,,ii  #aae? ,,congress  #b;d ,session   
,s4 #bfci  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,april #aj1 #bjah ,mr4 
,m>key 7= himself & ,mr4 ,blum5?al7     
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to require ! ,f$]al ,trade    
,commission to e/abli% privacy          
protections = cu/om]s ( onl9e edge      
provid]s1 & = o!r purposes4  #a4 ,%ort  
title  ,?is ,act may be cit$ z ! ,cu/om]
 ,onl9e ,notification = ,/opp+          
,edge-provid] ,network ,transgressions  
or ! ,,cons5t ,act4  #b4 ,privacy (     
cu/om]s ( edge provid]s  7a7 ,def9itions
 ,9 ?is section-- 7#a7 ! t]m brea* (    
security means any in/ance 9 :i* a      
p]son1 )\t au?orization or 9 violation (
 any au?orization provid$ to ! p]son1   
ga9s access to1 uses1 or discloses      
s5sitive cu/om] propriet>y in=mation2   
7#b7 ! t]m ,commission means ! ,f$]al   
,trade ,commission2  7#c7 ! t]m cu/om]  
means--  7,a7 an individual :o is a     

cu/om] ( an edge provid]2 &  7,b7 an    
individual :o is a us] ( an edge s]vice 
provid$ by an edge provid]2  7#d7 ! t]m 
edge provid] means a p]son t provides an
 edge s]vice1 b only to ! ext5t to :i* !
 p]son provides t s]vice2  7#e7 ! t]m   
edge s]vice-- 7,a7 means a s]vice t is  
provid$ ov] ! ,int]net--  7i7 = :i* !   
edge provid] requires ! cu/om] to       
subscribe or e/abli% an acc\nt 9 ord] to
 use ! s]vice2  7ii7 t ! cu/om] pur*ases
 f ! edge provid] )\t a subscription or 
acc\nt2  7iii7 ?r\gh :i* a program      
se>*es = & id5tifies items 9 a database 
t correspond to keywords or *>act]s     
specifi$ by ! cu/om]2 or  7iv7 ?r\gh :i*
 a cu/om] divulges s5sitive cu/om]      
propriet>y in=mation ( ! cu/om]2 &  7,b7
 includes any s]vice t is provid$--  7i7
 ?r\gh a s(tw>e program1 includ+ a      
mobile application2 or  7ii7 ov] !      
,int]net1 directly or indirectly1 ?r\gh 
a connect$ device2  7#f7 ! t]m opt-9    
cons5t means a me?od by :i* an edge     
provid] may obta9 f a cu/om]            

affirmative1 express cons5t to use1     
disclose1 or p]mit access to ! s5sitive 
cu/om] propriet>y in=mation ( ! cu/om]  
aft] ! cu/om] has receiv$ explicit      
notification ( ! reque/ ( ! edge provid]
 ) respect to t in=mation2  7#g7 ! t]m  
p]sonally id5tifiable in=mation means   
any in=mation t is l9k$1 or reasonably  
may be l9k$1 to a specific individual or
 device2 &  7#h7 ! t]m s5sitive cu/om]  
propriet>y in=mation includes-- 7,a7    
f9ancial in=mation2  7,b7 heal?         
in=mation2  7,c7 in=mation p]ta9+ to    
*ildr52  7,d7 ,social ,security numb]s2 
7,e7 precise geolocation in=mation2     
7,f7 cont5t ( communications2  7,g7 call
 detail in=mation2  7,h7 web br[s+      
hi/ory1 application usage hi/ory1 & !   
functional equival5ts ( ei!r2 &  7,i7   
any o!r p]sonally id5tifiable in=mation 
t ! ,commission det]m9es to be s5sitive4
  7b7 ,privacy ( cu/om]s ( edge provid]s
  7#a7 ,act prohibit$ ,x is unlawful =  
an edge provid] to violate ! privacy ( a
 cu/om] 9 a mann] t violates a          

