The California Identity Theft Act
Identity theft is the unauthorized use of another person’s personal identifying information to obtain credit, goods, services, money, or property from that person. If that has happened to a consumer, where someone has used the consumer’s identifying information without the consumer’s authorization in order to obtain credit, goods, services, money, or property and the consumer did not use or possess the credit, goods, services, money, or property obtained by identity theft, and the consumer filed a police report in this regard, then the consumer is considered a victim of identity theft pursuant to California state law.
California has an identity theft law, commonly referred to as the California Identity Theft Act, Cal. Civil Code § 1798.92 et seq. (“CITA”). It provides individual consumers with an opportunity to sue companies that wrongly pursue them for debts that are not theirs because the consumer was a victim of identity theft. California’s Identity Theft Act allows people to sue those companies who make a mistaken claim against them; where the person is the victim of identity theft. If a company wrongfully makes a claim against a victim of identity theft, the victim can sue the business in order to receive a declaration that the victim is not obligated on the claim; an injunction to stop attempts to collect by the business; actual damages; attorney fees and costs; and a possible civil penalty of up to $30,000.00 in statutory damages to be paid to the victim.
In California, if a consumer is the victim of identity theft, the consumer can pursue getting a court order to have the consumer’s name entered into the California Identity Theft Registry. The California Identity Theft Registry is a database of identity theft victims that was established by the California Department of Justice. It helps victims of identity theft to clear their names. Once the consumer is entered in that registry, the consumer will get notification of the consumer’s status in the Registry. The consumer can present that notice if the consumer is ever questioned in the future about the debt that the consumer knows is not theirs.
Additionally, the consumer can request that this notification of the consumer’s status in the Registry be provided to prospective employers or others. It can help the consumer to resolve and clear up mistaken and damaging information. In California, any act of identity theft is a criminal act. However, as mentioned, in California, a person who is a victim of identity theft can also have a private right of action against a person or a business that wrongfully pursues them to collect on a debt.
As mentioned, in California, pursuant to the CITA, a person can sue a business or an individual person (also referred to in the CITA as a “claimant”) that claims that the person owes the business or other person monetary funds or an interest in property in connection with a transaction procured through identity theft. A person who is a victim of identity theft can do this in order to establish that they are a victim of identity theft in connection with, for example, a business’s claim against that person.
If the claimant has already sued the person to try to recover on its claim against the person, then the person who is a victim of identity theft can file a cross-complaint in court, to establish that they are in fact a victim of identity theft in connection with the claimant’s claim. The statute of limitations (the amount of time that the consumer has to file a lawsuit) is four years from the date that the victim of identity theft knew, or in the exercise of reasonable due diligence, should have known of the existence of facts that would have let them know that they had the opportunity to sue the business for illegal conduct.
In order to attain the aforementioned $30,000.00 in statutory damages, a victim of identity theft would have to prove by clear and convincing evidence that:
- 30 days before a lawsuit or cross complaint in an existing lawsuit was filed by the victim of identity theft, they provided written notice to the claimant at the address that was designated by the claimant for complaints related to credit reporting issues that a situation of identity theft might exist. The victim of identity theft would also have to explain in that notice the basis for that belief that a situation of identity theft might exist.
- The claimant failed to diligently investigate the victim’s notification of a possible identity theft having occurred.
- The claimant continued to pursue its claim against the victim of identity theft after the claimant was presented with facts that were later held to entitle the victim to a judgment pursuant to the CITA.