,i #aafth ,,congress #b;d ,session ,h4 ,r4 #fbbg ,,in ,,the ,,house ,,of ,,representatives ,march #ab1 #bjbj,mr4 ,lipinski introduced the following bill2 which was referred to the ,committee on ,energy and ,commerce ,a ,,bill ,to direct the ,federal ,trade ,commission to issue privacy scores for certain interactive computer services1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,privacy ,score ,act of #bjbj4 #b4 ,privacy framework and scores 7a7 ,privacy framework 7#a7 ,development ,the ,commission shall develop a framework for assessing the privacy practices of interactive computer services 7in this section referred to as the privacy framework74 7#b7 ,framework criteria ,the privacy framework shall include an assessment of the following criteria1 with respect to an interactive computer service3 7,a7 ,whether the service collects1 stores1 uses1 and shares only covered information necessary to perform a relevant user-facing purpose4 7,b7 ,the level of transparency of the service regarding the privacy practices of the service1 including the extent to which the service communicates to users the following3 7i7 ,what covered information may be collected4 7ii7 ,how such information may be stored4 7iii7 ,how such information may be used4 7iv7 ,with whom such information may be shared4 7,c7 ,whether the service offers users any options to designate preferences for covered information collected1 stored1 used1 or shared in excess of the minimum information necessary to perform a relevant user-facing purpose1 and whether such preferences are respected4 7,d7 ,the risk that covered information collected by the service may be used to identify users1 while taking into consideration whether the identification is necessary to perform a relevant user-facing purpose of the service and whether a reasonable user would be aware of such purpose4 7,e7 ,the security of sensitive covered information collected by the service4 7,f7 ,any other criteria the ,commission determines necessary to protect the privacy of users with respect to covered information4 7b7 ,privacy scores 7#a7 ,development ,the ,commission shall use the privacy framework to develop a system for issuing a score for an interactive computer service that reflects the extent to which the service protects the privacy of the covered information of users1 taking into consideration the purpose of the service and options offered to users with respect to covered information 7in this section referred to as a privacy score74 7#b7 ,issuance of score ,the ,commission-- 7,a7 shall issue a privacy score for the #ajj interactive computer services that have the most unique ,united ,states users each year 7as determined by the ,commission72 and 7,b7 may issue a privacy score for interactive computer services not described in subparagraph 7,a7 with a high number of unique ,united ,states users 7as determined by the ,commission74 7#c7 ,evaluation of score ,each year1 the ,commission shall evaluate interactive computer services to determine-- 7,a7 whether the interactive computer services required to be issued a privacy score under paragraph 7#b77;,a7 have changed2 7,b7 whether the interactive computer services eligible to be issued a privacy score under paragraph 7#b77;,b7 have changed2 and 7,c7 whether to modify a privacy score previously issued for an interactive computer service based on changes in-- 7i7 the extent to which the service protects the privacy of the covered information of users2 7ii7 the purposes of the service2 or 7iii7 the options offered to users with respect to covered information collected by the service4 7#d7 ,publication of score 7,a7 ,in general ,not later than #a year after the date of the enactment of this ,act1 the ,commission shall publish on a public website of the ,commission the privacy scores issued pursuant to paragraph 7#b71 the corresponding dates of issuance1 and a link to the online privacy policy of the interactive computer service4 7,b7 ,updates ,beginning on the date that is #a year after the date on which the ,commission initially publishes the privacy scores under subparagraph 7,a71 and annually thereafter1 the ,commission shall publish updates of such scores based on the evaluation conducted under paragraph 7#c7 for the relevant year4 7,c7 ,decline in unique ,united ,states users ,notwithstanding the ,commission determining that an interactive computer service for which a privacy score has been issued pursuant to paragraph 7#b7 no longer has a high number of unique ,united ,states users1 the ,commission may continue to publish the most recently issued score and the corresponding date of issuance4 7#e7 ,dispute ,process ,not later than #a year after the date of the enactment of this ,act1 the ,commission shall establish a process for resolving disputes related to the issuance of privacy scores that have been raised-- 7,a7 by an interactive computer service for which a privacy score has been issued2 or 7,b7 by a third party4 7#f7 ,report ,not later than #b years after the date of the publication of the initial privacy scores under paragraph 7#d77;,a71 and annually thereafter1 the ,commission shall submit to ,congress a report that describes the following3 7,a7 ,the number of interactive computer services evaluated with respect to the issuance of privacy scores during the most recently completed year and in total4 7,b7 ,trends related to privacy scores1 including the number of privacy scores that the ,commission issued or modified during the most recently completed year and in total4 7,c7 ,any common characteristics of interactive computer services with low privacy scores1 such as privacy policy terms1 industry1 location where the service is based1 type of service offered1 or ownership or control of the service4 7,d7 ,if applicable1 an identification of trends in the practices of interactive computer services with respect to the privacy of the covered information of users of such services1 including any potential emerging threats posed by such practices4 7,e7 ,if determined necessary by the ,commission1 recommendations for congressional action to promote the privacy of users of interactive computer services4 7c7 ,public awareness and recognition ,the ,commission may-- 7#a7 conduct public awareness campaigns to educate users about the privacy scores issued under subsection 7b72 and 7#b7 establish a recognition program for interactive computer services with outstanding privacy scores issued under such subsection4 7d7 ,definitions ,in this section3 7#a7 ,commission ,the term ,commission means the ,federal ,trade ,commission4 7#b7 ,covered information ,the term covered information means information that is linked or that the ,commission determines is reasonably linkable to a unique user of an interactive computer service1 including-- 7,a7 first and last name of the user2 7,b7 home or other physical address of the user1 including the name of a street1 city1 or town2 7,c7 email address of the user2 7,d7 telephone number of the user2 and 7,e7 ,social ,security number of the user4 7#c7 ,interactive computer service ,the term interactive computer service has the meaning given the term in section #bcj7;f7 of the ,communications ,act of #aicd 7#dg ,u4,s4,c4 #bcj7;f774 7#d7 ,sensitive covered information ,the term sensitive covered information means any of the following covered information3 7,a7 ,financial information of the user4 7,b7 ,biometric identifiers of the user4 7,c7 ,citizenship or immigration status of the user4 7,d7 ,medical information of the user4 7,e7 ,race1 ethnicity1 or religious affiliation of the user4 7,f7 ,criminal history of the user4