NOTE: The governor signed this measure on 4/7/2016. SENATE BILL 16-088 BY SENATOR(S) Steadman, Johnston, Newell; also REPRESENTATIVE(S) Willett, Kagan, Young. Concerning the "Revised Uniform Fiduciary Access to Digital Assets Act". Be it enacted by the General Assembly of the State of Colorado: SECTION 1. In Colorado Revised Statutes, add part 15 to article 1 of title 15 as follows: PART 15 REVISED UNIFORM FIDUCIARY ACCESS TO DIGITAL ASSETS ACT 15-1-1501. Short title. This part 15 may be cited as the "Revised Uniform Fiduciary Access to Digital Assets Act". 15-1-1502. Definitions. In this part 15: (1) "Account" means an arrangement under a terms-of-service agreement in which a custodian carries, maintains, processes, receives, or stores a digital asset of the user or provides goods or services to the user. (2) "Agent" means an attorney-in-fact granted authority under a durable or nondurable power of attorney. (3) "Carries" means engages in the transmission of an electronic communication. (4) "Catalog of electronic communications" means information that identifies each person with which a user has had an electronic communication, the time and date of the communication, and the electronic address of the person. (5) "Conservator" means a person appointed by a court to manage the estate of a living individual. The term includes a limited conservator. (6) "Content of an electronic communication" means information concerning the substance or meaning of a communication that: (a) Has been sent or received by a user; (b) Is in electronic storage by a custodian providing an electronic-communication service to the public or is carried or maintained by a custodian providing a remote-computing service to the public; and (c) Is not readily accessible to the public. (7) "Court" means the district court, except in the city and county of Denver where it is the probate court. (8) "Custodian" means a person that carries, maintains, processes, receives, or stores a digital asset of a user. (9) "Designated recipient" means a person chosen by a user using an on-line tool to administer digital assets of the user. (10) "Digital asset" means an electronic record in which an individual has a right or interest. The term does not include an underlying asset or liability unless the asset or liability is itself an electronic record. (11) "Electronic" means relating to technology having electrical, digital, magnetic, wireless, optical, electromagnetic, or similar capabilities. (12) "Electronic communication" has the meaning set forth in 18 U.S.C. sec. 2510(12), as amended. (13) "Electronic-communication service" means a custodian that provides to a user the ability to send or receive an electronic communication. (14) "Fiduciary" means an original, additional, or successor personal representative, conservator, agent, or trustee. (15) "Information" means data, text, images, videos, sounds, codes, computer programs, software, databases, or the like. (16) "On-line tool" means an electronic service provided by a custodian that allows the user, in an agreement distinct from the terms-of-service agreement between the custodian and user, to provide directions for disclosure or nondisclosure of digital assets to a third person. (17) "Person" means an individual; estate; business or nonprofit entity; public corporation; government or governmental subdivision, agency, or instrumentality; or other legal entity. (18) "Personal representative" means an executor, administrator, special administrator, or person that performs substantially the same function under law of this state other than this part 15. (19) "Power of attorney" means a record that grants an agent authority to act in the place of a principal. (20) "Principal" means an individual who grants authority to an agent in a power of attorney. (21) "Protected person" means an individual for whom a conservator has been appointed. The term includes an individual for whom an application for the appointment of a conservator is pending. (22) "Record" means information that is inscribed on a tangible medium or that is stored in an electronic or other medium and is retrievable in perceivable form. (23) "Remote-computing service" means a custodian that provides to a user computer-processing services or the storage of digital assets by means of an electronic communications system, as defined in 18 U.S.C. sec. 2510(14), as amended. (24) "Terms-of-service agreement" means an agreement that controls the relationship between a user and a custodian. (25) "Trustee" means a fiduciary with legal title to property under an agreement or declaration that creates a beneficial interest in another. The term includes a successor trustee. (26) "User" means a person that has an account with a custodian. (27) "Will" includes a codicil, testamentary instrument that only appoints an executor, and instrument that revokes or revises a testamentary instrument. 15-1-1503. Applicability. (1) This part 15 applies to: (a) A fiduciary acting under a will or power of attorney executed before, on, or after the effective date of this part 15; (b) A personal representative acting for a decedent who died before, on, or after the effective date of this part 15; (c) A conservatorship proceeding commenced before, on, or after the effective date of this part 15; and (d) A trustee acting under a trust created before, on, or after the effective date of this part 15. (2) This part 15 applies to a custodian if the user resides in this state or resided in this state at the time of the user's death. (3) (a) This part 15 does not apply to a digital asset of an employer used by an employee in the ordinary course of the employer's business. (b) This part 15 does not apply to a digital asset of an entity used by a manager, owner, or other person in the course of the conduct of the internal affairs of the entity. The terms "entity", "manager", and "owner" in this paragraph (b) have the same meaning as defined in section 7-90-102, C.R.S. 15-1-1504. User direction for disclosure of digital assets. (1) A user may use an on-line tool to direct the custodian to disclose to a designated recipient or to not disclose some or all of the user's digital assets, including the content of electronic communications. If the on-line tool allows the user to modify or delete a direction at all times, a direction regarding disclosure using an on-line tool overrides a contrary direction by the user in a will, trust, power of attorney, or other record. (2) If a user has not used an on-line tool to give direction under subsection (1) of this section or if the custodian has not provided an on-line tool, the user may allow or prohibit in a will, trust, power of attorney, or other record, disclosure to a fiduciary of some or all of the user's digital assets, including the content of electronic communications sent or received by the user. (3) A user's direction under subsection (1) or (2) of this section overrides a contrary provision in a terms-of-service agreement that does not require the user to act affirmatively and distinctly from the user's assent to the terms of service. 