,,ii #aac? ,,congress #b;d ,session ,s4 #bcgh ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,may #ba1 #bjad ,mr4 ,m55dez introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to e/abli% a regulatory framework = ! compreh5sive protection ( p]sonal data = individuals "u ! aegis ( ! ,f$]al ,trade ,commission1 to am5d ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih to improve provisions relat+ to collection1 use1 & disclosure ( p]sonal in=mation ( *ildr51 & = o!r purposes4 #a4 ,table ( cont5ts ,! table ( cont5ts = ?is ,act is z foll[s3 ,sec4 #a4 ,table ( cont5ts4 ,,title ,i--,comm]cial privacy ,sec4 #aja4 ,%ort title4 ,sec4 #ajb4 ,f9d+s4 ,sec4 #ajc4 ,def9itions4 ,subtitle ,a--,"r to security & acc\ntability ,sec4 #aaa4 ,security4 ,sec4 #aab4 ,acc\ntability4 ,sec4 #aac4 ,privacy by design4 ,subtitle ,b--,"r to notice & individual p>ticipation ,sec4 #aba4 ,transp>5t notice ( practices & purposes4 ,sec4 #abb4 ,individual p>ticipation4 ,subtitle ,c--,rights relat+ to data m9imization1 con/ra9ts on di/ribution1 & data integrity ,sec4 #aca4 ,data m9imization4 ,sec4 #acb4 ,con/ra9ts on di/ribution ( in=mation4 ,sec4 #acc4 ,data integrity4 ,subtitle ,d--,"r to notice ( brea*es ( security ,sec4 #ada4 ,def9itions4 ,sec4 #adb4 ,notice to individuals4 ,sec4 #adc4 ,notice to law en=cem5t4 ,subtitle ,e--,en=cem5t ,sec4 #aea4 ,g5]al application4 ,sec4 #aeb4 ,en=cem5t by ! ,f$]al ,trade ,commission4 ,sec4 #aec4 ,en=cem5t by ,attorney ,g5]al4 ,sec4 #aed4 ,en=cem5t by ,/ates4 ,sec4 #aee4 ,civil p5alties4 ,sec4 #aef4 ,effect on o!r laws4 ,sec4 #aeg4 ,no private "r ( action4 ,subtitle ,f--,co-,regulatory safe h>bor programs ,sec4 #afa4 ,e/abli%m5t ( safe h>bor programs4 ,sec4 #afb4 ,p>ticipation 9 safe h>bor program4 ,subtitle ,g--,application ) o!r ,f$]al laws ,sec4 #aga4 ,application ) o!r ,f$]al laws4 ,subtitle ,h--,developm5t ( comm]cial data privacy policy 9 ! ,dep>tm5t ( ,comm]ce ,sec4 #aha4 ,direction to develop comm]cial data privacy policy4 ,,title ,,ii--,onl9e privacy ( *ildr5 ,sec4 #bja4 ,%ort title4 ,sec4 #bjb4 ,f9d+s4 ,sec4 #bjc4 ,def9itions4 ,sec4 #bjd4 ,onl9e collection1 use1 & disclosure ( p]sonal in=mation ( *ildr54 ,sec4 #bje4 ,t>get$ m>ket+ to *ildr5 or m9ors4 ,sec4 #bjf4 ,digital ,m>ket+ ,bill ( ,rights = ,te5s & ,fair ,in=mation ,practices ,pr9ciples4 ,sec4 #bjg4 ,onl9e collection ( geolocation in=mation ( *ildr5 & m9ors4 ,sec4 #bjh4 ,removal ( cont5t4 ,sec4 #bji4 ,en=cem5t & applicability4 ,sec4 #baj4 ,rule = treatm5t ( us]s ( websites1 s]vices1 & applications direct$ to *ildr5 or m9ors4 ,sec4 #baa4 ,effective dates4 ,i ,comm]cial privacy #aja4 ,%ort title ,?is title may be cit$ z ! ,comm]cial ,privacy ,bill ( ,rights ,act ( #bjad4 #ajb4 ,f9d+s ,! ,congress f9ds ! foll[+3 7#a7 ,p]sonal privacy is wor?y ( protection ?r\gh appropriate legislation4 7#b7 ,tru/ 9 ! treatm5t ( p]sonally id5tifiable in=mation collect$ on & (f ! ,int]net is ess5tial = bus9esses to succe$4 7#c7 ,p]sons int]act+ ) o!rs engag$ 9 int]/ate comm]ce h a significant int]e/ 9 _! p]sonal in=mation1 z well z a "r to control h[ t in=mation is collect$1 us$1 /or$1 or transf]r$4 7#d7 ,p]sons engag$ 9 int]/ate comm]ce & collect+ p]sonally id5tifiable in=mation on individuals h a responsibility to treat t in=mation ) respect & 9 accordance ) common /&>ds4 7#e7 ,on ! day be=e ! date ( ! enactm5t ( ?is ,act1 ! laws ( ! ,f$]al ,gov]nm5t & ,/ate & local gov]nm5ts provid$ inadequate privacy protection = individuals engag+ 9 & int]act+ ) p]sons engag$ 9 int]/ate comm]ce4 7#f7 ,z ( ! day be=e ! date ( ! enactm5t ( ?is ,act1 ) ! exception ( ,f$]al ,trade ,commission en=cem5t ( laws aga9/ unfair & deceptive practices1 ! ,f$]al ,gov]nm5t has es*ew$ g5]al comm]cial privacy laws 9 favor ( indu/ry self-regulation1 :i* has l$ to sev]al self-polic+ s*emes1 "s ( :i* are en=ceable1 & "s ( :i* provide insuffici5t privacy protection to individuals4 7#g7 ,z ( ! day be=e ! date ( ! enactm5t ( ?is ,act1 _m collectors ( p]sonally id5tifiable in=mation h yet to provide basel9e fair in=mation practice protections = individuals4 7#h7 ,! ease ( ga!r+ & compil+ p]sonal in=mation on ! ,int]net & (f1 bo? ov]tly & surreptiti\sly1 is becom+ increas+ly effici5t & ef=tless due to advances 9 te*nology :i* h provid$ in=mation ga!r]s ! ability to compile seamlessly highly detail$ p]sonal hi/ories ( individuals4 7#i7 ,p]sonal in=mation requires great] privacy protection ?an is available on ! day be=e ! date ( ! enactm5t ( ?is ,act4 ,va/ am\nts ( p]sonal in=mation1 includ+ s5sitive in=mation1 ab\t individuals are collect$ on & (f ! ,int]net1 (t5 comb9$ & sold or o!rwise transf]r$ to ?ird p>ties1 = purposes unkn[n to an individual to :om ! p]sonally id5tifiable in=mation p]ta9s4 7#aj7 ,t[>d ! close ( ! #bj? c5tury1 z individuals' p]sonal in=mation 0 increas+ly collect$1 pr(il$1 & %>$ = comm]cial purposes1 & z te*nology advanc$ to facilitate ^! practices1 ,congress enact$ num]\s /atutes to protect privacy4 7#aa7 ,^? /atutes apply to ! gov]nm5t1 telephones1 cable television1 e-mail1 video tape r5tals1 & ! ,int]net 7b only ) respect to *ildr5 & law en=cem5t reque/s74 7#ab7 ,z 9 ^? in/ances1 ! ,f$]al ,gov]nm5t has a sub/antial int]e/ 9 creat+ a level play+ field ( protection across all collectors ( p]sonally id5tifiable in=mation1 bo? 9 ! ,unit$ ,/ates & abroad4 7#ac7 ,enhanc+ individual privacy protection 9 a balanc$ way t e/abli%es cle>1 consi/5t rules1 bo? dome/ically & int]nationally1 w /imulate comm]ce by in/ill+ great] consum] confid5ce at home & great] confid5ce abroad z m & m entities digitize p]sonally id5tifiable in=mation1 :e!r collect$1 /or$1 or us$ onl9e or (fl9e4 #ajc4 ,def9itions 7a7 ,9 g5]al ,subject to subsection 7b71 9 ?is title3 7#a7 ,commission ,! t]m ,commission means ! ,f$]al ,trade ,commission4 7#b7 ,cov]$ entity ,! t]m cov]$ entity means any p]son to :om ?is title applies "u section #aea4 7#c7 ,cov]$ in=mation 7,a7 ,9 g5]al ,except z provid$ 9 subp>agraph 7,b71 ! t]m cov]$ in=mation means only ! foll[+3 7i7 ,p]sonally id5tifiable in=mation4 7ii7 ,unique id5tifi] in=mation4 7iii7 ,any in=mation t is collect$1 us$1 or /or$ 9 connection ) p]sonally id5tifiable in=mation or unique id5tifi] in=mation 9 a mann] t may reasonably be us$ by ! p>ty collect+ ! in=mation to id5tify a specific individual4 7,b7 ,exception ,! t]m cov]$ in=mation does n include ! foll[+3 7i7 ,p]sonally id5tifiable in=mation obta9$ f public records t is n m]g$ ) cov]$ in=mation ga!r$ else:]e4 7ii7 ,p]sonally id5tifiable in=mation t is obta9$ f a =um-- 7,i7 :]e ! individual volunt>ily %>$ ! in=mation or au?oriz$ ! in=mation to be %>$2 & 7,,ii7 t-- 7aa7 is widely & publicly available & 0 n made publicly available 9 bad fai?2 & 7bb7 conta9s no re/rictions on :o c access & view su* in=mation4 7iii7 ,p]sonally id5tifiable in=mation report$ 9 public m$ia4 7iv7 ,p]sonally id5tifiable in=mation d$icat$ to contact+ an individual at ! individual's place ( "w4 7#d7 ,e/abli%$ bus9ess relation%ip ,! t]m e/abli%$ bus9ess relation%ip means1 ) respect to a cov]$ entity & a p]son1 a relation%ip =m$ ) or )\t ! ex*ange ( consid]ation1 involv+ ! e/abli%m5t ( an acc\nt by ! p]son ) ! cov]$ entity = ! receipt ( products or s]vices (f]$ by ! cov]$ entity4 7#e7 ,p]sonally id5tifiable in=mation ,! t]m p]sonally id5tifiable in=mation means only ! foll[+3 7,a7 ,any ( ! foll[+ in=mation ab\t an individual3 7i7 ,! fir/ "n 7or initial7 & la/ "n ( an individual1 :e!r giv5 at bir? or "t ( adoption1 or result+ f a lawful *ange ( "n4 7ii7 ,! po/al address ( a physical place ( resid5ce ( su* individual4 7iii7 ,an e-mail address4 7iv7 ,a telephone numb] or mobile device numb]4 7v7 ,a social security numb] or o!r gov]nm5t issu$ id5tification numb] issu$ to su* individual4 7vi7 ,! acc\nt numb] ( a cr$it c>d issu$ to su* individual4 7vii7 ,unique id5tifi] in=mation t alone c be us$ to id5tify a specific individual4 7viii7 ,biometric data ab\t su* individual1 includ+ f+]pr9ts & ret9a scans4 7,b7 ,if us$1 transf]r$1 or /or$ 9 connection ) #a or m ( ! items ( in=mation describ$ 9 subp>agraph 7,a71 any ( ! foll[+3 7i7 ,a date ( bir?4 7ii7 ,! numb] ( a c]tificate ( bir? or adoption4 7iii7 ,a place ( bir?4 7iv7 ,unique id5tifi] in=mation t alone _c be us$ to id5tify a specific individual4 7v7 ,precise geographic location1 at ! same degree ( specificity z a global position+ sy/em or equival5t sy/em1 & n includ+ any g5]al geographic in=mation t may be d]iv$ f an ,int]net ,protocol address4 7vi7 ,in=mation ab\t an individual's quantity1 te*nical configuration1 type1 de/9ation1 location1 & am\nt ( uses ( voice s]vices1 reg>dless ( te*nology us$4 7vii7 ,any o!r in=mation conc]n+ an individual t may reasonably be us$ by ! p>ty us+1 collect+1 or /or+ t in=mation to id5tify t individual4 7#f7 ,s5sitive p]sonally id5tifiable in=mation ,! t]m s5sitive p]sonally id5tifiable in=mation means-- 7,a7 p]sonally id5tifiable in=mation :i*1 if lo/1 compromis$1 or disclos$ )\t au?orization ei!r alone or ) o!r in=mation1 c>ries a significant risk ( economic or physical h>m2 or 7,b7 in=mation relat$ to-- 7i7 a p>ticul> m$ical condition or a heal? record2 or 7ii7 ! religi\s affiliation ( an individual4 7#g7 ,?ird p>ty 7,a7 ,9 g5]al ,! t]m ?ird p>ty means1 ) respect to a cov]$ entity1 a p]son t-- 7i7 is-- 7,i7 n relat$ to ! cov]$ entity by common own]%ip or corporate control2 or 7,,ii7 relat$ to ! cov]$ entity by common own]%ip or corporate control & an ord9>y consum] w\ld n und]/& t ! cov]$ entity & ! p]son 7 relat$ by common own]%ip or corporate control2 7ii7 is n a s]vice provid] us$ by ! cov]$ entity to receive p]sonally id5tifiable in=mation or s5sitive p]sonally id5tifiable in=mation 9 p]=m+ s]vices or functions on behalf ( & "u ! in/ruction ( ! cov]$ entity2 & 7iii7 ) respect to ! collection ( cov]$ in=mation ( an individual1 does n h an e/abli%$ bus9ess relation%ip ) ! individual & does n id5tify itself to ! individual at ! "t ( su* collection 9 a cle> & conspicu\s mann] t is visible to ! individual4 7,b7 ,common br&s ,! t]m ?ird p>ty may include1 ) respect to a cov]$ entity1 a p]son :o op]ates "u a common br& ) ! cov]$ entity4 7#h7 ,unau?oriz$ use 7,a7 ,9 g5]al ,! t]m unau?oriz$ use means ! use ( cov]$ in=mation by a cov]$ entity or its s]vice provid] = any purpose n au?oriz$ by ! individual to :om su* in=mation relates4 7,b7 ,exceptions ,except z provid$ 9 subp>agraph 7,c71 ! t]m unau?oriz$ use does n include use ( cov]$ in=mation relat+ to an individual by a cov]$ entity or its s]vice provid] z foll[s3 7i7 ,to process & en=ce a transaction or deliv] a s]vice reque/$ by t individual4 7ii7 ,to op]ate ! cov]$ entity t is provid+ a transaction or deliv]+ a s]vice reque/$ by t individual1 su* z inv5tory managem5t1 f9ancial report+ & acc\nt+1 plann+1 & product or s]vice improvem5t or =eca/+4 7iii7 ,to prev5t or detect fraud or to provide = a physically or virtually secure environm5t4 7iv7 ,to inve/igate a possible crime4 7v7 ,t is requir$ by a provision ( law or legal process4 7vi7 ,to m>ket or adv]tise to an individual f a cov]$ entity )9 ! context ( a cov]$ entity's own ,int]net website1 s]vices1 or products if ! cov]$ in=mation us$ = su* m>ket+ or adv]tis+ 0-- 7,i7 collect$ directly by ! cov]$ entity2 or 7,,ii7 %>$ ) ! cov]$ entity-- 7aa7 at ! affirmative reque/ ( ! individual2 or 7bb7 by an entity ) :i* ! individual has an e/abli%$ bus9ess relation%ip4 7vii7 ,use t is necess>y = ! improvem5t ( transaction or s]vice deliv]y ?r\gh rese>*1 te/+1 analysis1 & developm5t4 7viii7 ,use t is necess>y = int]nal op]ations1 includ+ ! foll[+3 7,i7 ,collect+ cu/om] satisfaction surveys & conduct+ cu/om] rese>* to improve cu/om] s]vice in=mation4 7,,ii7 ,in=mation collect$ by an ,int]net website ab\t ! visits to su* website & ! click-?r\gh rates at su* website-- 7aa7 to improve website navigation & p]=mance2 or 7bb7 to und]/& & improve ! int]action ( an individual ) ! adv]tis+ ( a cov]$ entity4 7ix7 ,use-- 7,i7 by a cov]$ entity ) :i* an individual has an e/abli%$ bus9ess relation%ip2 7,,ii7 :i* ! individual c\ld h reasonably expect$1 at ! "t su* relation%ip 0 e/abli%$1 0 relat$ to a s]vice provid$ pursuant to su* relation%ip2 & 7,,iii7 :i* does n con/itute a mat]ial *ange 9 use or practice f :at c\ld h reasonably be5 expect$4 