,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #aajh  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,april #aj1 #bjai,mr4  
,wyd5 7= himself & ,mr4 ,book]7         
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to direct ! ,f$]al ,trade     
,commission to require entities t use1  
/ore1 or %>e p]sonal in=mation to       
conduct automat$ decision sy/em impact  
assessm5ts & data protection impact     
assessm5ts4  #a4 ,%ort title ,?is ,act  
may be cit$ z ! ,algori?mic             
,acc\ntability ,act ( #bjai4  #b4       
,def9itions ,9 ?is ,act3  7#a7 ,automat$
 decision sy/em ,! t]m automat$ decision
 sy/em means a computational process1   
includ+ "o d]iv$ f ma*9e le>n+1         
/ati/ics1 or o!r data process+ or       
artificial intellig5ce te*niques1 t     
makes a decision or facilitates human   
decision mak+1 t impacts consum]s4  7#b7
 ,automat$ decision sy/em impact        
assessm5t ,! t]m automat$ decision sy/em

 impact assessm5t means a /udy evaluat+ 
an automat$ decision sy/em & ! automat$ 
decision sy/em's developm5t process1    
includ+ ! design & tra9+ data ( !       
automat$ decision sy/em1 = impacts on   
accuracy1 fairness1 bias1 discrim9ation1
 privacy1 & security t includes1 at a   
m9imum--  7,a7 a detail$ description ( !
 automat$ decision sy/em1 its design1   
its tra9+1 data1 & its purpose2  7,b7 an
 assessm5t ( ! relative b5efits & co/s (
 ! automat$ decision sy/em 9 light ( its
 purpose1 tak+ into acc\nt relevant     
factors1 includ+--  7i7 data m9imization
 practices2  7ii7 ! duration = :i*      
p]sonal in=mation & ! results ( !       
automat$ decision sy/em are /or$2  7iii7
 :at in=mation ab\t ! automat$ decision 
sy/em is available to consum]s2  7iv7 ! 
ext5t to :i* consum]s h access to !     
results ( ! automat$ decision sy/em &   
may correct or object to its results2 & 
7v7 ! recipi5ts ( ! results ( ! automat$
 decision sy/em2  7,c7 an assessm5t ( ! 
risks pos$ by ! automat$ decision sy/em 

to ! privacy or security ( p]sonal      
in=mation ( consum]s & ! risks t !      
automat$ decision sy/em may result 9 or 
contribute to inaccurate1 unfair1 bias$1
 or discrim9atory decisions impact+     
consum]s2 &  7,d7 ! measures ! cov]$    
entity w employ to m9imize ! risks      
describ$ 9 subp>agraph 7,c71 includ+    
te*nological & physical safegu>ds4  7#c7
 ,commission ,! t]m ,commission means ! 
,f$]al ,trade ,commission4  7#d7        
,consum] ,! t]m consum] means an        
individual4  7#e7 ,cov]$ entity ,! t]m  
cov]$ entity means any p]son1 p>tn]%ip1 
or corporation ov] :i* ! ,commission has
 jurisdiction "u section #e7;a77#b7 ( ! 
,f$]al ,trade ,commission ,act 7#ae     
,u4,s4,c4 #de7;a77#b77 t--  7,a7 _h     
great] ?an #ej1jjj1jjj 9 av]age annual  
gross receipts = ! #c-taxable-ye> p]iod 
prec$+ ! mo/ rec5t fiscal ye>1 z det]m9$
 9 accordance ) p>agraphs 7#b7 & 7#c7 ( 
section #ddh7;c7 ( ! ,int]nal ,rev5ue   
,code ( #aihf2  7,b7 possesses or       
controls p]sonal in=mation on m ?an--   

