,i  #aac? ,,congress  #a/ ,session  ,h4 
,r4 #aiac  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,may #i1 #bjac ,mr4   
,johnson ( ,georgia 7= himself1 ,ms4    
,jackson ,lee1 ,mr4 ,engel1 ,mr4        
,cony]s1 & ,mr4 ,*abot7 introduc$ !     
foll[+ bill2 :i* 0 ref]r$ to !          
,committee on ,en]gy & ,comm]ce  ,a     
,,bill  ,to provide = great] transp>5cy 
9 & us] control ov] ! treatm5t ( data   
collect$ by mobile applications & to    
enhance ! security ( su* data4  #a4     
,%ort title ,?is ,act may be cit$ z !   
,application ,privacy1 ,protection1 &   
,security ,act ( #bjac or ! ,,apps ,act 
( #bjac4  #b4 ,transp>5cy1 us] control1 
& security  7a7 ,cons5t to t]ms &       
conditions  7#a7 ,9 g5]al ,be=e a mobile
 application collects p]sonal data ab\t 
a us] ( ! application1 ! develop] ( !   
application %all--  7,a7 provide ! us] )
 notice ( ! t]ms & conditions gov]n+ !  
collection1 use1 /orage1 & %>+ ( !      
p]sonal data2 &  7,b7 obta9 ! cons5t ( !
 us] to su* t]ms & conditions4  7#b7    

,requir$ cont5t ,! notice requir$ by    
p>agraph 7#a77;,a7 %all include !       
foll[+3  7,a7 ,! categories ( p]sonal   
data t w be collect$4  7,b7 ,!          
categories ( purposes = :i* ! p]sonal   
data w be us$4  7,c7 ,! categories (    
?ird p>ties ) :i* ! p]sonal data w be   
%>$4  7,d7 ,a data ret5tion policy t    
gov]ns ! l5g? = :i* ! p]sonal data w be 
/or$ & ! t]ms & conditions applicable to
 /orage1 includ+ a description ( !      
rights ( ! us] "u subsection 7b7 & !    
process by :i* ! us] may ex]cise su*    
rights4  7#c7 ,additional specifications
 & flexibility ,! ,commission %all by   
regulation specify ! =mat1 mann]1 & tim+
 ( ! notice requir$ by p>agraph         
7#a77;,a74 ,9 promulgat+ ! regulations1 
! ,commission %all consid] h[ to ensure 
! mo/ effective & effici5t communication
 to ! us] reg>d+ ! treatm5t ( p]sonal   
data4  7#d7 ,direct access to data by   
?ird p>ties ,= purposes ( ?is ,act1 if !
 develop] ( a mobile application all[s a
 ?ird p>ty to access p]sonal data       

collect$ by ! application1 su* p]sonal  
data %all be consid]$ to be %>$ ) ! ?ird
 p>ty1 :e!r or n su* p]sonal data are   
fir/ transmitt$ to ! develop]4  7b7     
,)drawal ( cons5t ,! develop] ( a mobile
 application %all--  7#a7 provide a us] 
( ! application ) a means (--  7,a7     
notify+ ! develop] t ! us] int5ds to /op
 us+ ! application2 &  7,b7 reque/+ !   
develop]--  7i7 to refra9 f any fur!r   
collection ( p]sonal data ?r\gh !       
application2 &  7ii7 at ! option ( !    
us]1 ei!r--  7,i7 to ! ext5t            
practicable1 to delete any p]sonal data 
collect$ by ! application t is /or$ by !
 develop]2 or  7,,ii7 to refra9 f any   
fur!r use or %>+ ( su* data2 &  7#b7 )9 
a reasonable & appropriate "t aft]      
receiv+ a reque/ "u p>agraph 7#a77;,b71 
comply ) su* reque/4  7c7 ,security (   
p]sonal data & de-,id5tifi$ data ,!     
develop] ( a mobile application %all    
take reasonable & appropriate measures  
to prev5t unau?oriz$ access to p]sonal  
data & de-id5tifi$ data collect$ by !   

application4  7d7 ,exception ,no?+ 9 ?is
 ,act prohibits ! develop] ( a mobile   
application f disclos+ or pres]v+       
p]sonal data or de-id5tifi$ data z      
requir$ by--  7#a7 o!r ,f$]al law       
7includ+ a c\rt ord]72 or  7#b7 except z
 provid$ 9 section #f1 ! law ( a ,/ate  
or a political subdivision ( a ,/ate    
7includ+ a c\rt ord]74  #c4 ,application
 & en=cem5t  7a7 ,g5]al application ,!  
requirem5ts ( ?is ,act & ! regulations  
promulgat$ "u ?is ,act apply1 accord+ to
 _! t]ms1 to ^? p]sons1 p>tn]%ips1 &    
corporations ov] :i* ! ,commission has  
au?ority pursuant to section #e7;a77#b7 
( ! ,f$]al ,trade ,commission ,act 7#ae 
,u4,s4,c4 #de7;a77#b774  7b7 ,en=cem5t  
by ,f$]al ,trade ,commission  7#a7      
,unfair or deceptive acts or practices  
,a violation ( ?is ,act or a regulation 
promulgat$ "u ?is ,act %all be treat$ z 
a violation ( a regulation "u section   
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b77 reg>d+ unfair or     