7,c7 ,sav+s ,a use ( cov]$ in=mation reg>d+ an individual by a cov]$ entity or its s]vice provid] may only be exclud$ "u subp>agraph 7,b7 f ! def9ition ( unau?oriz$ use "u subp>agraph 7,a7 if ! use is reasonable & consi/5t ) ! practices & purposes describ$ 9 ! notice giv5 ! individual 9 accordance ) section #aba7;a77#a74 7#i7 ,unique id5tifi] in=mation ,! t]m unique id5tifi] in=mation means a unique p]si/5t id5tifi] associat$ ) an individual or a network$ device1 includ+ a cu/om] numb] held 9 a cookie1 a us] ,,id1 a processor s]ial numb]1 or a device s]ial numb]4 7b7 ,modifi$ def9ition by rulemak+ ,if ! ,commission det]m9es t a t]m def9$ 9 any ( p>agraphs 7#c7 ?r\gh 7#h7 is n reasonably suffici5t to protect an individual f unfair or deceptive acts or practices1 ! ,commission may by rule modify su* def9ition z ! ,commission consid]s appropriate to protect su* individual f an unfair or deceptive act or practice to ! ext5t t ! ,commission det]m9es w n unreasonably imp$e int]/ate comm]ce4 ,a ,"r to security & acc\ntability #aaa4 ,security 7a7 ,rulemak+ requir$ ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all initiate a rulemak+ proce$+ to require ea* cov]$ entity to c>ry out security measures to protect ! cov]$ in=mation x collects & ma9ta9s4 7b7 ,proportion ,! requirem5ts prescrib$ "u subsection 7a7 %all provide = security measures t are proportional to ! size1 type1 nature1 & s5sitivity ( ! cov]$ in=mation a cov]$ entity collects4 7c7 ,consi/5cy ,! requirem5ts prescrib$ "u subsection 7a7 %all be consi/5t ) guidance provid$ by ! ,commission & recogniz$ indu/ry practices = safety & security on ! day be=e ! date ( ! enactm5t ( ?is ,act4 7d7 ,te*nological means ,9 a rule prescrib$ "u subsection 7a71 ! ,commission may n require a specific te*nological means ( meet+ a requirem5t4 #aab4 ,acc\ntability ,ea* cov]$ entity %all1 9 a mann] proportional to ! size1 type1 & nature ( ! cov]$ in=mation x collects-- 7#a7 h manag]ial acc\ntability1 proportional to ! size & /ructure ( ! cov]$ entity1 = ! adoption & implem5tation ( policies consi/5t ) ?is title2 7#b7 h a process to respond to non-frivol\s inquiries f individuals reg>d+ ! collection1 use1 transf]1 or /orage ( cov]$ in=mation relat+ to su* individuals2 & 7#c7 describe ! means ( compliance ( ! cov]$ entity ) ! requirem5ts ( ?is ,act ^u reque/ f-- 7,a7 ! ,commission2 or 7,b7 an appropriate safe h>bor program e/abli%$ "u section #aea4 #aac4 ,privacy by design ,ea* cov]$ entity %all1 9 a mann] proportional to ! size1 type1 & nature ( ! cov]$ in=mation t x collects1 implem5t a compreh5sive in=mation privacy program by-- 7#a7 incorporat+ necess>y developm5t processes & practices ?r\gh\t ! product life cycle t are design$ to safegu>d ! p]sonally id5tifiable in=mation t is cov]$ in=mation ( individuals bas$ on-- 7,a7 ! reasonable expectations ( su* individuals reg>d+ privacy2 & 7,b7 ! relevant ?reats t ne$ to be gu>d$ aga9/ 9 meet+ ^? expectations2 & 7#b7 ma9ta9+ appropriate managem5t processes & practices ?r\gh\t ! data life cycle t are design$ to ensure t in=mation sy/ems comply )-- 7,a7 ! provisions ( ?is title2 7,b7 ! privacy policies ( a cov]$ entity2 & 7,c7 ! privacy pref]5ces ( individuals t are consi/5t ) ! cons5t *oices & relat$ me*anisms ( individual p>ticipation z describ$ 9 section #abb4 ,b ,"r to notice & individual p>ticipation #aba4 ,transp>5t notice ( practices & purposes 7a7 ,9 g5]al ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all initiate a rulemak+ proce$+ to require ea* cov]$ entity-- 7#a7 to provide accurate1 cle>1 concise1 & timely notice to individuals (-- 7,a7 ! practices ( ! cov]$ entity reg>d+ ! collection1 use1 transf]1 & /orage ( cov]$ in=mation2 & 7,b7 ! specific purposes ( ^? practices2 7#b7 to provide accurate1 cle>1 concise1 & timely notice to individuals be=e implem5t+ a mat]ial *ange 9 su* practices2 & 7#c7 to ma9ta9 ! notice requir$ by p>agraph 7#a7 9 a =m t individuals c readily access4 7b7 ,compliance & o!r consid]ations ,9 ! rulemak+ requir$ by subsection 7a71 ! ,commission-- 7#a7 %all consid] ! types ( devices & me?ods individuals w use to access ! requir$ notice2 7#b7 may provide t a cov]$ entity unable to provide ! requir$ notice :5 in=mation is collect$ may comply ) ! requirem5t ( subsection 7a77#a7 by provid+ an alt]native "t & means = an individual to receive ! requir$ notice promptly2 7#c7 may draft guidance = cov]$ entities to use 9 design+ _! own notice & may include a draft model template = cov]$ entities to use 9 design+ _! own notice2 & 7#d7 may provide guidance on h[ to con/ruct comput]-readable notices or h[ to use o!r te*nology to deliv] ! requir$ notice4 #abb4 ,individual p>ticipation 7a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all initiate a rulemak+ proce$+ to require ea* cov]$ entity-- 7#a7 to (f] individuals a cle> & conspicu\s me*anism = opt-9 cons5t = any use ( _! cov]$ in=mation t w\ld o!rwise be unau?oriz$ use2 7#b7 to (f] individuals a robu/1 cle>1 & conspicu\s me*anism = opt-9 cons5t = ! use by ?ird p>ties ( ! individuals' cov]$ in=mation = behavioral adv]tis+ or m>ket+2 7#c7 to provide any individual to :om ! p]sonally id5tifiable in=mation t is cov]$ in=mation p]ta9s1 & :i* ! cov]$ entity or its s]vice provid] /ores1 appropriate & reasonable-- 7,a7 access to su* in=mation2 & 7,b7 me*anisms to correct su* in=mation to improve ! accuracy ( su* in=mation2 & 7#d7 9 ! case t a cov]$ entity ent]s bankruptcy or an individual reque/s ! t]m9ation ( a s]vice provid$ by ! cov]$ entity to ! individual or t]m9ation ( "s o!r relation%ip ) ! cov]$ entity1 to p]mit ! individual to easily reque/ t-- 7,a7 all ( ! p]sonally id5tifiable in=mation t is cov]$ in=mation t ! cov]$ entity ma9ta9s relat+ to ! individual1 except = in=mation ! individual au?oriz$ ! %>+ ( or :i* ! individual %>$ ) ! cov]$ entity 9 a =um t is widely & publicly available1 be r5d]$ n p]sonally id5tifiable2 or 7,b7 if r5d]+ su* in=mation n p]sonally id5tifiable is n possible1 to cease ! unau?oriz$ use or transf] to a ?ird p>ty = an unau?oriz$ use ( su* in=mation or to cease use ( su* in=mation = m>ket+1 unless su* unau?oriz$ use or transf] is o!rwise requir$ by a provision ( law4 7b7 ,unau?oriz$ use transf]s ,9 ! rulemak+ requir$ by subsection 7a71 ! ,commission %all provide t ) respect to transf]s ( cov]$ in=mation to a ?ird p>ty = :i* an individual provides opt-9 cons5t1 ! ?ird p>ty to :i* ! in=mation is transf]r$ may n use su* in=mation = any unau?oriz$ use o!r ?an a use-- 7#a7 specifi$ pursuant to ! purposes /at$ 9 ! requir$ notice "u section #aba7;a72 & 7#b7 au?oriz$ by ! individual :5 ! individual grant$ cons5t = ! transf] ( ! in=mation to ! ?ird p>ty4 7c7 ,alt]native means ,to t]m9ate use ( cov]$ in=mation ,9 ! rulemak+ requir$ by subsection 7a71 ! ,commission %all all[ a cov]$ entity to provide individuals an alt]native means1 9 lieu ( ! access1 cons5t1 & correction requirem5ts1 ( prohibit+ a cov]$ entity f use or transf] ( t individual's cov]$ in=mation4 7d7 ,s]vice provid]s 7#a7 ,9 g5]al ,! use ( a s]vice provid] by a cov]$ entity to receive cov]$ in=mation 9 p]=m+ s]vices or functions on behalf ( & "u ! in/ruction ( ! cov]$ entity does n con/itute an unau?oriz$ use ( su* in=mation by ! cov]$ entity if ! cov]$ entity & ! s]vice provid] execute a contract t requires ! s]vice provid] to collect1 use1 & /ore ! in=mation on behalf ( ! cov]$ entity 9 a mann] consi/5t )-- 7,a7 ! requirem5ts ( ?is title2 & 7,b7 ! policies & practices relat$ to su* in=mation ( ! cov]$ entity4 7#b7 ,transf]s betwe5 s]vice provid]s = a cov]$ entity ,! disclosure by a s]vice provid] ( cov]$ in=mation pursuant to a contract ) a cov]$ entity to ano!r s]vice provid] 9 ord] to p]=m ! same s]vice or functions = t cov]$ entity does n con/itute an unau?oriz$ use4 7#c7 ,liability rema9s ) cov]$ entity ,a cov]$ entity rema9s responsible & liable = ! protection ( cov]$ in=mation t has be5 transf]r$ to a s]vice provid] = process+1 not)/&+ any agreem5t to ! contr>y betwe5 a cov]$ entity & ! s]vice provid]4 ,c ,rights relat+ to data m9imization1 con/ra9ts on di/ribution1 & data integrity #aca4 ,data m9imization ,ea* cov]$ entity %all-- 7#a7 collect only z mu* cov]$ in=mation relat+ to an individual z is reasonably necess>y-- 7,a7 to process or en=ce a transaction or deliv] a s]vice reque/$ by su* individual2 7,b7 = ! cov]$ entity to provide a transaction or deliv]+ a s]vice reque/$ by su* individual1 su* z inv5tory managem5t1 f9ancial report+ & acc\nt+1 plann+1 product or s]vice improvem5t or =eca/+1 & cu/om] support & s]vice2 7,c7 to prev5t or detect fraud or to provide = a secure environm5t2 7,d7 to inve/igate a possible crime2 7,e7 to comply ) a provision ( law2 7,f7 = ! cov]$ entity to m>ket or adv]tise to su* individual if ! cov]$ in=mation us$ = su* m>ket+ or adv]tis+ 0 collect$ directly by ! cov]$ entity2 or 7,g7 = int]nal op]ations1 includ+-- 7i7 collect+ cu/om] satisfaction surveys & conduct+ cu/om] rese>* to improve cu/om] s]vice2 & 7ii7 collection f an ,int]net website ( in=mation ab\t visits & click-?r\gh rates relat+ to su* website to improve-- 7,i7 website navigation & p]=mance2 & 7,,ii7 ! cu/om]'s exp]i5ce2 7#b7 reta9 cov]$ in=mation = only su* duration z-- 7,a7 ) respect to ! provision ( a transaction or deliv]y ( a s]vice to an individual-- 7i7 is necess>y to provide su* transaction or deliv] su* s]vice to su* individual2 or 7ii7 if su* s]vice is ongo+1 is reasonable = ! ongo+ nature ( ! s]vice2 or 7,b7 is requir$ by a provision ( law2 7#c7 reta9 cov]$ in=mation only = ! purpose x 0 collect$1 or reasonably relat$ purposes2 & 7#d7 ex]cise reasonable data ret5tion proc$ures ) respect to bo? ! initial collection & subsequ5t ret5tion4 #acb4 ,con/ra9ts on di/ribution ( in=mation 7a7 ,9 g5]al ,ea* cov]$ entity %all-- 7#a7 require by contract t any ?ird p>ty to :i* x transf]s cov]$ in=mation use ! in=mation only = purposes t are consi/5t )-- 7,a7 ! provisions ( ?is title2 & 7,b7 z specifi$ 9 ! contract2 7#b7 require by contract t su* ?ird p>ty may n comb9e in=mation t ! cov]$ entity has transf]r$ to x1 t relates to an individual1 & t is n p]sonally id5tifiable in=mation ) o!r in=mation 9 ord] to id5tify su* individual1 unless ! cov]$ entity has obta9$ ! opt-9 cons5t ( su* individual = su* comb9ation & id5tification2 & 7#c7 be=e execut+ a contract ) a ?ird p>ty-- 7,a7 assure ?r\gh due dilig5ce t ! ?ird p>ty is a legitimate organization2 & 7,b7 9 ! case ( a mat]ial violation ( ! contract1 at a m9imum notify ! ,commission ( su* violation4 7b7 ,transf]s to unreliable ?ird p>ties prohibit$ ,a cov]$ entity may n transf] cov]$ in=mation to a ?ird p>ty t ! cov]$ entity kn[s-- 7#a7 has int5tionally or willfully violat$ a contract requir$ by subsection 7a72 & 7#b7 is reasonably likely to violate su* contract4 7c7 ,application ( rules to ?ird p>ties 7#a7 ,9 g5]al ,except z provid$ 9 p>agraph 7#b71 a ?ird p>ty t receives cov]$ in=mation f a cov]$ entity %all be subject to ! provisions ( ?is ,act z if x 7 a cov]$ entity4 7#b7 ,exemption ,! ,commission may1 z x det]m9es appropriate1 exempt classes ( ?ird p>ties f liability "u any provision ( subtitle ,b if ! ,commission f9ds t-- 7,a7 su* class ( ?ird p>ties _c reasonably comply ) su* provision2 or 7,b7 ) respect to cov]$ in=mation relat+ to individuals t is transf]r$ to su* class1 compliance by su* class ) su* provision w\ld n suffici5tly b5efit su* individuals4 #acc4 ,data integrity 7a7 ,9 g5]al ,ea* cov]$ entity %all attempt to e/abli% & ma9ta9 reasonable proc$ures to ensure t p]sonally id5tifiable in=mation t is cov]$ in=mation & ma9ta9$ by ! cov]$ entity is accurate 9 ^? in/ances :]e ! cov]$ in=mation c\ld be us$ to d5y consum]s b5efits or cause significant h>m4 7b7 ,exception ,subsection 7a7 %all n apply to cov]$ in=mation ( an individual ma9ta9$ by a cov]$ entity t is provid$-- 7#a7 directly to ! cov]$ entity by ! individual2 7#b7 to ! cov]$ entity by ano!r entity at ! reque/ ( ! individual2 7#c7 to prev5t or detect fraud2 or 7#d7 to provide = a secure environm5t4 ,d ,"r to notice ( brea*es ( security #ada4 ,def9itions ,9 ?is subtitle3 7#a7 ,brea* ( security 7,a7 ,9 g5]al ,! t]m brea* ( security means compromise ( ! security1 confid5tiality1 or integrity (1 or loss (1 data 9 electronic =m t results 91 or !re is a reasonable basis to conclude has result$ 91 unau?oriz$ access to or acquisition ( p]sonally id5tifiable in=mation f a cov]$ entity4 7,b7 ,exclusions ,! t]m brea* ( security does n include-- 7i7 a good fai? acquisition ( p]sonally id5tifiable in=mation by a cov]$ entity1 or an employee or ag5t ( a cov]$ entity1 if ! p]sonally id5tifiable in=mation is n subject to fur!r use or unau?oriz$ disclosure2 7ii7 any lawfully au?oriz$ inve/igative1 protective1 or intellig5ce activity ( a law en=cem5t or an intellig5ce ag5cy ( ! ,unit$ ,/ates1 a ,/ate1 or a political subdivision ( a ,/ate2 or 7iii7 ! release ( a public record n o!rwise subject to confid5tiality or nondisclosure requirem5ts4 7#b7 ,data 9 electronic =m ,! t]m data 9 electronic =m means any data /or$ electronically or digitally on any comput] sy/em or o!r database1 includ+ recordable tapes & o!r mass /orage devices4 7#c7 ,designat$ entity ,! t]m designat$ entity means ! ,f$]al ,gov]nm5t entity designat$ by ! ,secret>y ( ,homel& ,security "u section #adc7;a74 7#d7 ,id5tity !ft ,! t]m id5tity !ft means ! unau?oriz$ use ( ano!r p]son's p]sonally id5tifiable in=mation = ! purpose ( engag+ 9 comm]cial transactions "u ! id5tity ( su* o!r p]son1 includ+ any contact t violates section #ajbh;,a ( title #ah1 ,unit$ ,/ates ,code4 7#e7 ,major cr$it report+ ag5cy ,! t]m major cr$it report+ ag5cy means a consum] report+ ag5cy t compiles & ma9ta9s files on consum]s on a nationwide basis )9 ! mean+ ( section #fjc7p7 ( ! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha;a7p774 7#f7 ,s]vice provid] ,! t]m s]vice provid] means a p]son t provides electronic data transmission1 r\t+1 int]m$iate & transi5t /orage1 or connections to its sy/em or network1 :]e ! p]son provid+ su* s]vices does n select or modify ! cont5t ( ! electronic data1 is n ! s5d] or ! int5d$ recipi5t ( ! data1 & does n diff]5tiate p]sonally id5tifiable in=mation f o!r in=mation t su* p]son transmits1 r\tes1 or /ores1 or = :i* su* p]son provides connections4 ,any su* p]son %all be treat$ z a s]vice provid] "u ?is subtitle only to ! ext5t t x is engag$ 9 ! provision ( su* transmission1 r\t+1 int]m$iate & transi5t /orage1 or connections4 #adb4 ,notice to individuals 7a7 ,9 g5]al ,a cov]$ entity t owns or possesses data 9 electronic =m conta9+ p]sonally id5tifiable in=mation1 foll[+ ! discov]y ( a brea* ( security ( ! sy/em ma9ta9$ by ! cov]$ entity t conta9s su* in=mation1 %all notify-- 7#a7 ea* individual :o is a citiz5 or resid5t ( ! ,unit$ ,/ates & ^: p]sonally id5tifiable in=mation has be51 or is reasonably believ$ to h be51 acquir$ or access$ f ! cov]$ entity z a result ( ! brea* ( security2 & 7#b7 ! ,commission1 unless ! cov]$ entity has notifi$ ! designat$ entity "u section #adc4 7b7 ,special notification requirem5ts 7#a7 ,?ird p>ties ,9 ! ev5t ( a brea* ( security ( a sy/em ma9ta9$ by a ?ird p>ty t has be5 contract$ to ma9ta9 or process data 9 electronic =m conta9+ p]sonally id5tifiable in=mation on behalf ( a cov]$ entity :o owns or possesses su* data1 ! ?ird p>ty %all notify ! cov]$ entity ( ! brea* ( security4 7#b7 ,s]vice provid]s ,if a s]vice provid] becomes aw>e ( a brea* ( security ( data 9 electronic =m conta9+ p]sonally id5tifiable in=mation t is own$ or possess$ by ano!r cov]$ entity t connects to or uses a sy/em or network provid$ by ! s]vice provid] = ! purpose ( transmitt+1 r\t+1 or provid+ int]m$iate or transi5t /orage ( su* data1 ! s]vice provid] %all notify ( ! brea* ( security only ! cov]$ entity :o initiat$ su* connection1 transmission1 r\t+1 or /orage if su* cov]$ entity c be reasonably id5tifi$4 7#c7 ,coord9ation ( notification ) cr$it report+ ag5cies 7,a7 ,9 g5]al ,if a cov]$ entity is requir$ to provide notification to m ?an #e1jjj individuals "u subsection 7a77#a71 ! cov]$ entity also %all notify ea* major cr$it report+ ag5cy ( ! tim+ & di/ribution ( ! notices1 except :5 ! only p]sonally id5tifiable in=mation t is ! subject ( ! brea* ( security is ! individual's fir/ "n or initial & la/ "n1 or address1 or phone numb]1 9 comb9ation ) a cr$it or debit c>d numb]1 & any requir$ security code4 7,b7 ,notice to cr$it report+ ag5cies be=e individuals ,su* notice %all be giv5 to ea* cr$it report+ ag5cy )\t unreasonable delay &1 if x w n delay notice to ! affect$ individuals1 prior to ! di/ribution ( notices to ! affect$ individuals4 7c7 ,timel9ess ( notification 7#a7 ,9 g5]al ,all notifications requir$ "u ?is section %all be made )\t unreasonable delay foll[+ ! discov]y by ! cov]$ entity ( a security brea*4 7#b7 ,reasonable delay 7,a7 ,9 g5]al ,reasonable delay "u ?is subsection may include any "t necess>y to det]m9e ! scope ( ! security brea*1 prev5t fur!r disclosures1 re/ore ! reasonable integrity ( ! data sy/em1 & provide notice to law en=cem5t :5 requir$4 7,b7 ,ext5sion 7i7 ,9 g5]al ,except z provid$ 9 subsection 7d71 delay ( notification %all n exce$ #fj days foll[+ ! discov]y ( ! security brea*1 unless ! cov]$ entity reque/s an ext5sion ( "t & ! ,commission det]m9es 9 writ+ t additional "t is reasonably necess>y to det]m9e ! scope ( ! security brea*1 prev5t fur!r disclosures1 re/ore ! reasonable integrity ( ! data sy/em1 or to provide notice to ! designat$ entity4 7ii7 ,approval ( reque/ ,if ! ,commission approves ! reque/ = delay1 ! cov]$ entity may delay ! p]iod = notification = additional p]iods ( up to #cj days4 7#c7 ,burd5 ( production ,! cov]$ entity1 ?ird p>ty1 or s]vice provid] requir$ to provide notice "u ?is title %all1 ^u ! reque/ ( ! ,commission provide records or o!r evid5ce ( ! notifications requir$ "u ?is subtitle1 includ+ to ! ext5t applicable1 ! reasons = any delay ( notification4 7d7 ,me?od & cont5t ( notification 7#a7 ,direct notification 7,a7 ,me?od ( direct notification ,except z provid$ 9 p>agraph 7#b71 a cov]$ entity %all be 9 compliance ) ! notification requirem5t "u subsection 7a77#a7 if-- 7i7 ! cov]$ entity provides conspicu\s & cle>ly id5tifi$ notification-- 7,i7 9 writ+2 or 7,,ii7 by e-mail or o!r electronic means if-- 7aa7 ! cov]$ entity's prim>y me?od ( communication ) ! individual is by e-mail or su* o!r electronic means2 or 7bb7 ! individual has cons5t$ to receive notification by e-mail or su* o!r electronic means & su* notification is provid$ 9 a mann] t is consi/5t ) ! provisions p]mitt+ electronic transmission ( notices "u section #aja ( ! ,electronic ,signatures 9 ,global & ,national ,comm]ce ,act 7#ae ,u4,s4,c4 #gjja72 & 7ii7 ! me?od ( notification select$ "u clause 7i7 c reasonably be expect$ to rea* ! int5d$ individual4 7,b7 ,cont5t ( direct notification ,ea* me?od ( notification "u subp>agraph 7,a7 %all include ! foll[+3 7i7 ,! date1 e/imat$ date1 or e/imat$ date range ( ! brea* ( security4 7ii7 ,a description ( ! p]sonally id5tifiable in=mation t 0 or is reasonably believ$ to h be5 acquir$ or access$ z a result ( ! brea* ( security4 7iii7 ,a telephone numb] t an individual c use at no co/ to ! individual to contact ! cov]$ entity to inquire ab\t ! brea* ( security or ! in=mation ! cov]$ entity ma9ta9$ ab\t t individual4 7iv7 ,notice t ! individual may be entitl$ to consum] cr$it reports "u subsection 7e77#a74 7v7 ,in/ructions h[ an individual c reque/ consum] cr$it reports "u subsection 7e77#a74 7vi7 ,a telephone numb]1 t an individual c use at no co/ to ! individual1 & an address to contact ea* major cr$it report+ ag5cy4 7vii7 ,a telephone numb]1 t an individual c use at no co/ to ! individual1 & an ,int]net website address to obta9 in=mation reg>d+ id5tity !ft f ! ,commission4 7#b7 ,sub/itute notification 7,a7 ,circum/ances giv+ rise to sub/itute notification ,a cov]$ entity requir$ to provide notification to individuals "u subsection 7a77#a7 may provide notification "u ?is p>agraph in/ead ( p>agraph 7#a7 ( ?is subsection if-- 7i7 notification "u p>agraph 7#a7 is n feasible due to lack ( suffici5t contact in=mation = ! individual requir$ to be notifi$2 or 7ii7 ! cov]$ entity owns or possesses data 9 electronic =m conta9+ p]sonally id5tifiable in=mation ( few] ?an #aj1jjj individuals & direct notification is n feasible due to excessive co/ to ! cov]$ entity requir$ to provide su* notification relative to ! res\rces ( su* cov]$ entity1 z det]m9$ 9 accordance ) ! regulations issu$ by ! ,commission "u p>agraph 7#c77;,a74 7,b7 ,me?od ( sub/itute notification ,notification "u ?is p>agraph %all include ! foll[+3 7i7 ,conspicu\s & cle>ly id5tifi$ notification by e-mail to ! ext5t ! cov]$ entity has an e-mail address = an individual :o is entitl$ to notification "u subsection 7a77#a74 7ii7 ,conspicu\s & cle>ly id5tifi$ notification on ! ,int]net website ( ! cov]$ entity if ! cov]$ entity ma9ta9s an ,int]net website4 7iii7 ,notification to pr9t & to broadca/ m$ia1 includ+ major m$ia 9 metropolitan & rural areas :]e ! individuals ^: p]sonally id5tifiable in=mation 0 acquir$ or access$ reside4 7,c7 ,cont5t ( sub/itute notification ,ea* me?od ( notification "u ?is p>agraph %all include ! foll[+3 7i7 ,! date1 e/imat$ date1 or e/imat$ date range ( ! brea* ( security4 7ii7 ,a description ( ! types ( p]sonally id5tifiable in=mation t 7 or are reasonably believ$ to h be5 acquir$ or access$ z a result ( ! brea* ( security4 7iii7 ,notice t an individual may be entitl$ to consum] cr$it reports "u subsection 7e77#a74 7iv7 ,in/ructions h[ an individual c reque/ consum] cr$it reports "u subsection 7e77#a74 7v7 ,a telephone numb] t an individual c use at no co/ to ! individual to le>n :e!r ! individual's p]sonally id5tifiable in=mation is includ$ 9 ! brea* ( security4 7vi7 ,a telephone numb]1 t an individual c use at no co/ to ! individual1 & an address to contact ea* major cr$it report+ ag5cy4 7vii7 ,a telephone numb]1 t an individual c use at no co/ to ! individual1 & an ,int]net website address to obta9 in=mation f ! ,commission reg>d+ id5tity !ft4 7#c7 ,regulations & guidance 7,a7 ,regulations conc]n+ sub/itute notification 7i7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all prescribe crit]ia = det]m9+ circum/ances "u :i* notification may be provid$ "u p>agraph 7#b71 includ+ crit]ia = det]m9+ :e!r provid+ notification "u p>agraph 7#a7 is n feasible due to excessive co/s to ! cov]$ entity requir$ to provide su* notification relative to ! res\rces ( su* cov]$ entity4 7ii7 ,o!r circum/ances ,! regulations requir$ by clause 7i7 may also id5tify o!r circum/ances 9 :i* notification "u p>agraph 7#b7 w\ld be appropriate1 includ+ circum/ances "u :i* ! co/ ( provid+ direct notification exce$s ! b5efits to individuals4 7,b7 ,guidance 7i7 ,9 g5]al ,! ,commission1 9 consultation ) ! ,adm9i/rator ( ! ,small ,bus9ess ,adm9i/ration1 %all publi% & o!rwise make available g5]al guidance ) respect to compliance ) ?is subsection4 7ii7 ,cont5ts ,! guidance requir$ by clause 7i7 %all include ! foll[+3 7,i7 ,a description ( writt5 or e-mail notification t complies ) p>agraph 7#a74 7,,ii7 ,guidance on ! cont5t ( notification "u p>agraph 7#b71 includ+ ! ext5t ( notification to pr9t & broadca/ m$ia t complies ) subp>agraph 7,b77iii7 ( su* p>agraph4 7e7 ,o!r obligations foll[+ brea* 7#a7 ,9 g5]al ,subject to ! provisions ( ?is subsection1 n lat] ?an #fj days aft] ! date ( a reque/ by an individual :o receiv$ notification "u subsection 7a77#a7 & qu>t]ly !reaft] = #b ye>s1 a cov]$ entity requir$ to provide notification "u su* subsection to su* individual %all provide1 or arrange = ! provision (1 to su* individual at no co/ to su* individual1 consum] cr$it reports f at lea/ #a major cr$it report+ ag5cy4 7#b7 ,limitation ,p>agraph 7#a7 %all n apply if ! only p]sonally id5tifiable in=mation t is ! subject ( ! brea* ( security is ! individual's fir/ "n or initial & la/ "n1 or address1 or phone numb]1 9 comb9ation ) a cr$it or debit c>d numb]1 & any requir$ security code4 7#c7 ,rulemak+ ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all prescribe ! foll[+3 7,a7 ,crit]ia = det]m9+ ! circum/ances "u :i* a cov]$ entity requir$ to provide notification "u subsection 7a77#a7 mu/ provide or arrange = ! provision ( free consum] cr$it reports "u ?is subsection4 7,b7 ,a simple process "u :i* a cov]$ entity t is a small bus9ess conc]n or small nonpr(it organization may reque/ a full or a p>tial waiv] or a modifi$ or an alt]native means ( comply+ ) ?is subsection if provid+ free consum] cr$it reports is n feasible due to excessive co/s relative to ! res\rces ( su* cov]$ entity & relative to ! level ( h>m1 to affect$ individuals1 caus$ by ! brea* ( security4 7#d7 ,def9itions ,9 ?is subsection3 7,a7 ,small bus9ess conc]n ,! t]m small bus9ess conc]n has ! mean+ giv5 su* t]m "u section #c ( ! ,small ,bus9ess ,act 7#ae ,u4,s4,c4 #fcb74 7,b7 ,small nonpr(it organization ,! t]m small nonpr(it organization has ! mean+ ! ,commission %all give su* t]m = purposes ( ?is subsection4 7f7 ,delay ( notification au?oriz$ = national security & law en=cem5t purposes 7#a7 ,9 g5]al ,if ! ,unit$ ,/ates ,secret ,s]vice or ! ,f$]al ,bureau ( ,inve/igation det]m9es t notification "u ?is section w\ld imp$e a crim9al inve/igation or a national security activity1 su* notification %all be delay$ ^u writt5 notice f ! ,unit$ ,/ates ,secret ,s]vice or ! ,f$]al ,bureau ( ,inve/igation to ! cov]$ entity t exp]i5c$ ! brea* ( security4 ,! notification f ! ,unit$ ,/ates ,secret ,s]vice or ! ,f$]al ,bureau ( ,inve/igation %all specify ! p]iod ( delay reque/$ = national security or law en=cem5t purposes4 7#b7 ,subsequ5t delay ( notification 7,a7 ,9 g5]al ,if ! notification requir$ "u subsection 7a77#a7 is delay$ pursuant to p>agraph 7#a71 a cov]$ entity %all give notice n m ?an #cj days aft] ! day su* law en=cem5t or national security delay 0 invok$ unless a ,f$]al law en=cem5t or intellig5ce ag5cy provides writt5 notification t fur!r delay is necess>y4 7,b7 ,writt5 ju/ification requirem5ts 7i7 ,unit$ ,/ates ,secret ,s]vice ,if ! ,unit$ ,/ates ,secret ,s]vice in/ructs a cov]$ entity to delay notification "u ?is section beyond ! #cj-;day p]iod set =? 