regulation prescrib$ "u p>agraph 7#b74  
7#b7 ,regulations  7,a7 ,9 g5]al ,9     
c>ry+ out ?is ,act1 ! ,commission %all--
 7i7 n lat] ?an #a ye> aft] ! date (    
enactm5t ( ?is ,act1 promulgate1 "u     
section #eec ( title #e1 ,unit$ ,/ates  
,code1 regulations to protect ! privacy 
( cu/om]s ( edge provid]s2 &  7ii7      
ensure t ! regulations promulgat$ "u    
clause 7i7 take effect n lat] ?an #ahj  
days aft] ! date on :i* ! regulations   
are promulgat$4  7,b7 ,requirem5ts "u   
regulations ,9 promulgat+ regulations "u
 subp>agraph 7,a71 ! ,commission %all-- 
7i7 require an edge provid] to notify a 
cu/om] ab\t ! collection1 use1 & %>+ ( !
 s5sitive cu/om] propriet>y in=mation ( 
! cu/om]1 includ+ by--  7,i7 notify+ !  
cu/om] ab\t ! types ( s5sitive cu/om]   
propriet>y in=mation ! edge provid]     
collects2  7,,ii7 specify+ h[ & = :at   
purposes ! edge provid] uses & %>es     
s5sitive cu/om] propriet>y in=mation2 & 
7,,iii7 id5tify+ ! types ( entities )   
:i* ! edge provid] %>es s5sitive cu/om] 

propriet>y in=mation2  7ii7 require an  
edge provid] to-- 7,i7 supply !         
in=mation describ$ 9 clause 7i7 :5 a    
cu/om] initially subscribes to1         
e/abli%es an acc\nt =1 pur*ases1 or     
beg9s receiv+ an edge s]vice2 &  7,,ii7 
update a cu/om] :5 ! policies ( ! edge  
provid] relat+ to ! in=mation describ$ 9
 clause 7i7 *ange 9 a significant way2  
7iii7 require an edge provid] to obta9  
opt-9 cons5t f a cu/om] to use1 %>e1 or 
sell ! s5sitive cu/om] propriet>y       
in=mation ( ! cu/om]2  7iv7 implem5t    
/rong protection = s5sitive cu/om]      
propriet>y in=mation t has be5          
de-id5tifi$ to prev5t ! re/oration ( any
 p]sonally id5tifiable in=mation t has  
be5 previ\sly remov$1 includ+ by--  7,i7
 requir+ an edge provid] to alt] !      
cu/om] in=mation s t ! cu/om] in=mation 
_c be reasonably l9k$ to a specific     
individual or device2  7,,ii7 requir+ an
 edge provid] to publically commit to   
ma9ta9 & use s5sitive cu/om] propriet>y 
in=mation 9 an unid5tifiable =mat & to n

 attempt to re/ore any p]sonally        
id5tifiable in=mation t has be5         
previ\sly remov$ f ! s5sitive cu/om]    
propriet>y in=mation2 &  7,,iii7 requir+
 an edge provid] to contractually       
prohibit ! practice ( re/or+ any        
p]sonally id5tifiable in=mation t has   
be5 previ\sly remov$ f s5sitive cu/om]  
propriet>y in=mation2  7v7 det]m9e on a 
case-by-case basis ! reasonabl5ess ( any
 program t relates ! price ( an edge    
s]vice to ! privacy protections af=d$ to
 cu/om]s1 & require an edge provid] to  
fully disclose plans t provide disc\nts 
or o!r inc5tives 9 ex*ange = a express  
affirmative cons5t ( ! cu/om] to ! use &
 %>+ ( ! s5sitive cu/om] propriet>y     
in=mation ( ! cu/om]2  7vi7 prohibit an 
edge provid] f refus+ to s]ve a cu/om]  
:o does n cons5t to ! use & %>+ ( !     
cu/om] propriet>y in=mation ( ! cu/om] =
 comm]cial purposes 7commonly kn[n z a  
take-x-or-leave-x (f]7 on ! basis ( t   
refusal to cons5t by ! cu/om]2 &  7vii7 
require an edge provid] to-- 7,i7       