deceptive acts or practices4  7#b7 ,p[]s
 ( ,commission ,! ,commission %all en=ce
 ?is ,act & ! regulations promulgat$ "u 
?is ,act 9 ! same mann]1 by ! same      
means1 & ) ! same jurisdiction1 p[]s1 & 
duties z ?\gh all applicable t]ms &     
provisions ( ! ,f$]al ,trade ,commission
 ,act 7#ae ,u4,s4,c4 #da et seq47 7     
incorporat$ into & made a "p ( ?is ,act4
 ,any p]son :o violates ?is ,act or a   
regulation promulgat$ "u ?is ,act %all  
be subject to ! p5alties & entitl$ to ! 
privileges & immunities provid$ 9 !     
,f$]al ,trade ,commission ,act4  7c7    
,actions by ,/ates  7#a7 ,9 g5]al ,9 any
 case 9 :i* ! attorney g5]al ( a ,/ate1 
or an (ficial or ag5cy ( a ,/ate1 has   
reason to believe t an int]e/ ( !       
resid5ts ( su* ,/ate has be5 or is      
?reat5$ or adv]sely affect$ by an act or
 practice 9 violation ( ?is ,act or a   
regulation promulgat$ "u ?is ,act1 !    
,/ate1 z p>5s patriae1 may br+ a civil  
action on behalf ( ! resid5ts ( ! ,/ate 
9 an appropriate di/rict c\rt ( ! ,unit$

 ,/ates to--  7,a7 enjo9 su* act or     
practice2  7,b7 en=ce compliance ) ?is  
,act or su* regulation2  7,c7 obta9     
damages1 re/itution1 or o!r comp5sation 
on behalf ( resid5ts ( ! ,/ate2 or  7,d7
 obta9 su* o!r legal & equitable relief 
z ! c\rt may consid] to be appropriate4 
7#b7 ,notice ,be=e fil+ an action "u ?is
 subsection1 ! attorney g5]al1 (ficial1 
or ag5cy ( ! ,/ate involv$ %all provide 
to ! ,commission a writt5 notice ( su*  
action & a copy ( ! compla9t = su*      
action4 ,if ! attorney g5]al1 (ficial1  
or ag5cy det]m9es t x is n feasible to  
provide ! notice describ$ 9 ?is p>agraph
 be=e ! fil+ ( ! action1 ! attorney     
g5]al1 (ficial1 or ag5cy %all provide   
writt5 notice ( ! action & a copy ( !   
compla9t to ! ,commission imm$iately ^u 
! fil+ ( ! action4  7#c7 ,au?ority (    
,commission  7,a7 ,9 g5]al ,on receiv+  
notice "u p>agraph 7#b7 ( an action "u  
?is subsection1 ! ,commission %all h !  
"r--  7i7 to int]v5e 9 ! action2  7ii7  
^u s int]v5+1 to be he>d on all matt]s  

aris+ !re92 &  7iii7 to file petitions =
 appeal4  7,b7 ,limitation on ,/ate     
action :ile ,f$]al action is p5d+ ,if ! 
,commission or ! ,attorney ,g5]al ( !   
,unit$ ,/ates has in/itut$ a civil      
action = violation ( ?is ,act or a      
regulation promulgat$ "u ?is ,act       
7ref]r$ to 9 ?is subp>agraph z ! ,f$]al 
action71 no ,/ate attorney g5]al1       
(ficial1 or ag5cy may br+ an action "u  
?is subsection dur+ ! p5d5cy ( ! ,f$]al 
action aga9/ any def5dant nam$ 9 !      
compla9t 9 ! ,f$]al action = any        
violation ( ?is ,act or su* regulation  
alleg$ 9 su* compla9t4  7#d7 ,rule (    
con/ruction ,= purposes ( br++ a civil  
action "u ?is subsection1 no?+ 9 ?is    
,act %all be con/ru$ to prev5t an       
attorney g5]al1 (ficial1 or ag5cy ( a   
,/ate f ex]cis+ ! p[]s conf]r$ on !     
attorney g5]al1 (ficial1 or ag5cy by !  
laws ( su* ,/ate to conduct             
inve/igations1 adm9i/] oa?s &           
affirmations1 or compel ! att5dance (   
witnesses or ! production ( docum5t>y & 