9 subp>agraph 7,a7 7ref]r$ to 9 ?is clause z subsequ5t delay71 ! ,unit$ ,/ates ,secret ,s]vice %all submit writt5 ju/ification = ! subsequ5t delay to ! ,secret>y ( ,homel& ,security be=e ! subsequ5t delay beg9s4 7ii7 ,f$]al ,bureau ( ,inve/igation ,if ! ,f$]al ,bureau ( ,inve/igation in/ructs a cov]$ entity to delay notification "u ?is section beyond ! #cj-;day p]iod set =? 9 subp>agraph 7,a7 7ref]r$ to 9 ?is clause z subsequ5t delay71 ! ,f$]al ,bureau ( ,inve/igation %all submit writt5 ju/ification = ! subsequ5t delay to ! ,attorney ,g5]al be=e ! subsequ5t delay beg9s4 7#c7 ,law en=cem5t immunity ,no cause ( action %all lie 9 any c\rt aga9/ any ,f$]al ag5cy = acts relat+ to ! delay ( notification = national security or law en=cem5t purposes "u ?is subtitle4 7g7 ,g5]al exemption 7#a7 ,9 g5]al ,a cov]$ entity %all be exempt f ! requirem5ts "u ?is section if1 foll[+ a brea* ( security1 ! cov]$ entity reasonably concludes t !re is no reasonable risk ( id5tity !ft1 fraud1 or o!r unlawful conduct4 7#b7 ,,ftc guidance ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission1 aft] consultation ) ! ,director ( ! ,national ,in/itute ( ,/&>ds & ,te*nology1 %all issue guidance reg>d+ ! application ( ! exemption "u p>agraph 7#a74 7h7 ,exemptions = national security & law en=cem5t purposes 7#a7 ,9 g5]al ,a cov]$ entity %all be exempt f ! notice requirem5ts "u ?is section if-- 7,a7 a det]m9ation is made-- 7i7 by ! ,unit$ ,/ates ,secret ,s]vice or ! ,f$]al ,bureau ( ,inve/igation t notification ( ! brea* ( security c\ld be reasonably expect$ to reveal s5sitive s\rces & me?ods or simil>ly imp$e ! ability ( ! ,gov]nm5t to conduct law en=cem5t or intellig5ce inve/igations2 or 7ii7 by ! ,f$]al ,bureau ( ,inve/igation t notification ( ! brea* ( security c\ld be reasonably expect$ to cause damage to ! national security2 & 7,b7 ! ,unit$ ,/ates ,secret ,s]vice or ! ,f$]al ,bureau ( ,inve/igation1 z ! case may be1 provides writt5 notice ( its det]m9ation "u subp>agraph 7,a7 to ! cov]$ entity4 7#b7 ,unit$ ,/ates ,secret ,s]vice ,if ! ,unit$ ,/ates ,secret ,s]vice invokes an exemption "u p>agraph 7#a71 ! ,unit$ ,/ates ,secret ,s]vice %all submit writt5 ju/ification = invok+ ! exemption to ! ,secret>y ( ,homel& ,security be=e ! exemption is invok$4 7#c7 ,f$]al ,bureau ( ,inve/igation ,if ! ,f$]al ,bureau ( ,inve/igation invokes an exemption "u p>agraph 7#a71 ! ,f$]al ,bureau ( ,inve/igation %all submit writt5 ju/ification = invok+ ! exemption to ! ,attorney ,g5]al be=e ! exemption is invok$4 7#d7 ,immunity ,no cause ( action %all lie 9 any c\rt aga9/ any ,f$]al ag5cy = acts relat+ to ! exemption f notification = national security or law en=cem5t purposes "u ?is subtitle4 7#e7 ,reports ,n lat] ?an #edj days aft] ! date ( ! enactm5t ( ?is ,act1 & ^u reque/ by ,congress !reaft]1 ! ,unit$ ,/ates ,secret ,s]vice & ! ,f$]al ,bureau ( ,inve/igation %all submit to ,congress a report on ! numb] & nature ( brea*es ( security subject to ! exemptions = national security & law en=cem5t purposes "u ?is subsection4 7i7 ,f9ancial fraud prev5tion exemption 7#a7 ,9 g5]al ,a cov]$ entity %all be exempt f ! notice requirem5ts "u ?is section if ! cov]$ entity utilizes or p>ticipates 9 a security program t-- 7,a7 effectively blocks ! use ( ! p]sonally id5tifiable in=mation to initiate an unau?oriz$ f9ancial transaction be=e x is *>g$ to ! acc\nt ( ! individual2 & 7,b7 provides notice to ea* affect$ individual aft] a brea* ( security t result$ 9 attempt$ fraud or an attempt$ unau?oriz$ transaction4 7#b7 ,limitations ,an exemption "u p>agraph 7#a7 %all n apply if-- 7,a7 ! brea* ( security includes p]sonally id5tifiable in=mation1 o!r ?an a cr$it c>d numb] or cr$it c>d security code1 ( any type2 or 7,b7 ! brea* ( security includes bo? ! individual's cr$it c>d numb] & ! individual's fir/ & la/ "n4 7j7 ,f9ancial in/itutions regulat$ by ,f$]al functional regulators 7#a7 ,9 g5]al ,a cov]$ f9ancial in/itution %all be deem$ 9 compliance ) ?is section if-- 7,a7 ! ,f$]al functional regulator ) jurisdiction ov] ! cov]$ f9ancial in/itution has issu$ a /&>d by regulation or guidel9e "u title ,v ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhja et seq47 t-- 7i7 requires f9ancial in/itutions )9 its jurisdiction to provide notification to individuals foll[+ a brea* ( security2 & 7ii7 provides protections sub/antially simil> to1 or great] ?an1 ^? requir$ "u ?is ,act2 & 7,b7 ! cov]$ f9ancial in/itution is 9 compliance ) ! /&>d "u subp>agraph 7,a74 7#b7 ,def9itions ,9 ?is subsection3 7,a7 ,cov]$ f9ancial in/itution ,! t]m cov]$ f9ancial in/itution means a f9ancial in/itution t is subject to-- 7i7 ! data security requirem5ts ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhja et seq472 7ii7 any implem5t+ /&>d issu$ by regulation or guidel9e issu$ "u t ,act2 & 7iii7 ! jurisdiction ( a ,f$]al functional regulator "u t ,act4 7,b7 ,f$]al functional regulator ,! t]m ,f$]al functional regulator has ! mean+ giv5 ! t]m 9 section #eji ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhji74 7,c7 ,f9ancial in/itution ,! t]m f9ancial in/itution has ! mean+ giv5 ! t]m 9 section #eji ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhji74 7k7 ,exemption2 heal? privacy 7#a7 ,cov]$ entity or bus9ess associate "u ,,hite* ,act ,to ! ext5t t a cov]$ entity "u ?is section acts z a cov]$ entity or a bus9ess associate "u section #acdjb ( ! ,heal? ,in=mation ,te*nology = ,economic & ,cl9ical ,heal? ,act 7#db ,u4,s4,c4 #agicb71 has ! obligation to provide notification to individuals foll[+ a brea* ( security "u t ,act or its implem5t+ regulations1 & is 9 compliance ) t obligation1 ! cov]$ entity %all be deem$ 9 compliance ) ?is section4 7#b7 ,entity subject to ,,hite* ,act ,to ! ext5t t a cov]$ entity "u ?is section acts z a v5dor ( p]sonal heal? records1 a ?ird p>ty s]vice provid]1 or o!r entity subject to section #acdjg ( ! ,heal? ,in=mation ,te*nology = ,economical & ,cl9ical ,heal? ,act 7#db ,u4,s4,c4 #agicg71 has ! obligation to provide notification to individuals foll[+ a brea* ( security "u t ,act or its implem5t+ regulations1 & is 9 compliance ) t obligation1 ! cov]$ entity %all be deem$ 9 compliance ) ?is section4 7#c7 ,limitation ( /atutory con/ruction ,no?+ 9 ?is subtitle may be con/ru$ 9 any way to give effect to ! sunset provision "u section #acdjg7;g77#b7 ( ! ,heal? ,in=mation ,te*nology = ,economic & ,cl9ical ,heal? ,act 7#db ,u4,s4,c4 #agicg7;g77#b77 or to o!rwise limit or affect ! applicability1 "u section #acdjg ( t ,act1 ( ! requirem5t to provide notification to individuals foll[+ a brea* ( security = v5dors ( p]sonal heal? records & ea* entity describ$ 9 clause 7ii71 7iii71 or 7iv7 ( section #acdbd7;b77#a77;,a7 ( t ,act 7#db ,u4,s4,c4 #agiec7;b77#a77;,a774 7l7 ,int]net website notice ( ,f$]al ,trade ,commission ,if ! ,commission1 ^u receiv+ notification ( any brea* ( security t is report$ to ! ,commission1 f9ds t notification ( ! brea* ( security via ! ,commission's ,int]net website w\ld be 9 ! public int]e/ or = ! protection ( consum]s1 ! ,commission %all place su* a notice 9 a cle> & conspicu\s location on its ,int]net website4 7m7 ,,ftc /udy on notification 9 languages 9 addition to ,engli% ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all conduct a /udy on ! feasibility & advisability ( requir+ notification provid$ pursuant to subsection 7d77#a7 to be provid$ 9 a language 9 addition to ,engli% to individuals kn[n to speak only su* o!r language4 #adc4 ,notice to law en=cem5t 7a7 ,designation ( ,gov]nm5t entity ,to receive notice ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,homel& ,security %all designate a ,f$]al ,gov]nm5t entity to receive notice "u ?is section4 7b7 ,notice to designat$ entity ,a cov]$ entity %all notify ! designat$ entity ( a brea* ( security if-- 7#a7 ! numb] ( individuals ^: p]sonally id5tifiable in=mation 01 or is reasonably believ$ to h be51 acquir$ or access$ z a result ( ! brea* ( security exce$s #aj1jjj2 7#b7 ! brea* ( security involves a database1 network$ or integrat$ databases1 or o!r data sy/em conta9+ ! p]sonally id5tifiable in=mation ( m ?an #a1jjj1jjj individuals2 7#c7 ! brea* ( security involves databases own$ by ! ,f$]al ,gov]nm5t2 or 7#d7 ! brea* ( security involves prim>ily p]sonally id5tifiable in=mation ( individuals kn[n to ! cov]$ entity to be employees or contractors ( ! ,f$]al ,gov]nm5t involv$ 9 national security or law en=cem5t4 7c7 ,cont5t ( notices 7#a7 ,9 g5]al ,ea* notice "u subsection 7b7 %all conta9 ! foll[+3 7,a7 ,! date1 e/imat$ date1 or e/imat$ date range ( ! brea* ( security4 7,b7 ,a description ( ! nature ( ! brea* ( security4 7,c7 ,a description ( ea* type ( p]sonally id5tifiable in=mation t 0 or is reasonably believ$ to h be5 acquir$ or access$ z a result ( ! brea* ( security4 7,d7 ,a /atem5t ( ea* p>agraph "u subsection 7b7 t applies to ! brea* ( security4 7#b7 ,con/ruction ,no?