs, restitution may include payment for costs, including attorney fees, incurred by that person in clearing the person's credit history, credit rating, criminal history or criminal charges or costs incurred in connection with a legal proceeding to satisfy a debt, lien, judgment or other obligation of that person arising as a result of the offense. I. The sentencing court shall issue written findings of fact and may issue orders as are necessary to correct public records and errors in credit reports and identifying information that contain false information as a result of the theft of identity or of obtaining identity by electronic fraud. Laws 2001, ch. 138, § 1; 2005, ch. 296, § 1; 2009, ch. 95, § 3.