,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #abad  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,april #aa1 #bjai ,mr4 
,m>key introduc$ ! foll[+ bill2 :i* 0   
read twice & ref]r$ to ! ,committee on  
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to e/abli% & protect          
individual & collective privacy rights1 
& = o!r purposes4  #a4 ,%ort title2     
table ( cont5ts  7a7 ,%ort title  ,?is  
,act may be cit$ z ! ,privacy ,bill (   
,rights ,act4  7b7 ,table ( cont5ts ,!  
table ( cont5ts = ?is ,act is z foll[s3 
,sec4 #a4 ,%ort title2 table ( cont5ts4 
,sec4 #b4 ,def9itions4 ,sec4 #c4 ,act   
prohibit$4 ,sec4 #d4 ,"r to notice4     
,sec4 #e4 ,"r to control4 ,sec4 #f4 ,"r 
to access1 correction1 deletion1 & data 
portability4 ,sec4 #g4 ,prohibition on  
re-id5tify+ p]sonal in=mation4 ,sec4 #h4
 ,prohibition on take-x-or-leave-x4     
,sec4 #i4 ,prohibition on f9ancial      
inc5tives4 ,sec4 #aj4 ,prohibition on   
disclos+ in=mation to ?ird p>ties )\t   
prop] assurances4 ,sec4 #aa4 ,use       

limitations4 ,sec4 #ab4 ,data           
m9imization4 ,sec4 #ac4 ,"r to data     
security4 ,sec4 #ad4 ,privacy & security
 (fic]4 ,sec4 #ae4 ,f$]al en=cem5t4     
,sec4 #af4 ,/ate en=cem5t4 ,sec4 #ag4   
,private "r ( action4 ,sec4 #ah4        
,relation to o!r laws4 ,sec4 #ai4       
,effective date4  #b4 ,def9itions ,9 ?is
 ,act3  7#a7 ,brea* ( security ,! t]m   
brea* ( security means any in/ance 9 :i*
 a p]son1 )\t au?orization or 9         
violation ( any au?orization provid$ to 
! p]son1 ga9s access to1 uses1 or       
discloses p]sonal in=mation4  7#b7      
,commission ,! t]m ,commission means !  
,f$]al ,trade ,commission4  7#c7 ,cov]$ 
entity ,! t]m cov]$ entity means any    
p]son t collects or o!rwise obta9s      
p]sonal in=mation4  7#d7 ,data brok] ,! 
t]m data brok] means a comm]cial entity 
t collects1 assembles1 or ma9ta9s       
p]sonal in=mation conc]n+ an individual 
:o is n a cu/om] or employee ( ! entity1
 & :o has n e/abli%$ a subscription or  
acc\nt ) ! entity1 9 ord] to sell !     

in=mation or provide ?ird-p>ty access to
 ! in=mation4  7#e7 ,de-id5tifi$ ,! t]m 
de-id5tifi$1 ) respect to in=mation1    
means in=mation t _c reasonably id5tify1
 relate to1 describe1 or be capable (   
be+ associat$ ) or l9k$ to1 directly or 
indirectly1 a p>ticul> individual4  7#f7
 ,disclose ,! t]m disclose means to     
disclose1 release1 transf]1 %>e1        
dissem9ate1 make available1 or o!rwise  
communicate orally1 9 writ+1            
electronically1 or by any o!r means to  
any ?ird p>ty4  7#g7 ,m9or ,! t]m m9or  
means any individual :o is "u #af ye>s (
 age4  7#h7 ,mobile application ,! t]m  
mobile application means a s(tw>e       
program t runs on ! op]at+ sy/em ( a    
mobile device4  7#i7 ,opt-9 approval ,! 
t]m opt-9 approval means affirmative1   
express cons5t ( an individual = a cov]$
 entity to use1 disclose1 or p]mit      
access to ! individual's p]sonal        
in=mation aft] ! individual has receiv$ 
explicit notification ( ! reque/ ( !    
cov]$ entity ) respect to t in=mation4  

7#aj7 ,p]sonal in=mation  7,a7 ,9 g5]al 
,! t]m p]sonal in=mation means in=mation
 t directly or indirectly id5tifies1    
relates to1 describes1 is capable ( be+ 
associat$ )1 or c\ld reasonably be l9k$ 
to1 a p>ticul> individual4  7,b7        
,examples ,! t]m p]sonal in=mation      
includes-- 7i7 an id5tifi] su* z a real 
"n1 alias1 signature1 date ( bir?1 g5d] 
id5tity1 sexual ori5tation1 m>ital      
/atus1 physical *>act]i/ic or           
description1 po/al address1 telephone   
numb]1 unique p]sonal id5tifi]1 milit>y 
id5tification numb]1 onl9e id5tifi]1    
,int]net ,protocol address1 email       
address1 acc\nt "n1 "m's maid5 "n1      
social security numb]1 driv]'s lic5se   
numb]1 passport numb]1 or o!r simil>    
id5tifi]2  7ii7 in=mation su* z         
employm5t1 employm5t hi/ory1 bank acc\nt
 numb]1 cr$it c>d numb]1 debit c>d      
numb]1 insurance policy numb]1 or any   
o!r f9ancial in=mation1 m$ical          
in=mation1 m5tal heal? in=mation1 or    
heal? insurance in=mation2  7iii7       