+ 9 ?is section %all be con/ru$ to require a cov]$ entity to reveal specific or id5tify+ in=mation ab\t an individual z "p ( ! notice "u p>agraph 7#a74 7d7 ,notice by designat$ entity ,! designat$ entity %all promptly provide ea* notice x receives "u subsection 7b7 to ! foll[+3 7#a7 ,! ,unit$ ,/ates ,secret ,s]vice4 7#b7 ,! ,f$]al ,bureau ( ,inve/igation4 7#c7 ,! ,commission4 7#d7 ,! ,unit$ ,/ates ,po/al ,inspection ,s]vice1 if ! brea* ( security involves mail fraud4 7#e7 ,! attorney g5]al ( ea* ,/ate affect$ by ! brea* ( security4 7#f7 ,su* o!r ,f$]al ag5cies z ! designat$ entity consid]s appropriate = law en=cem5t1 national security1 or data security purposes4 7e7 ,tim+ ( notices ,notice "u ?is section %all be deliv]$ z foll[s3 7#a7 ,notice "u subsection 7b7 %all be deliv]$ z promptly z possible1 b-- 7,a7 n less ?an #c bus9ess days be=e notification to an individual "u section #adb7;a77#a72 & 7,b7 n lat] ?an #aj days aft] ! date ( discov]y ( ! ev5ts requir+ notice4 7#b7 ,notice "u subsection 7d7 %all be deliv]$ z promptly z possible1 b n lat] ?an #a bus9ess day aft] ! date t ! designat$ entity receives notice ( a brea* ( security f a cov]$ entity4 ,e ,en=cem5t #aea4 ,g5]al application ,! requirem5ts ( ?is title %all apply to any p]son :o-- 7#a7 collects1 uses1 transf]s1 or /ores cov]$ in=mation conc]n+ m ?an #e1jjj individuals dur+ any consecutive #ab-mon? p]iod2 & 7#b7 is-- 7,a7 a p]son ov] :i* ! ,commission has au?ority pursuant to section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b772 7,b7 a common c>ri] subject to ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #aea et seq471 not)/&+ ! def9ition ( ! t]m ,acts to regulate comm]ce 9 section #d ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #dd7 & ! exception provid$ by section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b77 = su* c>ri]s2 or 7,c7 a nonpr(it organization1 includ+ any organization describ$ 9 section #eja7;c7 ( ! ,int]nal ,rev5ue ,code ( #aihf t is exempt f taxation "u section #eja7;a7 ( su* ,code1 not)/&+ ! def9ition ( ! t]m ,acts to regulate comm]ce 9 section #d ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #dd7 & ! exception provid$ by section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b77 = su* organizations4 #aeb4 ,en=cem5t by ! ,f$]al ,trade ,commission 7a7 ,unfair or deceptive acts or practices ,a reckless or repetitive violation ( a provision ( ?is title1 except section #adc1 %all be treat$ z an unfair or deceptive act or practice 9 violation ( a regulation "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b77 reg>d+ unfair or deceptive acts or practices4 7b7 ,p[]s ( commission 7#a7 ,9 g5]al ,except z provid$ 9 p>agraph 7#c71 ! ,commission %all en=ce ?is title1 except section #adc1 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is title4 7#b7 ,privileges & immunities ,except z provid$ 9 p>agraph 7#c71 any p]son :o violates a provision ( ?is title1 except section #adc1 %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7#c7 ,common c>ri]s & nonpr(it organizations ,! ,commission %all en=ce ?is title1 except section #adc1 ) respect to common c>ri]s & nonpr(it organizations describ$ 9 section #aea to ! ext5t necess>y to effectuate ! purposes ( ?is title z if su* c>ri]s & nonpr(it organizations 7 p]sons ov] :i* ! ,commission has au?ority pursuant to section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b774 7c7 ,rulemak+ au?ority 7#a7 ,limitation ,9 promulgat+ rules "u ?is title1 ! ,commission may n require ! deploym5t or use ( any specific products or te*nologies1 includ+ any specific comput] s(tw>e or h>dw>e4 7#b7 ,adm9i/rative proc$ure ,! ,commission %all promulgate regulations "u ?is title 9 accordance ) section #eec ( title #e1 ,unit$ ,/ates ,code4 7d7 ,rule ( con/ruction ,no?+ 9 ?is title %all be con/ru$ to limit ! au?ority ( ! ,commission "u any o!r provision ( law4 #aec4 ,en=cem5t by ,attorney ,g5]al 7a7 ,9 g5]al ,! ,attorney ,g5]al may br+ a civil action 9 ! appropriate ,unit$ ,/ates di/rict c\rt aga9/ any cov]$ entity t engages 9 conduct con/itut+ a violation ( section #adc4 7b7 ,p5alties 7#a7 ,9 g5]al ,^u pro( ( su* conduct by a prepond]ance ( ! evid5ce1 a cov]$ entity %all be subject to a civil p5alty ( n m ?an #a1jjj p] individual ^: p]sonally id5tifiable in=mation 0 or is reasonably believ$ to h be5 access$ or acquir$ z a result ( ! brea* ( security t is ! basis ( ! violation1 up to a maximum ( #ajj1jjj p] day :ile su* violation p]si/s4 7#b7 ,limitations ,! total am\nt ( ! civil p5alty assess$ "u ?is subsection aga9/ a cov]$ entity = acts or omissions relat+ to a s+le brea* ( security %all n exce$ #c1jjj1jjj1 unless ! conduct con/itut+ a violation ( subtitle ,d 0 reckless or repeat$1 9 :i* case an additional civil p5alty ( up to #c1jjj1jjj may be impos$4 7#c7 ,adju/m5t = inflation ,beg9n+ on ! date t ! ,consum] ,price ,index is fir/ publi%$ by ! ,bureau ( ,labor ,/ati/ics t is aft] #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 & ea* ye> !reaft]1 ! am\nts specifi$ 9 p>agraphs 7#a7 & 7#b7 %all be increas$ by ! p]c5tage increase 9 ! ,consum] ,price ,index publi%$ on t date f ! ,consum] ,price ,index publi%$ ! previ\s ye>4 7c7 ,injunctive actions ,if x appe>s t a cov]$ entity has engag$1 or is engag$1 9 any act or practice t con/itutes a violation ( subtitle ,d1 ! ,attorney ,g5]al may petition an appropriate ,unit$ ,/ates di/rict c\rt = an ord] enjo9+ su* practice or en=c+ compliance ) su* subtitle4 7d7 ,issuance ( ord] ,a c\rt may issue su* an ord] "u p>agraph 7c7 if x f9ds t ! conduct 9 "q con/itutes a violation ( subtitle ,d4 #aed4 ,en=cem5t by ,/ates 7a7 ,civil action ,9 any case 9 :i* ! attorney g5]al ( a ,/ate has reason to believe t an int]e/ ( ! resid5ts ( t ,/ate has be5 or is adv]sely affect$ by a cov]$ entity :o violates any "p ( ?is title 9 a mann] t results 9 economic or physical h>m to an individual or engages 9 a patt]n or practice t violates any "p ( ?is title o!r ?an section #adc1 ! attorney g5]al may1 z p>5s patriae1 br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates-- 7#a7 to enjo9 fur!r violation ( ?is title or a regulation promulgat$ "u ?is title by ! def5dant2 7#b7 to compel compliance ) ?is title or a regulation promulgat$ "u ?is title2 or 7#c7 = violations ( ?is title or a regulation promulgat$ "u ?is title to obta9 civil p5alties 9 ! am\nt det]m9$ "u section title4 7b7 ,rights ( ,f$]al ,trade ,commission 7#a7 ,notice to ,f$]al ,trade ,commission 7,a7 ,9 g5]al ,except z provid$ 9 subp>agraph 7,c71 ! attorney g5]al ( a ,/ate %all notify ! ,commission 9 writ+ ( any civil action "u subsection 7b71 prior to initiat+ su* civil action4 7,b7 ,cont5ts ,! notice requir$ by subp>agraph 7,a7 %all include a copy ( ! compla9t to be fil$ to initiate su* civil action4 7,c7 ,exception ,if x is n feasible = ! attorney g5]al ( a ,/ate to provide ! notice requir$ by subp>agraph 7,a71 ! ,/ate %all provide notice imm$iately ^u in/itut+ a civil action "u subsection 7b74 7#b7 ,int]v5tion by ,f$]al ,trade ,commission ,^u receiv+ notice requir$ by p>agraph 7#a7 ) respect to a civil action1 ! ,commission may-- 7,a7 int]v5e 9 su* action2 & 7,b7 ^u int]v5+-- 7i7 be he>d on all matt]s aris+ 9 su* civil action2 & 7ii7 file petitions = appeal ( a decision 9 su* action4 7c7 ,preemptive action by ,f$]al ,trade ,commission ,if ! ,commission in/itutes a civil action = violation ( ?is title or a regulation promulgat$ "u ?is title1 no attorney g5]al ( a ,/ate may br+ a civil action "u subsection 7a7 aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = violation ( ?is title or a regulation promulgat$ "u ?is title t is alleg$ 9 su* compla9t4 7d7 ,inve/igatory p[]s ,no?+ 9 ?is section may be con/ru$ to prev5t ! attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on su* attorney g5]al by ! laws ( su* ,/ate to conduct inve/igations or to adm9i/] oa?s or affirmations or to compel ! att5dance ( witnesses or ! production ( docum5t>y & o!r evid5ce4 7e7 ,v5ue2 s]vice ( process 7#a7 ,v5ue ,any action br\ght "u subsection 7a7 may be br\ght 9-- 7,a7 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code2 or 7,b7 ano!r c\rt ( compet5t jurisdiction4 7#b7 ,s]vice ( process ,9 an action br\ght "u subsection 7a71 process may be s]v$ 9 any di/rict 9 :i* ! def5dant-- 7,a7 is an inhabitant2 or 7,b7 may be f\nd4 7f7 ,actions by o!r ,/ate (ficials 7#a7 ,9 g5]al ,9 addition to civil actions br\ght by attorneys g5]al "u subsection 7a71 any o!r (fic] ( a ,/ate :o is au?oriz$ by ! ,/ate to d s may br+ a civil action "u subsection 7a71 subject to ! same requirem5ts & limitations t apply "u ?is section to civil actions br\ght by attorneys g5]al4 7#b7 ,sav+s provision ,no?+ 9 ?is section may be con/ru$ to prohibit an au?oriz$ (ficial ( a ,/ate f initiat+ or cont9u+ any proce$+ 9 a c\rt ( ! ,/ate = a violation ( any civil or crim9al law ( ! ,/ate4 #aee4 ,civil p5alties 7a7 ,9 g5]al ,9 an action br\ght "u section #aed1 9 addition to any o!r p5alty o!rwise applicable to a violation ( ?is title or any regulation promulgat$ "u ?is title1 ! foll[+ civil p5alties %all apply3 7#a7 ,subtitle ,a violations ,a cov]$ entity t recklessly or repeat$ly violates subtitle ,a is liable = a civil p5alty equal to ! am\nt calculat$ by multiply+ ! numb] ( days t ! entity is n 9 compliance ) su* subtitle by an am\nt n to exce$ #cc1jjj4 7#b7 ,subtitle ,b violations ,a cov]$ entity t recklessly or repeat$ly violates subtitle ,b is liable = a civil p5alty equal to ! am\nt calculat$ by multiply+ ! numb] ( days t su* an entity is n 9 compliance ) su* subtitle1 or ! numb] ( individuals = :om ! entity fail$ to obta9 cons5t z requir$ by su* subtitle1 :i*ev] is great]1 by an am\nt n to exce$ #cc1jjj4 7#c7 ,subtitle ,d violations ,a cov]$ entity t recklessly or repeat$ly violates section #adb is liable = a civil p5alty equal to ! am\nt calculat$ by multiply+ ! numb] ( violations ( su* section by an am\nt n to exce$ #cc1jjj4 ,ea* failure to s5d notification z requir$ "u su* section to a resid5t ( ! ,/ate %all be treat$ z a sep>ate violation4 7b7 ,adju/m5t = inflation ,beg9n+ on ! date t ! ,consum] ,price ,index = ,all ,urban ,consum]s is fir/ publi%$ by ! ,bureau ( ,labor ,/ati/ics t is aft] #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 & ea* ye> !reaft]1 ea* ( ! am\nts specifi$ 9 subsection 7a7 %all be increas$ by ! p]c5tage increase 9 ! ,consum] ,price ,index publi%$ on t date f ! ,consum] ,price ,index publi%$ ! previ\s ye>4 7c7 ,maximum total liability ,not)/&+ ! numb] ( actions :i* may be br\ght aga9/ a cov]$ entity "u section #aed1 ! maximum civil p5alty = :i* any cov]$ entity may be liable "u ?is section 9 su* actions %all n exce$-- 7#a7 #f1jjj1jjj = any relat$ s]ies ( violations ( any rule promulgat$ "u subtitle ,a2 7#b7 #f1jjj1jjj = any relat$ s]ies ( violations ( subtitle ,b2 & 7#c7 #f1jjj1jjj = any relat$ s]ies ( violations ( section #adb4 #aef4 ,effect on o!r laws 7a7 ,preemption ( ,/ate laws ,! provisions ( ?is title %all sup]s$e any provisions ( ! law ( any ,/ate relat+ to ^? entities cov]$ by ! regulations issu$ pursuant to ?is title1 to ! ext5t t su* provisions relate to ! collection1 use1 or disclosure (-- 7#a7 cov]$ in=mation address$ 9 ?is title2 or 7#b7 p]sonally id5tifiable in=mation or p]sonal id5tification in=mation address$ 9 provisions ( ! law ( a ,/ate4 7b7 ,unau?oriz$ civil actions2 c]ta9 ,/ate laws 7#a7 ,unau?oriz$ actions ,no p]son o!r ?an a p]son specifi$ 9 section #aed may br+ a civil action "u ! laws ( any ,/ate if su* action is premis$ 9 :ole or 9 "p ^u ! def5dant violat+ ?is title or a regulation promulgat$ "u ?is title4 7#b7 ,protection ( c]ta9 /ate laws ,?is title %all n be con/ru$ to preempt ! applicability (-- 7,a7 ,/ate laws t address ! collection1 use1 or disclosure ( heal? in=mation or f9ancial in=mation2 or 7,b7 o!r ,/ate laws to ! ext5t t ^? laws relate to acts ( fraud4 7c7 ,rule ( con/ruction relat+ to requir$ disclosures to gov]nm5t entities ,?is title %all n be con/ru$ to exp& or limit ! duty or au?ority ( a cov]$ entity or ?ird p>ty to disclose p]sonally id5tifiable in=mation to a gov]nm5t entity "u any provision ( law4 #aeg4 ,no private "r ( action ,?is title may n be con/ru$ to provide any private "r ( action4 ,f ,co-,regulatory safe h>bor programs #afa4 ,e/abli%m5t ( safe h>bor programs 7a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all initiate a rulemak+ proce$+ to e/abli% requirem5ts = ! e/abli%m5t & adm9i/ration ( safe h>bor programs "u :i* a nongov]nm5tal organization w adm9i/] a program t-- 7#a7 e/abli%es a me*anism = p>ticipants to implem5t ! requirem5ts ( ?is title ) reg>ds to-- 7,a7 c]ta9 types ( unau?oriz$ uses ( cov]$ in=mation z describ$ 9 p>agraph 7#b72 or 7,b7 any unau?oriz$ use ( cov]$ in=mation2 & 7#b7 (f]s consum]s a cle>1 conspicu\s1 p]si/5t1 & effective means ( opt+ out ( ! transf] ( cov]$ in=mation by a cov]$ entity p>ticipat+ 9 ! safe h>bor program to a ?ird p>ty =-- 7,a7 behavioral adv]tis+ purposes2 7,b7 location-bas$ adv]tis+ purposes2 7,c7 o!r specific types ( unau?oriz$ use2 or 7,d7 any unau?oriz$ use4 7b7 ,selection ( nongov]nm5tal organizations ,to adm9i/] program 7#a7 ,submittal ( applications ,an applicant seek+ to adm9i/] a program "u ! requirem5ts e/abli%$ pursuant to subsection 7a7 %all submit to ! ,commission an application !re= at su* "t1 9 su* mann]1 & conta9+ su* in=mation z ! ,commission may require4 7#b7 ,notice & receipt ( applications ,^u completion ( ! rulemak+ proce$+s requir$ by subsection 7a71 ! ,commission %all-- 7,a7 publi% a notice 9 ! ,f$]al ,regi/] t x w receive applications = approval ( safe h>bor programs "u ?is subtitle2 & 7,b7 beg9 receiv+ applications "u p>agraph 7#a74 7#c7 ,selection ,n lat] ?an #bgj days aft] ! date on :i* ! ,commission receives a complet$ application "u ?is subsection1 ! ,commission %all grant or d5y ! application on ! basis ( ! ,commission's evaluation ( ! applicant's capacity to provide protection ( individuals' cov]$ in=mation ) reg>d to specific types ( unau?oriz$ uses ( cov]$ in=mation z describ$ 9 subsection 7a77#b7 t is sub/antially equival5t to or sup]ior to ! protection o!rwise provid$ "u ?is title4 7#d7 ,writt5 f9d+s ,any decision rea*$ by ! ,commission "u ?is subsection %all be accompani$ by writt5 f9d+s sett+ =? ! basis = & reasons support+ su* decision4 7c7 ,scope ( safe h>bor protection ,! scope ( protection (f]$ by safe h>bor programs approv$ by ! ,commission t e/abli% me*anisms = p>ticipants to implem5t ! requirem5ts ( ! title only = c]ta9 uses ( cov]$ in=mation z describ$ 9 subsection 7a77#b7 %all be limit$ to p>ticipat+ entities' use ( ^? p>ticul> types ( cov]$ in=mation4 7d7 ,sup]vision by ,f$]al ,trade ,commission 7#a7 ,9 g5]al ,! ,commission %all ex]cise ov]sight & sup]visory au?ority ( a safe h>bor program approv$ "u ?is section ?r\gh-- 7,a7 ongo+ review ( ! practices ( ! nongov]nm5tal organization adm9i/]+ ! program2 7,b7 ! imposition ( civil p5alties on ! nongov]nm5tal organization if x is n compliant ) ! requirem5ts e/abli%$ "u subsection 7a72 & 7,c7 )drawal ( au?orization to adm9i/] ! safe h>bor program "u ?is subtitle4 7#b7 ,annual reports by nongov]nm5tal organizations ,ea* ye>1 ea* nongov]nm5tal organization adm9i/]+ a safe h>bor program "u ?is section %all submit to ! ,commission a report on its activities "u ?is subtitle dur+ ! prec$+ ye>4 #afb4 ,p>ticipation 9 safe h>bor program 7a7 ,exemption ,any cov]$ entity t p>ticipates 91 & demon/rates compliance )1 a safe h>bor program adm9i/]$ "u section #afa %all be exempt f any provision ( subtitle ,b or subtitle ,c if ! ,commission f9ds t ! requirem5ts ( ! safe h>bor program are sub/antially ! same z or m protective ( privacy ( individuals ?an ! requirem5ts ( ! provision f :i* ! exemption is grant$4 7b7 ,limitation ,no?+ 9 ?is subtitle %all be con/ru$ to exempt any cov]$ entity p>ticipat+ 9 a safe h>bor program f compliance ) any o!r requirem5t ( ! regulations promulgat$ "u ?is title = :i* ! safe h>bor does n provide an exception4 ,g ,application ) o!r ,f$]al laws #aga4 ,application ) o!r ,f$]al laws 7a7 ,qualifi$ exemption = p]sons subject to o!r ,f$]al privacy laws ,if a p]son is subject to a provision ( ?is title & a provision ( a ,f$]al privacy law describ$ 9 subsection 7d71 su* provision ( ?is title %all n apply to su* p]son to ! ext5t t su* provision ( ,f$]al privacy law applies to su* p]son4 7b7 ,protection ( o!r ,f$]al privacy laws ,no?+ 9 ?is title may be con/ru$ to modify1 limit1 or sup]s$e ! op]ation ( ! ,f$]al privacy laws describ$ 9 subsection 7d7 or ! provision ( in=mation p]mitt$ or requir$1 expressly or by implication1 by su* laws1 ) respect to ,f$]al rights & practices4 7c7 ,communications infra/ructure & privacy ,if a p]son is subject to a provision ( section #bbb or #fca ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbb & #eea7 & a provision ( ?is title1 su* provision ( su* section #bbb or #fca %all n apply to su* p]son to ! ext5t t su* provision ( ?is title applies to su* p]son4 7d7 ,o!r ,f$]al privacy laws describ$ ,! ,f$]al privacy laws describ$ 9 ?is subsection are z foll[s3 7#a7 ,section #eeb;a ( title #e1 ,unit$ ,/ates ,code 7commonly kn[n z ! ,privacy ,act ( #aigd74 7#b7 ,! ,"r to ,f9ancial ,privacy ,act ( #aigh 7#ab ,u4,s4,c4 #cdja et seq474 7#c7 ,! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha et seq474 7#d7 ,! ,fair ,debt ,collection ,practices ,act 7#ae ,u4,s4,c4 #afib et seq474 7#e7 ,! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja et seq474 7#f7 ,title ,v ( ! ,gramm-,lea*-,bliley ,act ( #aiii 7#ae ,u4,s4,c4 #fhja et seq474 7#g7 ,*apt]s #aai1 #abc1 & #bjf ( title #ah1 ,unit$ ,/ates ,code4 7#h7 ,section #bgaj ( title #ah1 ,unit$ ,/ates ,code4 7#i7 ,section #ddd ( ! ,g5]al ,education ,provisions ,act 7#bj ,u4,s4,c4 #abcb;g7 7commonly ref]r$ to z ! ,family ,educational ,rights & ,privacy ,act ( #aigd74 7#aj7 ,section #dde ( ! ,g5]al ,education ,provisions ,act 7#bj ,u4,s4,c4 #abcb;h74 7#aa7 ,! ,privacy ,protection ,act ( #aihj 7#db ,u4,s4,c4 #bjjj;aa et seq474 7#ab7 ,! regulations promulgat$ "u section #bfd7;c7 ( ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7#db ,u4,s4,c4 #acbj;d-#b note71 z su* regulations relate to a p]son describ$ 9 section #aagb7;a7 ( ! ,social ,security ,act 7#db ,u4,s4,c4 #acbj;d-#a7;a77 or to transactions ref]r$ to 9 section #aagc7;a77#a7 ( su* ,act 7#db ,u4,s4,c4 #acbj;d-#b7;a77#a774 7#ac7 ,! ,communications ,assi/ance = ,law ,en=cem5t ,act 7#dg ,u4,s4,c4 #ajja et seq474 7#ad7 ,section #bbg ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbg74 ,h ,developm5t ( comm]cial data privacy policy 9 ! ,dep>tm5t ( ,comm]ce #aha4 ,direction to develop comm]cial data privacy policy ,! ,secret>y ( ,comm]ce %all contribute to ! developm5t ( comm]cial data privacy policy by-- 7#a7 conv5+ private sector /akehold]s1 includ+ memb]s ( indu/ry1 civil society gr\ps1 academia1 9 op5 =ums1 to develop codes ( conduct 9 support ( applications = safe h>bor programs "u subtitle ,f2 7#b7 exp&+ int]op]ability betwe5 ! ,unit$ ,/ates comm]cial data privacy framework & o!r national & regional privacy frameworks2 7#c7 conduct+ rese>* relat$ to improv+ privacy protection "u ?is title2 & 7#d7 conduct+ rese>* relat$ to improv+ data %>+ practices1 includ+ ! use ( anonymis$ data1 & gr[+ ! in=mation economy4 ,,ii ,onl9e privacy ( *ildr5 #bja4 ,%ort title ,?is title may be cit$ z ! ,d ,n ,track ,kids ,act ( #bjad4 #bjb4 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,s9ce ! enactm5t ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih1 ! ,_w ,wide ,web has *ang$ dramatically1 ) ! creation ( t5s ( millions ( websites1 ! prolif]ation ( entirely new m$ia plat=ms1 & ! em]g5ce ( a div]se ecosy/em ( s]vices1 devices1 & applications t enable us]s to connect wirelessly )9 an onl9e environm5t )\t be+ te!r$ to a desktop comput]4 7#b7 ,! explosive gr[? ( ! ,int]net ecosy/em has unlea%$ a wide array ( opportunities to le>n1 communicate1 p>ticipate 9 civic life1 access ent]ta9m5t1 & engage 9 comm]ce4 7#c7 ,9 addition to ^! significant b5efits1 ! ,int]net also pres5ts *all5ges1 p>ticul>ly ) respect to ! ef=ts ( entities to track ! onl9e activities ( *ildr5 & m9ors & to collect1 use1 & disclose p]sonal in=mation ab\t !m1 includ+ _! geolocation1 = comm]cial purposes4 7#d7 ,*ildr5 & te5s are visit+ num]\s companies' websites1 & m>ket]s are us+ multim$ia games1 onl9e quizzes1 & mobile phone & tablet applications to create ties to *ildr5 & te5s4 7#e7 ,accord+ to a /udy by ! ,wall ,/reet ,j\rnal 9 #bjaj1 websites direct$ to *ildr5 & te5s 7 m likely to use cookies & o!r track+ tools ?an sites direct$ to a g5]al audi5ce4 7#f7 ,?is /udy exam9$ #ej popul> websites = *ildr5 & te5s 9 ! ,unit$ ,/ates & f\nd t ^! #ej sites plac$ #d1abc cookies1 beacons1 & o!r track+ tools on ! te/ comput] us$ = ! /udy4 7#g7 ,?is is #cj p]c5t great] ?an ! numb] ( su* track+ tools t 7 plac$ on ! te/ comput] 9 a simil> /udy ( ! #ej ov]all mo/ popul> websites 9 ! ,unit$ ,/ates1 :i* are g5]ally direct$ to adults4 7#h7 ,*ildr5 & te5s lack ! cognitive ability to di/+ui% adv]tis+ f program cont5t & to und]/& t ! purpose ( adv]tis+ is to p]suade !m1 mak+ !m unable to activate ! def5ses on :i* adults rely4 7#i7 ,*ildr5 & te5s are less able ?an adults to und]/& ! pot5tial long-t]m consequ5ces ( hav+ _! in=mation available to ?ird p>ties1 includ+ adv]tis]s1 & o!r individuals4 7#aj7 ,accord+ to ,common ,s5se ,m$ia & ! ,c5t] = ,digital ,democracy1 #ij p]c5t ( te5s h us$ "s =m ( social m$ia1 #ge p]c5t h a social network+ site1 & #ea p]c5t *eck _! social network+ site at lea/ once a day4 7#aa7 ,n9ety-"o p]c5t ( p>5ts & #ia p]c5t ( adults believe x is n okay = adv]tis]s to collect in=mation ab\t a *ild's location f t *ild's mobile phone4 7#ab7 ,n9ety-f\r p]c5t ( p>5ts & #ia p]c5t ( adults agree t adv]tis]s %\ld receive ! p>5t's p]mission be=e putt+ track+ s(tw>e on a *ild's comput]4 7#ac7 ,n9ety-six p]c5t ( p>5ts & #id p]c5t ( adults express$ disapproval :5 ask$ if x is okay = a website to ask *ildr5 = p]sonal in=mation ab\t _! fri5ds4 7#ad7 ,eighty-eight p]c5t ( p>5ts w\ld support a law t requires se>* eng9es & social network+ sites to get us]s' p]mission be=e us+ _! p]sonal in=mation4 7#ae7 ,a ,commons5se ,m$ia_/,zogby poll f\nd t #id p]c5t ( p>5ts & #id p]c5t ( adults believe individuals %\ld h ! ability to reque/ ! deletion1 aft] a specific p]iod ( "t1 ( all ( _! p]sonal in=mation held by an onl9e se>* eng9e1 social network+ site1 or m>ket+ company4 7#af7 ,accord+ to a ,pew_/,b]kman ,c5t] poll1 #fi p]c5t ( p>5ts ( te5s :o engage 9 onl9e activity are conc]n$ ab\t h[ t activity might affect _! *ildr5's future academic or employm5t opportunities4 7#ag7 ,eighty-"o p]c5t ( p>5ts ( te5s :o engage 9 onl9e activity say !y are conc]n$ ab\t h[ mu* in=mation adv]tis]s c le>n ab\t _! *ildr5's onl9e activity4 #bjc4 ,def9itions 7a7 ,9 g5]al ,9 ?is title3 7#a7 ,m9or ,! t]m m9or means an individual ov] ! age ( #ab & "u ! age ( #af4 7#b7 ,t>get$ m>ket+ ,! t]m t>get$ m>ket+ means adv]tis+ or o!r ef=ts to m>ket a product or s]vice t are direct$ to a specific individual or device-- 7,a7 bas$ on ! p]sonal in=mation ( ! individual or a unique id5tifi] ( ! device2 & 7,b7 z a result ( use by ! individual1 or access by ! device1 ( a website1 onl9e s]vice1 onl9e application1 or mobile application4 7b7 ,t]ms def9$ by ,commission ,9 ?is title1 ! t]ms direct$ to m9ors & geolocation in=mation %all h ! mean+s giv5 su* t]ms by ! ,commission by regulation4 ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations t def9e su* t]ms broadly en\gh s t !y are n limit$ to curr5t te*nology1 consi/5t ) ! pr9ciples articulat$ by ! ,commission reg>d+ ! def9ition ( ! t]m ,int]net 9 its /atem5t ( basis & purpose on ! f9al rule "u ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja et seq47 promulgat$ on ,novemb] #c1 #aiii 7#fd ,f$4 ,reg4 #eihia74 7c7 ,o!r def9itions ,! def9itions set =? 9 section #acjb ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja71 z am5d$ by section #c7;a71 %all apply 9 ?is title1 except to ! ext5t ! ,commission provides o!rwise by regulations issu$ "u section #eec ( title #e1 ,unit$ ,/ates ,code4 #bjd4 ,onl9e collection1 use1 & disclosure ( p]sonal in=mation ( *ildr5 7a7 ,def9itions ,section #acjb ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja7 is am5d$-- 7#a7 by am5d+ p>agraph 7#b7 to read z foll[s3 7#b7 ,op]ator ,! t]m op]ator-- 7,a7 means any p]son :o1 = comm]cial purposes1 9 int]/ate or =eign comm]ce1 op]ates or provides a website on ! ,int]net1 onl9e s]vice1 onl9e application1 or mobile application1 & :o-- 7i7 collects or ma9ta9s1 ei!r directly or ?r\gh a s]vice provid]1 p]sonal in=mation f or ab\t ! us]s ( su* website1 s]vice1 or application2 7ii7 all[s ano!r p]son to collect p]sonal in=mation directly f us]s ( su* website1 s]vice1 or application 79 :i* case ! op]ator is deem$ to h collect$ ! in=mation72 or 7iii7 all[s us]s ( su* website1 s]vice1 or application to publicly disclose p]sonal in=mation 79 :i* case ! op]ator is deem$ to h collect$ ! in=mation72 & 7,b7 does n include any nonpr(it entity t w\ld o!rwise be exempt f cov]age "u section #e ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de74 2 7#b7 9 p>agraph 7#d7-- 7,a7 by am5d+ subp>agraph 7,a7 to read z foll[s3 7,a7 ! release ( p]sonal in=mation = any purpose1 except :]e su* in=mation is provid$ to a p]son o!r ?an an op]ator :o provides support = ! int]nal op]ations ( ! website1 onl9e s]vice1 onl9e application1 or mobile application ( ! op]ator & does n disclose or use t in=mation = any o!r purpose2 & 2 & 7,b7 9 subp>agraph 7,b71 by /rik+ website or onl9e s]vice & ins]t+ website1 onl9e s]vice1 onl9e application1 or mobile application2 7#c7 9 p>agraph 7#h7-- 7,a7 by am5d+ subp>agraph 7,g7 to read z foll[s3 7,g7 in=mation conc]n+ a *ild or ! p>5ts ( t *ild 7includ+ any unique or sub/antially unique id5tifi]1 su* z a cu/om] numb]7 t an op]ator collects onl9e f ! *ild & comb9es ) an id5tifi] describ$ 9 subp>agraphs 7,a7 ?r\gh 7,g74 2 7,b7 by r$esignat+ subp>agraphs 7,f7 & 7,g7 z subp>agraphs 7,g7 & 7,h71 respectively2 & 7,c7 by ins]t+ aft] subp>agraph 