7i7 #a1jjj1jjj consum]s2 or  7ii7       
#a1jjj1jjj consum] devices2  7,c7 is    
sub/antially own$1 op]at$1 or controll$ 
by a p]son1 p>tn]%ip1 or corporation t  
meets ! requirem5ts "u subp>agraph 7,a7 
or 7,b72 or  7,d7 is a data brok] or o!r
 comm]cial entity t1 z a sub/antial "p (
 its bus9ess1 collects1 assembles1 or   
ma9ta9s p]sonal in=mation conc]n+ an    
individual :o is n a cu/om] or an       
employee ( t entity 9 ord] to sell or   
trade ! in=mation or provide ?ird-p>ty  
access to ! in=mation4  7#f7 ,data      
protection impact assessm5t ,! t]m data 
protection impact assessm5t means a /udy
 evaluat+ ! ext5t to :i* an in=mation   
sy/em protects ! privacy & security (   
p]sonal in=mation ! sy/em processes4    
7#g7 ,high-risk automat$ decision sy/em 
,! t]m high-risk automat$ decision sy/em
 means an automat$ decision sy/em t--   
7,a7 tak+ into acc\nt ! novelty ( !     
te*nology us$ & ! nature1 scope1        
context1 & purpose ( ! automat$ decision
 sy/em1 poses a significant risk--  7i7 

to ! privacy or security ( p]sonal      
in=mation ( consum]s2 or  7ii7 ( result+
 9 or contribut+ to inaccurate1 unfair1 
bias$1 or discrim9atory decisions       
impact+ consum]s2  7,b7 makes decisions1
 or facilitates human decision mak+1    
bas$ on sy/ematic & ext5sive evaluations
 ( consum]s1 includ+ attempts to analyze
 or pr$ict s5sitive aspects ( _! lives1 
su* z _! "w p]=mance1 economic          
situation1 heal?1 p]sonal pref]5ces1    
int]e/s1 behavior1 location1 or         
movem5ts1 t--  7i7 alt] legal rights (  
consum]s2 or  7ii7 o!rwise significantly
 impact consum]s2  7,c7 involves !      
p]sonal in=mation ( a significant numb] 
( consum]s reg>d+ race1 color1 national 
orig91 political op9ions1 religion1     
trade union memb]%ip1 g5etic data1      
biometric data1 heal?1 g5d]1 g5d]       
id5tity1 sexuality1 sexual ori5tation1  
crim9al convictions1 or arre/s2  7,d7   
sy/ematically monitors a l>ge1 publicly 
accessible physical place2 or  7,e7     
meets any o!r crit]ia e/abli%$ by !     

,commission 9 regulations issu$ "u      
section #c7;b77#a74  7#h7 ,high-risk    
in=mation sy/em ,! t]m high-risk        
in=mation sy/em means an in=mation sy/em
 t-- 7,a7 tak+ into acc\nt ! novelty ( !
 te*nology us$ & ! nature1 scope1       
context1 & purpose ( ! in=mation sy/em1 
poses a significant risk to ! privacy or
 security ( p]sonal in=mation (         
consum]s2  7,b7 involves ! p]sonal      
in=mation ( a significant numb] (       
consum]s reg>d+ race1 color1 national   
orig91 political op9ions1 religion1     
trade union memb]%ip1 g5etic data1      
biometric data1 heal?1 g5d]1 g5d]       
id5tity1 sexuality1 sexual ori5tation1  
crim9al convictions1 or arre/s2  7,c7   
sy/ematically monitors a l>ge1 publicly 
accessible physical place2 or  7,d7     
meets any o!r crit]ia e/abli%$ by !     
,commission 9 regulations issu$ "u      
section #c7;b77#a74  7#i7 ,in=mation    
sy/em ,! t]m in=mation sy/em-- 7,a7     
means a process1 automat$ or n1 t       
involves p]sonal in=mation1 su* z !     

collection1 record+1 organization1      
/ructur+1 /orage1 alt]ation1 retrieval1 
consultation1 use1 %>+1 disclosure1     
dissem9ation1 comb9ation1 re/riction1   
erasure1 or de/ruction ( p]sonal        
in=mation2 &  7,b7 does n include       
automat$ decision sy/ems4  7#aj7        
,p]sonal in=mation ,! t]m p]sonal       
in=mation means any in=mation1 reg>dless
 ( h[ ! in=mation is collect$1 inf]r$1  
or obta9$ t is reasonably l9kable to a  
specific consum] or consum] device4     
7#aa7 ,/ore ,! t]m /ore-- 7,a7 means !  
actions ( a p]son1 p>tn]%ip1 or         
corporation to reta9 in=mation2 &  7,b7 
includes actions to /ore1 collect1      
assemble1 possess1 control1 or ma9ta9   
in=mation4  7#ab7 ,use ,! t]m use means 
! actions ( a p]son1 p>tn]%ip1 or       
corporation 9 us+ in=mation1 includ+    
actions to use1 process1 or access      
in=mation4  #c4 ,data protection        
au?ority  7a7 ,acts prohibit$ ,x is     
unlawful = any cov]$ entity to-- 7#a7   
violate a regulation promulgat$ "u      

