,,iii  #aae? ,,congress  #b;d ,session  
,s4 ,,res4 #ebc  ,,9 ,,! ,,s5ate ,,( ,,!
 ,,unit$ ,,/ates  ,may #bd1 #bjah ,mr4  
,m>key 7= himself1 ,mr4 ,durb91 ,mr4    
,s&]s1 & ,mr4 ,blum5?al7 submitt$ !     
foll[+ resolution2 :i* 0 ref]r$ to !    
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation  ,,resolution  ,enc\rag+
 companies to apply privacy protections 
includ$ 9 ! ,g5]al ,data ,protection    
,regulation ( ! ,european ,union to     
citiz5s ( ! ,unit$ ,/ates4  ,:]eas !    
,european ,union has enact$ ! ,g5]al    
,data ,protection ,regulation 7ref]r$ to
 9 ?is preamble z ! ,,gdpr71 :i*        
provides ! #ejh1jjj1jjj resid5ts ( !    
,european ,union ) significant new      
privacy protections2 ,:]eas ! ,,gdpr    
takes effect on ,may #be1 #bjah2 ,:]eas 
! rules ( ! ,,gdpr w apply to _m        
entities 9 ! ,unit$ ,/ates t s]ve us]s &
 cu/om]s 9 bo? ,europe & ! ,unit$       
,/ates2 ,:]eas ! ,,gdpr requires t--    
7#a7 data processors h a legal basis =  
process+ ! data ( us]s2 &  7#b7 opt-91  

freely giv51 specific1 in=m$1 &         
unambigu\s cons5t f us]s is a prim>y    
legal basis2  ,:]eas poll+ %[s t p 9 !  
,unit$ ,/ates are increas+ly conc]n$    
ab\t _! privacy & ! security ( _!       
p]sonal in=mation2 ,:]eas rec5t data    
brea*es & privacy invasions affect+     
millions ( p 9 ! ,unit$ ,/ates und]score
 ! ne$ = enhanc$ privacy protection 9 ! 
,unit$ ,/ates2 & ,:]eas p 9 ! ,unit$    
,/ates h a "r to privacy1 & entities t  
control & process ! data ( p 9 ! ,unit$ 
,/ates h an obligation to protect t     
data3 ,n[1 !re=e1 be x  ,t ! ,s5ate     
enc\rages entities cov]$ by ! ,g5]al    
,data ,protection ,regulation ( !       
,european ,union 7ref]r$ to 9 ?is       
resolv+ clause z ! ,,gdpr71 includ+ edge
 provid]s1 broadb& provid]s1 & data     
brok]s--  7#a7 to provide ! p ( ! ,unit$
 ,/ates ) ! privacy protections includ$ 
9 ! ,,gdpr 9 a mann] consi/5t ) exi/+   
laws & rights 9 ! ,unit$ ,/ates1 includ+
 ! ,fir/ ,am5dm5t2 &  7#b7 to include 9 
! protections describ$ 9 p>agraph 7#a7--

 7,a7 ! requirem5t t--  7i7 data        
processors 7z describ$ 9 ! ,,gdpr7 h a  
legal basis = process+ ! data ( us]s2   
7ii7 opt-91 freely giv51 specific1      
in=m$1 & unambigu\s cons5t f us]s be a  
prim>y legal basis = purposes ( clause  
7i72  7iii7 data processors design _!   
sy/ems 9 a way t-- 7,i7 m9imizes !      
process+ ( data to only :at is necess>y 
= ! specific purpose /at$ to !          
individual2 &  7,,ii7 by default1       
protects p]sonal in=mation f be+ us$ =  
o!r purposes2  7iv7 entities process+ ! 
data ( *ildr5 in/itute special          
protections1 p>ticul>ly ) ref]5ce to !  
use ( ! data ( *ildr5 = m>ket+ purposes2
  7v7 data processors & controll]s 7z   
describ$ 9 ! ,,gdpr7 ensure compliance )
 relevant privacy rules2 &  7vi7 data   
processors implem5t appropriate ov]sight
 ov] ?ird p>ty data processors2 &  7,b7 
! "r ( an individual--  7i7 to revoke   
cons5t = data process+ at any "t2  7ii7 
to n be subject to automat$             
decisionmak+1 includ+ pr(il+1 )\t human 

int]v5tion if ! decisionmak+ has legal  
or o!rwise significant effects on !     
individual2  7iii7 to "k :i* entities h 
access to ! data ( ! individual & h[ t  
data is be+ us$2  7iv7 to correct ! data
 ( ! individual if x is inaccurate or   
incomplete2 &  7v7 to obta9 & reuse !   
data ( ! individual = ! purposes ( !    
individual across o!r s]vices4