develop reasonable data security        
practices2 &  7,,ii7 notify a cu/om] if 
a brea* ( security has occurr$ if ! edge
 provid] det]m9es t an unau?oriz$       
disclosure ( ! s5sitive cu/om]          
propriet>y in=mation ( ! cu/om] has     
occurr$ & h>m is reasonably likely to   
occur4  7c7 ,en=cem5t by ! ,commission  
7#a7 ,9 g5]al ,except z o!rwise provid$1
 ?is ,act & ! regulations prescrib$ "u  
?is ,act %all be en=c$ by ! ,commission 
"u ! ,f$]al ,trade ,commission ,act 7#ae
 ,u4,s4,c4 #da et seq474  7#b7 ,unfair  
or deceptive acts or practices ,subject 
to subsection 7d71 a violation ( ?is    
,act or a regulation prescrib$ "u ?is   
,act %all be treat$ z a violation ( a   
rule def9+ an unfair or deceptive act or
 practice prescrib$ "u section          
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b774  7#c7 ,actions by ! 
,commission ,subject to subsection 7d71 
& except z provid$ 9 subsection 7f77#a71
 ! ,commission %all prev5t any p]son f  

violat+ ?is ,act or a regulation        
prescrib$ "u ?is ,act 9 ! same mann]1 by
 ! same means1 & ) ! same jurisdiction1 
p[]s1 & duties z ?\gh all applicable    
t]ms & provisions ( ! ,f$]al ,trade     
,commission ,act 7#ae ,u4,s4,c4 #da et  
seq47 7 incorporat$ into & made a "p (  
?is ,act1 & any p]son :o violates ?is   
,act or su* regulation %all be subject  
to ! p5alties & entitl$ to ! privileges 
& immunities provid$ 9 ! ,f$]al ,trade  
,commission ,act 7#ae ,u4,s4,c4 #da et  
seq474  7d7 ,en=cem5t by c]ta9 o!r      
ag5cies ,compliance ) ! requirem5ts     
impos$ "u ?is ,act %all be en=c$ z      
foll[s3  7#a7 ,"u section #h ( ! ,f$]al 
,deposit ,insurance ,act 7#ab ,u4,s4,c4 
#ahah7 by ! appropriate ,f$]al bank+    
ag5cy1 ) respect to an insur$ depository
 in/itution 7z ^? t]ms are def9$ 9      
section #c ( t ,act 7#ab ,u4,s4,c4      
#ahac774  7#b7 ,"u ! ,f$]al ,cr$it      
,union ,act 7#ab ,u4,s4,c4 #agea et     
seq47 by ! ,national ,cr$it ,union      
,adm9i/ration ,bo>d1 ) respect to any   

,f$]al cr$it union4  7#c7 ,"u "p ,a (   
subtitle ,,vii ( title #di1 ,unit$      
,/ates ,code1 by ! ,secret>y (          
,transportation1 ) respect to any air   
c>ri] or =eign air c>ri] subject to t   
"p4  7#d7 ,"u ! ,pack]s & ,/ocky>ds     
,act1 #aiba 7#g ,u4,s4,c4 #aha et seq47 
7except z provid$ 9 section #djf ( t    
,act 7#g ,u4,s4,c4 #bbf2 #bbg77 by !    
,secret>y ( ,agriculture1 ) respect to  
any activities subject to t ,act4  7#e7 
,"u ! ,f>m ,cr$it ,act ( #aiga 7#ab     
,u4,s4,c4 #bjja et seq47 by ! ,f>m      
,cr$it ,adm9i/ration1 ) respect to any  
,f$]al l& bank1 ,f$]al l& bank          
association1 ,f$]al int]m$iate cr$it    
bank1 or production cr$it association4  
7e7 ,en=cem5t by ,/ate attorneys g5]al  
7#a7 ,9 g5]al  7,a7 ,civil actions ,9   
any case 9 :i* ! attorney g5]al ( a     
,/ate has reason to believe t an int]e/ 
( ! resid5ts ( t ,/ate has be5 or is    
?reat5$ or adv]sely affect$ by !        
engagem5t ( any p]son 9 a practice t    
violates ?is ,act or a regulation       