o!r evid5ce4  #d4 ,regulations ,n lat]  
?an #a ye> aft] ! date ( ! enactm5t (   
?is ,act1 ! ,commission %all promulgate 
regulations 9 accordance ) section #eec 
( title #e1 ,unit$ ,/ates ,code1 to     
implem5t & en=ce ?is ,act4  #e4 ,safe   
h>bor  7a7 ,9 g5]al ,! develop] ( a     
mobile application may satisfy !        
requirem5ts ( ?is ,act & ! regulations  
promulgat$ "u ?is ,act by adopt+ &      
foll[+ a code ( conduct = consum] data  
privacy 7ins(> z su* code relates to    
data collect$ by a mobile application7  
t--  7#a7 0 develop$ 9 a multi/akehold] 
process conv5$ by ! ,national           
,telecommunications & ,in=mation        
,adm9i/ration1 z describ$ 9 ! docum5t   
issu$ by ! ,presid5t on ,febru>y #bc1   
#bjab1 entitl$ ,consum] ,data ,privacy 9
 a ,network$ ,_w3 ,a ,framework =       
,protect+ ,privacy & ,promot+           
,innovation 9 ! ,global ,digital        
,economy2 &  7#b7 ! ,commission has     
approv$ z meet+ ! requirem5ts ( !       
regulations promulgat$ "u section #d4   

7b7 ,regulations ,! ,commission %all    
promulgate regulations 9 accordance )   
section #eec ( title #e1 ,unit$ ,/ates  
,code1 to gov]n ! consid]ation &        
approval ( codes ( conduct "u subsection
 7a77#b74  #f4 ,relation%ip to ,/ate law
 ,?is ,act & ! regulations promulgat$ "u
 ?is ,act sup]c$e a provision ( law ( a 
,/ate or a political subdivision ( a    
,/ate only to ! ext5t t su* provision-- 
7#a7 conflicts ) ?is ,act or su*        
regulations1 z det]m9$ )\t reg>d to     
section #b7;d77#b72  7#b7 specifically  
relates to ! treatm5t ( p]sonal data or 
de-id5tifi$ data2 &  7#c7 provides a    
level ( transp>5cy1 us] control1 or     
security 9 ! treatm5t ( p]sonal data or 
de-id5tifi$ data t is less ?an ! level  
provid$ by ?is ,act & su* regulations4  
#g4 ,pres]vation ( ,,ftc au?ority ,no?+ 
9 ?is ,act may be con/ru$ 9 any way to  
limit or affect ! au?ority ( !          
,commission "u any o!r provision ( law4 
#h4 ,def9itions ,9 ?is ,act3  7#a7      
,commission ,! t]m ,commission means !  

,f$]al ,trade ,commission4  7#b7        
,de-id5tifi$ data ,! t]m de-id5tifi$    
data means data t _c reasonably be us$  
to id5tify or inf] in=mation ab\t1 or   
o!rwise be l9k$ to1 a p>ticul>          
individual or mobile device1 z det]m9$ )
 a reasonable level ( ju/ifi$ confid5ce 
bas$ on ! available me?ods &            
te*nologies1 ! nature ( ! data at issue1
 & ! purposes = :i* ! data w be us$4    
7#c7 ,develop] ,! t]m develop] %all h ! 
mean+ giv5 su* t]m by ! ,commission by  
regulation4  7#d7 ,mobile application ,!
 t]m mobile application means a s(tw>e  
program t--  7,a7 runs on ! op]at+ sy/em
 ( a mobile device2 &  7,b7 collects    
data f a us]4  7#e7 ,mobile device ,!   
t]m mobile device means a sm>tphone1    
tablet comput]1 or simil> portable      
comput+ device t transmits data ov] a   
wireless connection4  7#f7 ,p]sonal data
 ,! t]m p]sonal data %all h ! mean+ giv5
 su* t]m by ! ,commission by regulation1
 except t su* t]m %all n include        
de-id5tifi$ data4  7#g7 ,/ate ,! t]m    

,/ate means ea* ( ! sev]al ,/ates1 !    
,di/rict ( ,columbia1 ea* commonweal?1  
t]ritory1 or possession ( ! ,unit$      
,/ates1 & ea* f$]ally recogniz$ ,indian 
tribe4  7#h7 ,?ird p>ty ,! t]m ?ird p>ty
 means1 ) respect to ! develop] ( an    
application1 an entity t holds itself   
out to ! public z sep>ate f ! develop]  
su* t a us] ( ! application act+        
reasonably "u ! circum/ances w\ld n     
expect ! entity to be relat$ to !       
develop] or to h access to p]sonal data 
! us] provides to ! develop]4 ,su* t]m  
includes an affiliate ( ! develop]      
unless ! affiliation is reasonably cle> 
to us]s ( ! application4  #i4 ,effective
 date ,?is ,act %all apply ) respect to 
any collection1 use1 /orage1 or %>+ (   
p]sonal data or de-id5tifi$ data t      
occurs aft] ! date t is #cj days aft] ! 
promulgation ( f9al regulations "u      
section #d4