15-1-1505. Terms-of-service agreement. (1) This part 15 does not change or impair a right of a custodian or a user under a terms-of-service agreement to access and use digital assets of the user. (2) This part 15 does not give a fiduciary or designated recipient any new or expanded rights other than those held by the user for whom, or for whose estate, the fiduciary or designated recipient acts or represents. (3) A fiduciary's or designated recipient's access to digital assets may be modified or eliminated by a user, by federal law, or by a terms-of-service agreement if the user has not provided direction under section 15-1-1504. 15-1-1506. Procedure for disclosing digital assets. (1) When disclosing digital assets of a user under this part 15, the custodian may at its sole discretion: (a) Grant a fiduciary or designated recipient full access to the user's account; (b) Grant a fiduciary or designated recipient partial access to the user's account sufficient to perform the tasks with which the fiduciary or designated recipient is charged; or (c) Provide a fiduciary or designated recipient a copy in a record of any digital asset that, on the date the custodian received the request for disclosure, the user could have accessed if the user were alive and had full capacity and access to the account. (2) A custodian may assess a reasonable administrative charge for the cost of disclosing digital assets under this part 15. (3) A custodian need not disclose under this part 15 a digital asset deleted by a user. (4) If a user directs or a fiduciary requests a custodian to disclose under this part 15 some, but not all, of the user's digital assets, the custodian need not disclose the assets if segregation of the assets would impose an undue burden on the custodian. If the custodian believes the direction or request imposes an undue burden, the custodian or fiduciary may seek an order from the court to disclose: (a) A subset limited by date of the user's digital assets; (b) All of the user's digital assets to the fiduciary or designated recipient; (c) None of the user's digital assets; or (d) All of the user's digital assets to the court for review in camera. 15-1-1507. Disclosure of content of electronic communications of deceased user. (1) If a deceased user consented or a court directs disclosure of the contents of electronic communications of the user, the custodian shall disclose to the personal representative of the estate of the user the content of an electronic communication sent or received by the user if the representative gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) A certified copy of the death certificate of the user; (c) A certified copy of the letter of appointment of the representative or a small-estate affidavit or court order; (d) Unless the user provided direction using an on-line tool, a copy of the user's will, trust, power of attorney, or other record evidencing the user's consent to disclosure of the content of electronic communications; and (e) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the user's account; (II) Evidence linking the account to the user; or (III) A finding by the court that: (A) The user had a specific account with the custodian, identifiable by the information specified in subparagraph (I) of this paragraph (e); (B) Disclosure of the content of electronic communications of the user would not violate 18 U.S.C. sec. 2701, et seq., as amended; 47 U.S.C. sec. 222, as amended; or other applicable law; (C) Unless the user provided direction using an on-line tool, the user consented to disclosure of the content of electronic communications; or (D) Disclosure of the content of electronic communications of the user is reasonably necessary for administration of the estate. 15-1-1508. Disclosure of other digital assets of deceased user. (1) Unless the user prohibited disclosure of digital assets or the court directs otherwise, a custodian shall disclose to the personal representative of the estate of a deceased user a catalog of electronic communications sent or received by the user and digital assets, other than the content of electronic communications, of the user, if the representative gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) A certified copy of the death certificate of the user; (c) A certified copy of the letter of appointment of the representative or a small-estate affidavit or court order; and (d) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the user's account; (II) Evidence linking the account to the user; (III) An affidavit stating that disclosure of the user's digital assets is reasonably necessary for administration of the estate; or (IV) A finding by the court that: (A) The user had a specific account with the custodian, identifiable by the information specified in subparagraph (I) of this paragraph (d); or (B) Disclosure of the user's digital assets is reasonably necessary for administration of the estate. 