7,e7 ! foll[+ new subp>agraph3 7,f7 in=mation 7includ+ an ,int]net protocol address7 t p]mits ! id5tification ( an individual1 ! comput] ( an individual1 or any o!r device us$ by an individual to access ! ,int]net or an onl9e s]vice1 onl9e application1 or mobile application2 2 7#d7 by /rik+ p>agraph 7#aj7 & r$esignat+ p>agraphs 7#aa7 & 7#ab7 z p>agraphs 7#aj7 & 7#aa71 respectively2 & 7#e7 by add+ at ! end ! foll[+ new p>agraph3 7#ab7 ,onl9e1 onl9e s]vice1 onl9e application1 mobile application1 direct$ to *ildr5 ,! t]ms onl9e1 onl9e s]vice1 onl9e application1 mobile application1 & direct$ to *ildr5 %all h ! mean+s giv5 su* t]ms by ! ,commission by regulation4 ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ! ,comm]cial ,privacy ,bill ( ,rights ,act ( #bjad1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations t def9e su* t]ms broadly en\gh s t !y are n limit$ to curr5t te*nology1 consi/5t ) ! pr9ciples articulat$ by ! ,commission reg>d+ ! def9ition ( ! t]m ,int]net 9 its /atem5t ( basis & purpose on ! f9al rule "u ?is title promulgat$ on ,novemb] #c1 #aiii 7#fd ,f$4 ,reg4 #eihia74 ,! def9ition ( ! t]m onl9e s]vice 9 su* regulations %all include broadb& ,int]net access s]vice 7z def9$ 9 ! ,report & ,ord] ( ! ,f$]al ,communications ,commission relat+ to ! matt] ( pres]v+ ! op5 ,int]net & broadb& indu/ry practices 7,,fcc #aj-bja1 adopt$ by ! ,commission on ,decemb] #ba1 #bjaj774 4 7b7 ,onl9e collection1 use1 & disclosure ( p]sonal in=mation ( *ildr5 ,section #acjc ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #fejb7 is am5d$-- 7#a7 by /rik+ ! head+ & ins]t+ ! foll[+3 ,onl9e collection1 use1 & disclosure ( p]sonal in=mation ( *ildr542 7#b7 9 subsection 7a7-- 7,a7 by am5d+ p>agraph 7#a7 to read z foll[s3 7#a7 ,9 g5]al ,x is unlawful = an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to *ildr51 or an op]ator hav+ actual k t p]sonal in=mation be+ collect$ is f a *ild1 to collect p]sonal in=mation f a *ild 9 a mann] t violates ! regulations prescrib$ "u subsection 7b74 2 & 7,b7 9 p>agraph 7#b7-- 7i7 by /rik+ ( su* a website or onl9e s]vice2 & 7ii7 by /rik+ subsection 7b77#a77;,b77iii7 & ins]t+ subsection 7b77#a77;,c77iii72 & 7#c7 9 subsection 7b7-- 7,a7 by am5d+ p>agraph 7#a7 to read z foll[s3 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ! ,comm]cial ,privacy ,bill ( ,rights ,act ( #bjad1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations to require an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to *ildr51 or an op]ator hav+ actual k t p]sonal in=mation be+ collect$ is f a *ild-- 7,a7 to provide cle> & conspicu\s notice 9 cle> & pla9 language ( ! types ( p]sonal in=mation ! op]ator collects1 h[ ! op]ator uses su* in=mation1 :e!r ! op]ator discloses su* in=mation1 & ! proc$ures or me*anisms ! op]ator uses to ensure t p]sonal in=mation is n collect$ f *ildr5 except 9 accordance ) ! regulations promulgat$ "u ?is p>agraph2 7,b7 to obta9 v]ifiable p>5tal cons5t = ! collection1 use1 or disclosure ( p]sonal in=mation ( a *ild2 7,c7 to provide to a p>5t ^: *ild has provid$ p]sonal in=mation to ! op]ator1 ^u reque/ by & prop] id5tification ( ! p>5t-- 7i7 a description ( ! specific types ( p]sonal in=mation collect$ f ! *ild by ! op]ator2 7ii7 ! opportunity at any "t to refuse to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future collection1 by ! op]ator ( p]sonal in=mation collect$ f ! *ild2 & 7iii7 a means t is reasonable "u ! circum/ances = ! p>5t to obta9 any p]sonal in=mation collect$ f ! *ild1 if su* in=mation is available to ! op]ator at ! "t ! p>5t makes ! reque/2 7,d7 n to condition p>ticipation 9 a game1 or use ( a website1 s]vice1 or application1 by a *ild on ! provision by ! *ild ( m p]sonal in=mation ?an is reasonably requir$ to p>ticipate 9 ! game or use ! website1 s]vice1 or application2 & 7,e7 to e/abli% & ma9ta9 reasonable proc$ures to protect ! confid5tiality1 security1 & integrity ( p]sonal in=mation collect$ f *ildr54 2 7,b7 9 p>agraph 7#b7-- 7i7 9 ! matt] prec$+ subp>agraph 7,a71 by /rik+ p>agraph 7#a77;,a77ii7 & ins]t+ p>agraph 7#a77;,b72 & 7ii7 9 subp>agraph 7,a71 by ins]t+ or to contact a diff]5t *ild aft] to recontact ! *ild2 7,c7 by am5d+ p>agraph 7#c7 to read z foll[s3 7#c7 ,cont9uation ( s]vice ,! regulations %all prohibit an op]ator f discont9u+ s]vice provid$ to a *ild on ! basis ( refusal by ! p>5t ( ! *ild1 "u ! regulations prescrib$ "u p>agraph 7#a77;,c77ii71 to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future collection1 by ! op]ator ( p]sonal in=mation collect$ f ! *ild1 to ! ext5t t ! op]ator is capable ( provid+ su* s]vice )\t su* in=mation4 2 & 7,d7 by add+ at ! end ! foll[+3 7#d7 ,rule = treatm5t ( us]s ( websites1 s]vices1 & applications direct$ to *ildr5 ,an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application t is direct$ to *ildr5 %all treat all us]s ( su* website1 s]vice1 or application z *ildr5 = purposes ( ?is title1 except z p]mitt$ by ! ,commission by a regulation promulgat$ "u ?is title4 4 7c7 ,adm9i/ration & applicability ( ,act ,section #acjf ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feje7 is am5d$-- 7#a7 9 subsection 7b7-- 7,a7 9 p>agraph 7#a71 by /rik+ 1 9 ! case ( & all t foll[s & ins]t+ ! foll[+3 by ! appropriate ,f$]al bank+ ag5cy ) respect to any insur$ depository in/itution 7z su* t]ms are def9$ 9 section #c ( su* ,act 7#ab ,u4,s4,c4 #ahac7722 & 7,b7 by /rik+ p>agraph 7#b7 & r$esignat+ p>agraphs 7#c7 ?r\gh 7#f7 z p>agraphs 7#b7 ?r\gh 7#e71 respectively2 & 7#b7 by add+ at ! end ! foll[+ new subsection3 7f7 ,telecommunications c>ri]s & cable op]ators 7#a7 ,en=cem5t by ,,ftc ,not)/&+ section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b771 compliance ) ! requirem5ts impos$ "u ?is title %all be en=c$ by ! ,commission ) respect to any telecommunications c>ri] 7z def9$ 9 section #c ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #aec774 7#b7 ,relation%ip to o!r law ,to ! ext5t t sections #bbb1 #cch7;i71 & #fca ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbb2 #cch7;i72 #eea7 are inconsi/5t ) ?is title1 ?is title controls4 4 #bje4 ,t>get$ m>ket+ to *ildr5 or m9ors 7a7 ,acts prohibit$ ,x is unlawful =-- 7#a7 an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to *ildr51 or an op]ator hav+ actual k t p]sonal in=mation be+ collect$ is f a *ild1 to use1 disclose to ?ird p>ties1 or compile p]sonal in=mation = t>get$ m>ket+ purposes )\t v]ifiable p>5tal cons5t2 or 7#b7 an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to m9ors1 or an op]ator hav+ actual k t p]sonal in=mation be+ collect$ is f a m9or1 to use1 disclose to ?ird p>ties1 or compile p]sonal in=mation = t>get$ m>ket+ purposes )\t ! cons5t ( ! m9or4 7b7 ,regulations ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations to implem5t ?is section4 #bjf4 ,digital ,m>ket+ ,bill ( ,rights = ,te5s & ,fair ,in=mation ,practices ,pr9ciples 7a7 ,acts prohibit$ ,x is unlawful = an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to m9ors1 or an op]ator hav+ actual k t p]sonal in=mation be+ collect$ is f a m9or1 to collect p]sonal in=mation f a m9or unless su* op]ator has adopt$ & complies ) a ,digital ,m>ket+ ,bill ( ,rights = ,te5s t is consi/5t ) ! ,fair ,in=mation ,practices ,pr9ciples describ$ 9 subsection 7b74 7b7 ,fair ,in=mation ,practices ,pr9ciples ,! ,fair ,in=mation ,practices ,pr9ciples describ$ 9 ?is subsection are ! foll[+3 7#a7 ,collection limitation pr9ciple ,except z provid$ 9 p>agraph 7#c71 p]sonal in=mation %\ld be collect$ f a m9or only :5 collection ( ! p]sonal in=mation is-- 7,a7 consi/5t ) ! context ( a p>ticul> transaction or s]vice or ! relation%ip ( ! m9or ) ! op]ator1 includ+ collection necess>y to fulfill a transaction or provide a s]vice reque/$ by ! m9or2 or 7,b7 requir$ or specifically au?oriz$ by law4 7#b7 ,data quality pr9ciple ,! p]sonal in=mation ( a m9or %\ld be accurate1 complete1 & kept up-to-date to ! ext5t necess>y to fulfill ! purposes describ$ 9 subp>agraphs 7,a7 ?r\gh 7,d7 ( p>agraph 7#c74 7#c7 ,purpose specification pr9ciple ,! purposes = :i* p]sonal in=mation is collect$ %\ld be specifi$ to ! m9or n lat] ?an at ! "t ( ! collection ( ! in=mation4 ,! subsequ5t use or disclosure ( ! in=mation %\ld be limit$ to-- 7,a7 fulfillm5t ( ! transaction or s]vice reque/$ by ! m9or2 7,b7 support = ! int]nal op]ations ( ! website1 s]vice1 or application1 z describ$ 9 section #cab4b ( title #af1 ,code ( ,f$]al ,regulations2 7,c7 compliance ) legal process or o!r purposes expressly au?oriz$ "u specific legal au?ority2 or 7,d7 o!r purposes-- 7i7 t are specifi$ 9 a notice to ! m9or2 & 7ii7 to :i* ! m9or has cons5t$ "u p>agraph 7#g7 be=e ! in=mation is us$ or disclos$ = su* o!r purposes4 7#d7 ,ret5tion limitation pr9ciple ,! p]sonal in=mation ( a m9or %\ld n be reta9$ = long] ?an is necess>y to fulfill a transaction or provide a s]vice reque/$ by ! m9or or su* o!r purposes specifi$ 9 subp>agraphs 7,a7 ?r\gh 7,d7 ( p>agraph 7#c74 ,! op]ator %\ld implem5t a reasonable & appropriate data disposal policy bas$ on ! nature & s5sitivity ( su* p]sonal in=mation4 7#e7 ,security safegu>ds pr9ciple ,! p]sonal in=mation ( a m9or %\ld be protect$ by reasonable & appropriate security safegu>ds aga9/ risks su* z loss or unau?oriz$ access1 de/ruction1 use1 modification1 or disclosure4 7#f7 ,op5ness pr9ciple 7,a7 ,9 g5]al ,! op]ator %\ld ma9ta9 a g5]al policy ( op5ness ab\t developm5ts1 practices1 & policies ) respect to ! p]sonal in=mation ( a m9or4 ,! op]ator %\ld provide ea* m9or us+ ! website1 onl9e s]vice1 onl9e application1 or mobile application ( ! op]ator ) a cle> & prom95t means-- 7i7 to id5tify & contact ! op]ator1 by1 at a m9imum1 disclos+1 cle>ly & prom95tly1 ! id5tity ( ! op]ator &-- 7,i7 9 ! case ( an op]ator :o is an individual1 ! address ( ! pr9cipal resid5ce ( ! op]ator & an e-mail address & telephone numb] = ! op]ator2 or 7,,ii7 9 ! case ( any o!r op]ator1 ! address ( ! pr9cipal place ( bus9ess ( ! op]ator & an e-mail address & telephone numb] = ! op]ator2 7ii7 to det]m9e :e!r ! op]ator possesses any p]sonal in=mation ( ! m9or1 ! nature ( any su* in=mation1 & ! purposes = :i* ! in=mation 0 collect$ & is be+ reta9$2 7iii7 to obta9 any p]sonal in=mation ( ! m9or t is 9 ! possession ( ! op]ator f ! op]ator1 or f a p]son specifi$ by ! op]ator1 )9 a reasonable "t aft] mak+ a reque/1 at a *>ge 7if any7 t is n excessive1 9 a reasonable mann]1 & 9 a =m t is readily intelligible to ! m9or2 7iv7 to *all5ge ! accuracy ( p]sonal in=mation ( ! m9or t is 9 ! possession ( ! op]ator2 & 7v7 if ! m9or e/abli%es ! inaccuracy ( p]sonal in=mation 9 a *all5ge "u clause 7iv71 to h su* in=mation eras$1 correct$1 complet$1 or o!rwise am5d$4 7,b7 ,limitation ,no?