subsection 7b72 or  7#b7 kn[+ly provide 
sub/antial assi/ance to any p]son1      
p>tn]%ip1 or corporation ^: actions     
violate subsection 7b74  7b7            
,regulations  7#a7 ,9 g5]al ,n lat] ?an 
#b ye>s aft] ! date ( enactm5t ( ?is    
section1 ! ,commission %all promulgate  
regulations1 9 accordance ) section #eec
 ( title #e1 ,unit$ ,/ates ,code1 t--   
7,a7 require ea* cov]$ entity to conduct
 automat$ decision sy/em impact         
assessm5ts (-- 7i7 exi/+ high-risk      
automat$ decision sy/ems1 z frequ5tly z 
! ,commission det]m9es is necess>y2 &   
7ii7 new high-risk automat$ decision    
sy/ems1 prior to implem5tation1  provid$
 t a cov]$ entity may evaluate simil>   
high-risk automat$ decision sy/ems t    
pres5t simil> risks 9 a s+le assessm5t2 
7,b7 require ea* cov]$ entity to conduct
 data protection impact assessm5ts (--  
7i7 exi/+ high-risk in=mation sy/ems1 z 
frequ5tly z ! ,commission det]m9es is   
necess>y2 &  7ii7 new high-risk         
in=mation sy/ems1 prior to              

implem5tation1  provid$ t a cov]$ entity
 may evaluate simil> high-risk in=mation
 sy/ems t pres5t simil> risks 9 a s+le  
assessm5t2  7,c7 require ea* cov]$      
entity to conduct ! impact assessm5ts "u
 subp>agraphs 7,a7 & 7,b71 if reasonably
 possible1 9 consultation ) ext]nal ?ird
 p>ties1 includ+ indep5d5t auditors &   
indep5d5t te*nology exp]ts2 &  7,d7     
require ea* cov]$ entity to reasonably  
address 9 a timely mann] ! results ( !  
impact assessm5ts "u subp>agraphs 7,a7 &
 7,b74  7#b7 ,optional publication (    
impact assessm5ts ,! impact assessm5ts  
"u subp>agraphs 7,a7 & 7,b7 may be made 
public by ! cov]$ entity at its sole    
discretion4  7c7 ,preemption ( private  
contracts ,x %all be unlawful = any     
cov]$ entity to commit ! acts prohibit$ 
9 subsection 7a71 reg>dless ( specific  
agreem5ts betwe5 entities or consum]s4  
7d7 ,en=cem5t by ! ,commission  7#a7    
,unfair or deceptive acts or practices  
,a violation ( subsection 7a7 %all be   
treat$ z a violation ( a rule def9+ an  

unfair or deceptive act or practice "u  
section #ah7;a77#a77;,b7 ( ! ,f$]al     
,trade ,commission ,act 7#ae ,u4,s4,c4  
#eg;a7a77#a77;,b774  7#b7 ,p[]s ( !     
,commission  7,a7 ,9 g5]al ,!           
,commission %all en=ce ?is section 9 !  
same mann]1 by ! same means1 & ) ! same 
jurisdiction1 p[]s1 & duties z ?\gh all 
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7#ae ,u4,s4,c4  
#da et seq47 7 incorporat$ into & made a
 "p ( ?is section4  7,b7 ,privileges &  
immunities ,any p]son :o violates       
subsection 7a7 %all be subject to !     
p5alties & entitl$ to ! privileges &    
immunities provid$ 9 ! ,f$]al ,trade    
,commission ,act 7#ae ,u4,s4,c4 #da et  
seq474  7,c7 ,au?ority pres]v$ ,no?+ 9  
?is section %all be con/ru$ to limit !  
au?ority ( ! ,commission "u any o!r     
provision ( law4  7e7 ,en=cem5t by      
,/ates  7#a7 ,9 g5]al ,if ! attorney    
g5]al ( a ,/ate has reason to believe t 
an int]e/ ( ! resid5ts ( ! ,/ate has be5
 or is be+ ?reat5$ or adv]sely affect$  