15-1-1509. Disclosure of content of electronic communications of principal. (1) To the extent a power of attorney expressly grants an agent authority over the content of electronic communications sent or received by the principal and unless directed otherwise by the principal or the court, a custodian shall disclose to the agent the content if the agent gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) An original or copy of the power of attorney expressly granting the agent authority over the content of electronic communications of the principal; (c) A certification by the agent, under penalty of perjury, that the power of attorney is in effect; and (d) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the principal's account; or (II) Evidence linking the account to the principal. 15-1-1510. Disclosure of other digital assets of principal. (1) Unless otherwise ordered by the court, directed by the principal, or provided by a power of attorney, a custodian shall disclose to an agent with specific authority over digital assets or general authority to act on behalf of a principal a catalog of electronic communications sent or received by the principal and digital assets, other than the content of electronic communications, of the principal if the agent gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) An original or a copy of the power of attorney that gives the agent specific authority over digital assets or general authority to act on behalf of the principal; (c) A certification by the agent, under penalty of perjury, that the power of attorney is in effect; and (d) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the principal's account; or (II) Evidence linking the account to the principal. 15-1-1511. Disclosure of digital assets held in trust when trustee is original user. Unless otherwise ordered by the court or provided in a trust, a custodian shall disclose to a trustee that is an original user of an account any digital asset of the account held in trust, including a catalog of electronic communications of the trustee and the content of electronic communications. 15-1-1512. Disclosure of contents of electronic communications held in trust when trustee not original user. (1) Unless otherwise ordered by the court, directed by the user, or provided in a trust, a custodian shall disclose to a trustee that is not an original user of an account the content of an electronic communication sent or received by an original or successor user and carried, maintained, processed, received, or stored by the custodian in the account of the trust if the trustee gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) A certified copy of the trust instrument or a registration of the trust under part 1 of article 16 of this title that includes consent to disclosure of the content of electronic communications to the trustee; (c) A certification by the trustee, under penalty of perjury, that the trust exists and the trustee is a currently acting trustee of the trust; and (d) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the trust's account; or (II) Evidence linking the account to the trust. 15-1-1513. Disclosure of other digital assets held in trust when trustee not original user. (1) Unless otherwise ordered by the court, directed by the user, or provided in a trust, a custodian shall disclose, to a trustee that is not an original user of an account, a catalog of electronic communications sent or received by an original or successor user and stored, carried, or maintained by the custodian in an account of the trust and any digital assets, other than the content of electronic communications, in which the trust has a right or interest if the trustee gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) A certified copy of the trust instrument or a registration of the trust under part 1 of article 16 of this title; (c) A certification by the trustee, under penalty of perjury, that the trust exists and the trustee is a currently acting trustee of the trust; and (d) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the trust's account; or (II) Evidence linking the account to the trust. 15-1-1514. Disclosure of digital assets to conservator of protected person. (1) After an opportunity for a hearing under article 14 of this title, the court may grant a conservator access to the digital assets of a protected person. (2) Unless otherwise ordered by the court or directed by the user, a custodian shall disclose to a conservator the catalog of electronic communications sent or received by a protected person and any digital assets, other than the content of electronic communications, in which the protected person has a right or interest if the conservator gives the custodian: (a) A written request for disclosure in physical or electronic form; (b) A certified copy of the court order that gives the conservator authority over the digital assets of the protected person; and (c) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the account of the protected person; or (II) Evidence linking the account to the protected person. (3) A conservator with general authority to manage the assets of a protected person may request a custodian of the digital assets of the protected person to suspend or terminate an account of the protected person for good cause. A request made under this section must be accompanied by a certified copy of the court order giving the conservator authority over the protected person's property. 15-1-1515. Fiduciary duty and authority. (1) The legal duties imposed on a fiduciary charged with managing tangible property apply to the management of digital assets, including: (a) The duty of care; (b) The duty of loyalty; and (c) The duty of confidentiality. (2) A fiduciary's or designated recipient's authority with respect to a digital asset of a user: (a) Except as otherwise provided in section 15-1-1504, is subject to the applicable terms of service; (b) Is subject to other applicable law, including copyright law; (c) In the case of a fiduciary, is limited by the scope of the fiduciary's duties; and (d) May not be used to impersonate the user. (3) A fiduciary with authority over the property of a decedent, protected person, principal, or settlor has the right to access any digital asset in which the decedent, protected person, principal, or settlor had a right or interest and that is not held by a custodian or subject to a terms-of-service agreement. (4) A fiduciary acting within the scope of the