+ 9 ?is p>agraph %all be con/ru$ to p]mit an op]ator to erase or o!rwise modify p]sonal in=mation reque/$ by a law en=cem5t ag5cy pursuant to legal au?ority4 7#g7 ,individual p>ticipation pr9ciple ,! op]ator %\ld-- 7,a7 obta9 cons5t f a m9or be=e us+ or disclos+ ! p]sonal in=mation ( ! m9or = any purpose o!r ?an ! purposes describ$ 9 subp>agraphs 7,a7 ?r\gh 7,c7 ( p>agraph 7#c72 & 7,b7 obta9 affirmative express cons5t f a m9or be=e us+ or disclos+ previ\sly collect$ p]sonal in=mation ( ! m9or = purposes t con/itute a mat]ial *ange 9 practice f ! orig9al purposes specifi$ to ! m9or "u p>agraph 7#c74 7c7 ,regulations ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations to implem5t ?is section1 includ+ regulations fur!r def9+ ! ,fair ,in=mation ,practices ,pr9ciples describ$ 9 subsection 7b74 #bjg4 ,onl9e collection ( geolocation in=mation ( *ildr5 & m9ors 7a7 ,acts prohibit$ 7#a7 ,9 g5]al ,x is unlawful = an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to *ildr5 or m9ors1 or an op]ator hav+ actual k t geolocation in=mation be+ collect$ is f a *ild or m9or1 to collect geolocation in=mation f a *ild or m9or 9 a mann] t violates ! regulations prescrib$ "u subsection 7b74 7#b7 ,disclosure to p>5t or m9or protect$ ,not)/&+ p>agraph 7#a71 nei!r an op]ator nor ! op]ator's ag5t %all be held to be liable "u any ,f$]al or ,/ate law = any disclosure made 9 good fai? & foll[+ reasonable proc$ures 9 respond+ to a reque/ = disclosure ( geolocation in=mation "u subp>agraph 7,c77ii77,,iii7 or 7,d77ii77,,iii7 ( subsection 7b77#a74 7b7 ,regulations 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations t require an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application direct$ to *ildr5 or m9ors1 or an op]ator hav+ actual k t geolocation in=mation be+ collect$ is f a *ild or m9or-- 7,a7 to provide cle> & conspicu\s notice 9 cle> & pla9 language ( any geolocation in=mation ! op]ator collects1 h[ ! op]ator uses su* in=mation1 & :e!r ! op]ator discloses su* in=mation2 7,b7 to e/abli% proc$ures or me*anisms to ensure t geolocation in=mation is n collect$ f *ildr5 or m9ors except 9 accordance ) regulations promulgat$ "u ?is p>agraph2 7,c7 9 ! case ( collection ( geolocation in=mation f a *ild-- 7i7 prior to collect+ su* in=mation1 to obta9 v]ifiable p>5tal cons5t2 & 7ii7 aft] collect+ su* in=mation1 to provide to ! p>5t ( ! *ild1 ^u reque/ by & prop] id5tification ( ! p>5t-- 7,i7 a description ( ! geolocation in=mation collect$ f ! *ild by ! op]ator2 7,,ii7 ! opportunity at any "t to refuse to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future collection1 by ! op]ator ( geolocation in=mation f ! *ild2 & 7,,iii7 a means t is reasonable "u ! circum/ances = ! p>5t to obta9 any geolocation in=mation collect$ f ! *ild1 if su* in=mation is available to ! op]ator at ! "t ! p>5t makes ! reque/2 & 7,d7 9 ! case ( collection ( geolocation in=mation f a m9or-- 7i7 prior to collect+ su* in=mation1 to obta9 affirmative express cons5t f su* m9or2 & 7ii7 aft] collect+ su* in=mation1 to provide to ! m9or1 ^u reque/-- 7,i7 a description ( ! geolocation in=mation collect$ f ! m9or by ! op]ator2 7,,ii7 ! opportunity at any "t to refuse to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future collection1 by ! op]ator ( geolocation in=mation f ! m9or2 & 7,,iii7 a means t is reasonable "u ! circum/ances = ! m9or to obta9 any geolocation in=mation collect$ f ! m9or1 if su* in=mation is available to ! op]ator at ! "t ! m9or makes ! reque/4 7#b7 ,:5 cons5t n requir$ ,! regulations promulgat$ "u p>agraph 7#a7 %all provide t v]ifiable p>5tal cons5t "u subp>agraph 7,c77i7 ( su* p>agraph or affirmative express cons5t "u subp>agraph 7,d77i7 ( su* p>agraph is n requir$ :5 ! collection ( ! geolocation in=mation ( a *ild or m9or is necess>y1 to ! ext5t p]mitt$ "u o!r provisions ( law1 to provide in=mation to law en=cem5t ag5cies or = an inve/igation on a matt] relat$ to public safety4 7#c7 ,cont9uation ( s]vice ,! regulations promulgat$ "u p>agraph 7#a7 %all prohibit an op]ator f discont9u+ s]vice provid$ to-- 7,a7 a *ild on ! basis ( refusal by ! p>5t ( ! *ild1 "u subp>agraph 7,c77ii77,,ii7 ( su* p>agraph1 to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future onl9e collection1 ( geolocation in=mation f ! *ild by ! op]ator1 to ! ext5t t ! op]ator is capable ( provid+ su* s]vice )\t su* in=mation2 or 7,b7 a m9or on ! basis ( refusal by ! m9or1 "u subp>agraph 7,d77ii77,,ii7 ( su* p>agraph1 to p]mit ! fur!r use or ma9t5ance 9 retrievable =m1 or future onl9e collection1 ( geolocation in=mation f ! m9or by ! op]ator1 to ! ext5t t ! op]ator is capable ( provid+ su* s]vice )\t su* in=mation4 7c7 ,inconsi/5t ,/ate law ,no ,/ate or local gov]nm5t may impose any liability = comm]cial activities or actions by op]ators 9 int]/ate or =eign comm]ce 9 connection ) an activity or action describ$ 9 ?is section t is inconsi/5t ) ! treatm5t ( ^? activities or actions "u ?is section4 #bjh4 ,removal ( cont5t 7a7 ,acts prohibit$ ,x is unlawful = an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application to make publicly available ?r\gh ! website1 s]vice1 or application cont5t or in=mation t conta9s or displays p]sonal in=mation ( *ildr5 or m9ors 9 a mann] t violates ! regulations prescrib$ "u subsection 7b74 7b7 ,regulations 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( ! enactm5t ( ?is ,act1 ! ,commission %all promulgate1 "u section #eec ( title #e1 ,unit$ ,/ates ,code1 regulations t require an op]ator-- 7,a7 to ! ext5t te*nologically feasible1 to implem5t me*anisms t p]mit a us] ( ! website1 s]vice1 or application ( ! op]ator to erase or o!rwise elim9ate cont5t or in=mation submitt$ to ! website1 s]vice1 or application by su* us] t is publicly available ?r\gh ! website1 s]vice1 or application & conta9s or displays p]sonal in=mation ( *ildr5 or m9ors2 & 7,b7 to take appropriate /eps to make us]s aw>e ( su* me*anisms & to provide notice to us]s t su* me*anisms d n necess>ily provide compreh5sive removal ( ! cont5t or in=mation submitt$ by su* us]s4 7#b7 ,exception ,! regulations promulgat$ "u p>agraph 7#a7 may n require an op]ator or ?ird p>ty to erase or o!rwise elim9ate cont5t or in=mation t-- 7,a7 any o!r provision ( ,f$]al or ,/ate law requires ! op]ator or ?ird p>ty to ma9ta92 or 7,b7 0 submitt$ to ! website1 s]vice1 or application ( ! op]ator by any p]son o!r ?an ! us] :o is attempt+ to erase or o!rwise elim9ate su* cont5t or in=mation1 includ+ cont5t or in=mation submitt$ by su* us] t 0 republi%$ or resubmitt$ by ano!r p]son4 7#c7 ,limitation ,no?+ 9 ?is section %all be con/ru$ to limit ! au?ority ( a law en=cem5t ag5cy to obta9 any cont5t or in=mation f an op]ator z au?oriz$ by law or pursuant to an ord] ( a c\rt ( compet5t jurisdiction4 #bji4 ,en=cem5t & applicability 7a7 ,en=cem5t by ! ,commission 7#a7 ,9 g5]al ,except z o!rwise provid$1 ?is title & ! regulations prescrib$ "u ?is title %all be en=c$ by ! ,commission "u ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7#b7 ,unfair or deceptive acts or practices ,subject to subsection 7b71 a violation ( ?is title or a regulation prescrib$ "u ?is title %all be treat$ z a violation ( a rule def9+ an unfair or deceptive act or practice prescrib$ "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b774 7#c7 ,actions by ! ,commission 7,a7 ,9 g5]al ,subject to subsection 7b71 & except z provid$ 9 subsection 7d77#a71 ! ,commission %all prev5t any p]son f violat+ ?is title or a regulation prescrib$ "u ?is title 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is title4 7,b7 ,privileges & immunities ,any p]son :o violates ?is title or a regulation prescrib$ "u ?is title %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7b7 ,en=cem5t by c]ta9 o!r ag5cies ,not)/&+ subsection 7a71 compliance ) ! requirem5ts impos$ "u ?is title %all be en=c$ z foll[s3 7#a7 ,"u section #h ( ! ,f$]al ,deposit ,insurance ,act 7#ab ,u4,s4,c4 #ahah7 by ! appropriate ,f$]al bank+ ag5cy1 ) respect to an insur$ depository in/itution 7z su* t]ms are def9$ 9 section #c ( su* ,act 7#ab ,u4,s4,c4 #ahac774 7#b7 ,"u ! ,f$]al ,cr$it ,union ,act 7#ab ,u4,s4,c4 #agea et seq47 by ! ,national ,cr$it ,union ,adm9i/ration ,bo>d1 ) respect to any ,f$]al cr$it union4 7#c7 ,"u "p ,a ( subtitle ,,vii ( title #di1 ,unit$ ,/ates ,code1 by ! ,secret>y ( ,transportation1 ) respect to any air c>ri] or =eign air c>ri] subject to su* "p4 7#d7 ,"u ! ,pack]s & ,/ocky>ds ,act1 #aiba 7#g ,u4,s4,c4 #aha et seq47 7except z provid$ 9 section #djf ( su* ,act 7#g ,u4,s4,c4 #bbf2 #bbg77 by ! ,secret>y ( ,agriculture1 ) respect to any activities subject to su* ,act4 7#e7 ,"u ! ,f>m ,cr$it ,act ( #aiga 7#ab ,u4,s4,c4 #bjja et seq47 by ! ,f>m ,cr$it ,adm9i/ration1 ) respect to any ,f$]al l& bank1 ,f$]al l& bank association1 ,f$]al int]m$iate cr$it bank1 or production cr$it association4 7c7 ,en=cem5t by ,/ates 7#a7 ,civil actions ,9 any case 9 :i* ! attorney g5]al ( a ,/ate has reason to believe t an int]e/ ( ! resid5ts ( t ,/ate has be5 or is ?reat5$ or adv]sely affect$ by ! engagem5t ( any p]son 9 a practice t violates ?is title or a regulation prescrib$ "u ?is title1 ! ,/ate1 z p>5s patriae1 may br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 a di/rict c\rt ( ! ,unit$ ,/ates ( appropriate jurisdiction to-- 7,a7 enjo9 t practice2 7,b7 en=ce compliance ) ?is title or su* regulation2 7,c7 obta9 damages1 re/itution1 or o!r comp5sation on behalf ( resid5ts ( ! ,/ate2 or 7,d7 obta9 su* o!r relief z ! c\rt may consid] to be appropriate4 7#b7 ,rights ( ,f$]al ,trade ,commission 7,a7 ,notice to ,f$]al ,trade ,commission 7i7 ,9 g5]al ,except z provid$ 9 clause 7iii71 ! attorney g5]al ( a ,/ate %all notify ! ,f$]al ,trade ,commission 9 writ+ t ! attorney g5]al int5ds to br+ a civil action "u p>agraph 7#a7 be=e initiat+ ! civil action4 7ii7 ,cont5ts ,! notification requir$ by clause 7i7 ) respect to a civil action %all include a copy ( ! compla9t to be fil$ to initiate ! civil action4 7iii7 ,exception ,if x is n feasible = ! attorney g5]al ( a ,/ate to provide ! notification requir$ by clause 7i7 be=e initiat+ a civil action "u p>agraph 7#a71 ! attorney g5]al %all notify ! ,f$]al ,trade ,commission imm$iately ^u in/itut+ ! civil action4 7,b7 ,int]v5tion by ,f$]al ,trade ,commission ,! ,f$]al ,trade ,commission may-- 7i7 int]v5e 9 any civil action br\ght by ! attorney g5]al ( a ,/ate "u p>agraph 7#a72 & 7ii7 ^u int]v5+-- 7,i7 be he>d on all matt]s aris+ 9 ! civil action2 & 7,,ii7 file petitions = appeal ( a decision 9 ! civil action4 7#c7 ,inve/igatory p[]s ,= purposes ( br++ any civil action "u p>agraph 7#a71 no?+ 9 ?is title %all be con/ru$ to prev5t an attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on ! attorney g5]al by ! laws ( t ,/ate to-- 7,a7 conduct inve/igations2 7,b7 adm9i/] oa?s or affirmations2 or 7,c7 compel ! att5dance ( witnesses or ! production ( docum5t>y & o!r evid5ce4 7#d7 ,preemptive action by ,f$]al ,trade ,commission ,if ! ,f$]al ,trade ,commission in/itutes a civil action or an adm9i/rative action ) respect to a violation ( ?is title1 ! attorney g5]al ( a ,/ate may n1 dur+ ! p5d5cy ( su* action1 br+ a civil action "u p>agraph 7#a7 aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = ! violation ) respect to :i* ! ,commission in/itut$ su* action4 7#e7 ,v5ue2 s]vice ( process 7,a7 ,v5ue ,any action br\ght "u p>agraph 7#a7 may be br\ght 9 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code4 7,b7 ,s]vice ( process ,9 an action br\ght "u p>agraph 7#a71 process may be s]v$ 9 any di/rict 9 :i* ! def5dant-- 7i7 is an inhabitant2 or 7ii7 may be f\nd4 7#f7 ,actions by o!r ,/ate (ficials 7,a7 ,9 g5]al ,9 addition to civil actions br\ght by attorneys g5]al "u p>agraph 7#a71 any o!r (fic] ( a ,/ate :o is au?oriz$ by ! ,/ate to d s may br+ a civil action "u p>agraph 7#a71 subject to ! same requirem5ts & limitations t apply "u ?is subsection to civil actions br\ght by attorneys g5]al4 7,b7 ,sav+s provision ,no?+ 9 ?is subsection may be con/ru$ to prohibit an au?oriz$ (ficial ( a ,/ate f initiat+ or cont9u+ any proce$+ 9 a c\rt ( ! ,/ate = a violation ( any civil or crim9al law ( ! ,/ate4 7d7 ,telecommunications c>ri]s & cable op]ators 7#a7 ,en=cem5t by ,,ftc ,not)/&+ section #e7;a77#b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #de7;a77#b771 compliance ) ! requirem5ts impos$ "u ?is title %all be en=c$ by ! ,commission ) respect to any telecommunications c>ri] 7z def9$ 9 section #c ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #aec774 7#b7 ,relation%ip to o!r law ,to ! ext5t t sections #bbb1 #cch7;i71 & #fca ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbb2 #cch7;i72 #eea7 are inconsi/5t ) ?is title1 ?is title controls4 #baj4 ,rule = treatm5t ( us]s ( websites1 s]vices1 & applications direct$ to *ildr5 or m9ors ,an op]ator ( a website1 onl9e s]vice1 onl9e application1 or mobile application t is direct$ to *ildr5 or m9ors %all treat all us]s ( su* website1 s]vice1 or application z *ildr5 or m9ors 7z ! case may be7 = purposes ( ?is title1 except z p]mitt$ by ! ,commission by a regulation promulgat$ "u ?is title4 #baa4 ,effective dates 7a7 ,9 g5]al ,except z provid$ 9 subsections 7b7 & 7c71 ?is title & ! am5dm5ts made by ?is title %all take effect on ! date t is #a ye> aft] ! date ( ! enactm5t ( ?is ,act4 7b7 ,au?ority ,to promulgate regulations ,! foll[+ %all take effect on ! date ( ! enactm5t ( ?is ,act3 7#a7 ,! am5dm5ts made by subsections 7a77#e7 & 7b77#c77;,a7 ( section #bjd4 7#b7 ,sections #bje7;b71 #bjf7;c71 #bjg7;b71 & #bjh7;b74 7#c7 ,subsections 7b7 & 7c7 ( section #bjc4 7c7 ,digital ,m>ket+ ,bill ( ,rights = ,te5s ,section #bjf1 except = subsection 7c7 ( su* section1 %all take effect on ! date t is #ahj days aft] ! promulgation ( regulations "u su* subsection4