by a practice t violates subsection 7a71
 ! attorney g5]al ( ! ,/ate may1 z p>5s 
patriae1 br+ a civil action on behalf ( 
! resid5ts ( ! ,/ate 9 an appropriate   
di/rict c\rt ( ! ,unit$ ,/ates to obta9 
appropriate relief4  7#b7 ,rights (     
,commission  7,a7 ,notice to ,commission
  7i7 ,9 g5]al ,except z provid$ 9      
clause 7iii71 ! attorney g5]al ( a      
,/ate1 be=e initiat+ a civil action "u  
p>agraph 7#a71 %all provide writt5      
notification to ! ,commission t !       
attorney g5]al int5ds to br+ su* civil  
action4  7ii7 ,cont5ts ,! notification  
requir$ "u clause 7i7 %all include a    
copy ( ! compla9t to be fil$ to initiate
 ! civil action4  7iii7 ,exception ,if x
 is n feasible = ! attorney g5]al ( a   
,/ate to provide ! notification requir$ 
"u clause 7i7 be=e initiat+ a civil     
action "u p>agraph 7#a71 ! attorney     
g5]al %all notify ! ,commission         
imm$iately ^u in/itut+ ! civil action4  
7,b7 ,int]v5tion by ,commission ,!      
,commission may-- 7i7 int]v5e 9 any     

civil action br\ght by ! attorney g5]al 
( a ,/ate "u p>agraph 7#a72 &  7ii7 ^u  
int]v5+-- 7,i7 be he>d on all matt]s    
aris+ 9 ! civil action2 &  7,,ii7 file  
petitions = appeal ( a decision 9 !     
civil action4  7#c7 ,inve/igatory p[]s  
,no?+ 9 ?is subsection may be con/ru$ to
 prev5t ! attorney g5]al ( a ,/ate f    
ex]cis+ ! p[]s conf]r$ on ! attorney    
g5]al by ! laws ( ! ,/ate to conduct    
inve/igations1 to adm9i/] oa?s or       
affirmations1 or to compel ! att5dance (
 witnesses or ! production ( docum5t>y  
or o!r evid5ce4  7#d7 ,v5ue2 s]vice (   
process  7,a7 ,v5ue ,any action br\ght  
"u p>agraph 7#a7 may be br\ght 9-- 7i7 !
 di/rict c\rt ( ! ,unit$ ,/ates t meets 
applicable requirem5ts relat+ to v5ue "u
 section #acia ( title #bh1 ,unit$      
,/ates ,code2 or  7ii7 ano!r c\rt (     
compet5t jurisdiction4  7,b7 ,s]vice (  
process ,9 an action br\ght "u p>agraph 
7#a71 process may be s]v$ 9 any di/rict 
9 :i*--  7i7 ! def5dant is an           
inhabitant1 may be f\nd1 or transacts   

bus9ess2 or  7ii7 v5ue is prop] "u      
section #acia ( title #bh1 ,unit$ ,/ates
 ,code4  7#e7 ,actions by o!r ,/ate     
(ficials  7,a7 ,9 g5]al ,9 addition to a
 civil action br\ght by an attorney     
g5]al "u p>agraph 7#a71 any o!r (fic] ( 
a ,/ate :o is au?oriz$ by ! ,/ate to d s
 may br+ a civil action "u p>agraph     
7#a71 subject to ! same requirem5ts &   
limitations t apply "u ?is subsection to
 civil actions br\ght by attorneys      
g5]al4  7,b7 ,sav+s provision ,no?+ 9   
?is subsection may be con/ru$ to        
prohibit an au?oriz$ (ficial ( a ,/ate f
 initiat+ or cont9u+ any proce$+ 9 a    
c\rt ( ! ,/ate = a violation ( any civil
 or crim9al law ( ! ,/ate4  #d4 ,no     
preemption ,no?+ 9 ?is ,act may be      
con/ru$ to preempt any ,/ate law4