prescrib$ "u ?is ,act1 ! ,/ate1 z p>5s  
patriae1 may br+ a civil action on      
behalf ( ! resid5ts ( ! ,/ate 9 a       
di/rict c\rt ( ! ,unit$ ,/ates (        
appropriate jurisdiction to--  7i7 enjo9
 t practice2  7ii7 en=ce compliance )   
?is ,act or su* regulation2  7iii7 obta9
 damages1 re/itution1 or o!r comp5sation
 on behalf ( resid5ts ( ! ,/ate2 or     
7iv7 obta9 su* o!r relief z ! c\rt may  
consid] to be appropriate4  7,b7 ,notice
  7i7 ,9 g5]al ,be=e fil+ an action "u  
subp>agraph 7,a71 ! attorney g5]al ( !  
,/ate involv$ %all provide to !         
,commission--  7,i7 writt5 notice ( t   
action2 &  7,,ii7 a copy ( ! compla9t = 
t action4  7ii7 ,exemption  7,i7 ,9     
g5]al ,clause 7i7 %all n apply ) respect
 to ! fil+ ( an action by an attorney   
g5]al ( a ,/ate "u ?is p>agraph if !    
attorney g5]al det]m9es t x is n        
feasible to provide ! notice describ$ 9 
t clause be=e ! fil+ ( ! action4  7,,ii7
 ,notification ,9 an action describ$ 9  
subclause 7,i71 ! attorney g5]al ( a    

,/ate %all provide notice & a copy ( !  
compla9t to ! ,commission at ! same "t z
 ! attorney g5]al files ! action4  7#b7 
,int]v5tion  7,a7 ,9 g5]al ,on receiv+  
notice "u p>agraph 7#a77;,b71 !         
,commission %all h ! "r to int]v5e 9 !  
action t is ! subject ( ! notice4  7,b7 
,effect ( int]v5tion ,if ! ,commission  
int]v5es 9 an action "u p>agraph 7#a71 x
 %all h ! "r-- 7i7 to be he>d ) respect 
to any matt] t arises 9 t action2 &     
7ii7 to file a petition = appeal4  7#c7 
,con/ruction ,= purposes ( br++ any     
civil action "u p>agraph 7#a71 no?+ 9   
?is ,act %all be con/ru$ to prev5t an   
attorney g5]al ( a ,/ate f ex]cis+ !    
p[]s conf]r$ on ! attorney g5]al by !   
laws ( t ,/ate to--  7,a7 conduct       
inve/igations2  7,b7 adm9i/] oa?s or    
affirmations2 or  7,c7 compel !         
att5dance ( witnesses or ! production ( 
docum5t>y & o!r evid5ce4  7#d7 ,actions 
by ! ,commission ,9 any case 9 :i* an   
action is in/itut$ by or on behalf ( !  
,commission = violation ( ?is ,act or a 

regulation prescrib$ "u ?is ,act1 no    
,/ate may1 dur+ ! p5d5cy ( t action1    
in/itute an action "u p>agraph 7#a7     
aga9/ any def5dant nam$ 9 ! compla9t 9 !
 action in/itut$ by or on behalf ( !    
,commission = t violation4  7#e7 ,v5ue2 
s]vice ( process  7,a7 ,v5ue ,any action
 br\ght "u p>agraph 7#a7 may be br\ght 9
 ! di/rict c\rt ( ! ,unit$ ,/ates t     
meets applicable requirem5ts relat+ to  
v5ue "u section #acia ( title #bh1      
,unit$ ,/ates ,code4  7,b7 ,s]vice (    
process ,9 an action br\ght "u p>agraph 
7#a71 process may be s]v$ 9 any di/rict 
9 :i* ! def5dant--  7i7 is an           
inhabitant2 or  7ii7 may be f\nd4  7f7  
,telecommunications c>ri]s  7#a7        
,def9ition ,9 ?is subsection1 ! t]m     
telecommunications c>ri] has ! mean+    
giv5 ! t]m 9 section #c ( !             
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #aec74  7#b7 ,en=cem5t by !   
commission ,not)/&+ section #e7;a77#b7 (
 ! ,f$]al ,trade ,commission ,act 7#ae  
,u4,s4,c4 #de7;a77#b771 compliance ) !  

requirem5ts impos$ "u ?is ,act %all be  
en=c$ by ! ,commission ) respect to any 
telecommunications c>ri]1 b only to !   
ext5t t ! telecommunications c>ri] is   
op]at+ z an edge provid]4  7#c7         
,relation%ip to o!r law ,to ! ext5t t ! 
applicability ( section #bbb1 #cch7;i71 
or #fca ( ! ,communications ,act ( #aicd
 7#dg ,u4,s4,c4 #bbb1 #cch7;i71 #eea7 to
 a telecommunications c>ri] is          
inconsi/5t ) ?is ,act1 ?is ,act %all    
sup]s$e ^? sections only to ! ext5t t ! 
telecommunications c>ri] is op]at+ z an 
edge provid]4