fiduciary's duties is an authorized user of the property of the decedent, protected person, principal, or settlor for the purpose of applicable computer-fraud and unauthorized-computer-access laws, including article 5.5 of title 18, C.R.S. (5) A fiduciary with authority over the tangible, personal property of a decedent, protected person, principal, or settlor: (a) Has the right to access the property and any digital asset stored in it; and (b) Is an authorized user for the purpose of computer-fraud and unauthorized-computer-access laws, including article 5.5 of title 18, C.R.S. (6) A custodian may disclose information in an account to a fiduciary of the user when the information is required to terminate an account used to access digital assets licensed to the user. (7) A fiduciary of a user may request a custodian to terminate the user's account. A request for termination must be in writing, in either physical or electronic form, and accompanied by: (a) If the user is deceased, a certified copy of the death certificate of the user; (b) A certified copy of the letter of appointment of the representative or a small-estate affidavit or court order, court order, power of attorney, or trust giving the fiduciary authority over the account; and (c) If requested by the custodian: (I) A number, username, address, or other unique subscriber or account identifier assigned by the custodian to identify the user's account; (II) Evidence linking the account to the user; or (III) A finding by the court that the user had a specific account with the custodian, identifiable by the information specified in subparagraph (I) of this paragraph (c). (8) A domiciliary foreign personal representative is not required to comply with the provisions of section 15-13-204, or with any other provision of article 13 of this title, as a condition to obtaining disclosure of a digital asset pursuant to this part 15. (9) A foreign conservator is not required to comply with the provisions of section 15-14-433 as a condition to obtaining disclosure of a digital asset pursuant to this part 15. 15-1-1516. Custodian compliance and immunity. (1) Not later than sixty days after receipt of the information required under sections 15-1-1507 to 15-1-1515, a custodian shall comply with a request under this part 15 from a fiduciary or designated recipient to disclose digital assets or terminate an account. If the custodian fails to comply, the fiduciary or designated recipient may apply to the court for an order directing compliance. (2) An order under subsection (1) of this section directing compliance must contain a finding that compliance is not in violation of 18 U.S.C. sec. 2702, as amended. (3) A custodian may notify the user that a request for disclosure or to terminate an account was made under this part 15. (4) A custodian may deny a request under this part 15 from a fiduciary or designated recipient for disclosure of digital assets or to terminate an account if the custodian is aware of any lawful access to the account following the receipt of the fiduciary's request. (5) This part 15 does not limit a custodian's ability to obtain, or to require a fiduciary or designated recipient requesting disclosure or termination under this part 15 to obtain, a court order that: (a) Specifies that an account belongs to the protected person or principal; (b) Specifies that there is sufficient consent from the protected person or principal to support the requested disclosure; and (c) Contains a finding required by law other than this part 15. (6) A custodian and its officers, employees, and agents are immune from liability for an act or omission done in good faith in compliance with this part 15. 15-1-1517. Uniformity of application and construction. In applying and construing this uniform act, consideration must be given to the need to promote uniformity of the law with respect to its subject matter among states that enact it. 15-1-1518. Relation to electronic signatures in global and national commerce act. This part 15 modifies, limits, or supersedes the federal "Electronic Signatures in Global and National Commerce Act", 15 U.S.C. sec. 7001, et seq., but does not modify, limit, or supersede section 101(c) of that act, 15 U.S.C. sec. 7001(c), or authorize electronic delivery of any of the notices described in section 103(b) of that act, 15 U.S.C. sec. 7003(b). SECTION 2. Inclusion of official comments. The revisor shall include in the publication of the "Revised Uniform Fiduciary Access to Digital Assets Act", as nonstatutory matter, following each section of the part, the full text of the official comments to that section contained in the official volume containing the 2015 official text of "Revised Uniform Fiduciary Access to Digital Assets Act" issued by the Uniform Law Commission, with any changes in the official comments or Colorado comments to correspond to Colorado changes in the uniform act. The revisor of statutes shall prepare the comments for approval by the committee on legal services for publication. SECTION 3. Act subject to petition - effective date. This act takes effect at 12:01 a.m. on the day following the expiration of the ninety-day period after final adjournment of the general assembly (August 10, 2016, if adjournment sine die is on May 11, 2016); except that, if a referendum petition is filed pursuant to section 1 (3) of article V of the state constitution against this act or an item, section, or part of this act within such period, then the act, item, section, or part will not take effect unless approved by the people at the general election to be held in November 2016 and, in such case, will take effect on the date of the official declaration of the vote thereon by the governor. ____________________________ ____________________________ Bill L. Cadman Dickey Lee Hullinghorst PRESIDENT OF SPEAKER OF THE HOUSE THE SENATE OF REPRESENTATIVES ____________________________ ____________________________ Effie Ameen Marilyn Eddins SECRETARY OF CHIEF CLERK OF THE HOUSE THE SENATE OF REPRESENTATIVES APPROVED________________________________________ _________________________________________ John W. Hickenlooper GOVERNOR OF THE STATE OF COLORADO