comm]cial in=mation1 includ+ a record ( 
p]sonal prop]ty1 income1 assets1 leases1
 r5tals1 products or s]vices pur*as$1   
obta9$1 or consid]$1 or o!r pur*as+ or  
consum+ hi/ory2  7iv7 biometric         
in=mation1 includ+ a ret9a or iris scan1
 f+]pr9t1 voicepr9t1 or scan ( h& or    
face geometry2  7v7 int]net or o!r      
electronic network activity in=mation1  
includ+ br[s+ hi/ory1 se>* hi/ory1      
cont5t1 includ+ text1 photographs1 audio
 or video record+s1 or o!r us]          
g5]at$-cont5t1 non-public               
communications1 & in=mation reg>d+ an   
individual's int]action ) an int]net    
website1 mobile application1 or         
adv]tisem5t2  7vi7 hi/orical or real-"t 
geolocation data2  7vii7 audio1         
electronic1 visual1 !rmal1 olfactory1 or
 simil> in=mation2  7viii7 education    
records1 z def9$ 9 section #ii4c ( title
 #cd1 ,code ( ,f$]al ,regulations1 or   
any successor regulation2  7ix7         
political in=mation or in=mation on     
crim9al convictions or arre/s2  7x7 any 

requir$ security code1 access code1     
password1 or us]name necess>y to p]mit  
access to ! acc\nt ( an individual2     
7xi7 *>act]i/ics ( protect$ classes "u  
,f$]al law1 includ+ race1 color1        
national orig91 religion1 sex1 age1 or  
disability2 or  7xii7 an inf]5ce drawn f
 any ( ! in=mation describ$ 9 ?is       
subp>agraph to create a pr(ile ab\t an  
individual reflect+ ! individual's      
pref]5ces1 *>act]i/ics1 psy*ological    
tr5ds1 pref]5ces1 pr$ispositions1       
behavior1 attitudes1 intellig5ce1       
abilities1 or aptitudes4  7,c7          
,exclusions  7i7 ,9 g5]al ,! t]m p]sonal
 in=mation does n include publicly      
available in=mation4  7ii7 ,publicly    
available in=mation ,= purposes ( clause
 7i71 ! t]m publicly available          
in=mation--  7,i7 means in=mation t is  
lawfully made available f ,f$]al1 ,/ate1
 or local gov]nm5t records2 &  7,,ii7   
does n include-- 7aa7 biometric         
in=mation collect$ by a cov]$ entity    
ab\t an individual )\t ! individual's k2

  7bb7 in=mation us$ = a purpose t is n 
compatible ) ! purpose = :i* ! in=mation
 is ma9ta9$ & made available 9 gov]nm5t 
records2 or  7cc7 in=mation ( an        
individual t is de-id5tifi$4  7#aa7     
,?ird p>ty ,! t]m ?ird p>ty1 ) respect  
to p]sonal in=mation ( an individual1   
means any p]son t is n--  7,a7 ! cov]$  
entity t is disclos+ ! p]sonal          
in=mation2  7,b7 solely p]=m+ an        
outs\rc$ function ( ! cov]$ entity      
diclos+ ! p]sonal in=mation if--  7i7 ! 
p]son is contractually or legally       
prohibit$ f us+1 reta9+1 %>+1 or sell+ !
 p]sonal in=mation aft] ! conclusion ( !
 outs\rc$ function2 &  7ii7 ! p]son is  
comply+ ) ! regulations promulgat$ "u   
?is ,act2 or  7,c7 a p]son ) respect to 
:i* ! individual gave specific opt-9    
approval = ! cov]$ entity to disclose ! 
p]sonal in=mation ( ! individual to !   
p]son4  #c4 ,act prohibit$  7a7 ,9 g5]al
 ,x %all be unlawful = a cov]$ entity to
 violate ! privacy ( an individual 9 a  
mann] t violates a regulation promulgat$

 "u ?is ,act4  7b7 ,regulations ,9 c>ry+
 out ?is ,act1 ! ,commission %all-- 7#a7
 n lat] ?an #a ye> aft] ! date (        
enactm5t ( ?is ,act1 promulgate         
regulations "u section #eec ( title #e1 
,unit$ ,/ates ,code1 to protect !       
individual & collective privacy rights  
set =? 9 ?is ,act2  7#b7 ensure !       
regulations promulgat$ "u p>agraph 7#a7 
take effect n lat] ?an #ij days aft] !  
date on :i* ! regulations are           
promulgat$2  7#c7 e/abli% a c5traliz$   
int]net website = ! b5efit ( individuals
 t provides in=mation to individuals    
ab\t _! rights "u ?is ,act 9 a cle>1    
concise1 well-organiz$1 und]/&ably      
writt51 & complete mann]2 &  7#d7       
e/abli% a c5traliz$ int]net website = ! 
b5efit ( individuals t li/s ea* data    
brok] 9 ! ,unit$ ,/ates4  #d4 ,"r to    
notice  7a7 ,9 g5]al ,9 promulgat+      
regulations "u section #c1 ! ,commission
 %all require a cov]$ entity to-- 7#a7  
develop & make available to cu/om]s a   
%ort-=m notice ab\t ! collection1       

ret5tion1 use1 & %>+ ( ! p]sonal        
in=mation ( individuals by ! cov]$      
entity t includes--  7,a7 :at p]sonal   
in=mation is be+ collect$1 us$1 or      
reta9$2  7,b7 ! mann] 9 :i* ! p]sonal   
in=mation is collect$2  7,c7 h[ & = :at 
purpose ! cov]$ entity is collect+1 us+1
 reta9+1 %>+1 or sell+ ! p]sonal        
in=mation2  7,d7 h[ long ! p]sonal      
in=mation w be held2  7,e7 :i* ?ird     
p>ties ! cov]$ entity %>es p]sonal      
in=mation ) or leases or sells p]sonal  
in=mation to1 n includ+--  7i7 a        
gov]nm5tal entity ) :i* ! cov]$ entity  
%>es p]sonal in=mation pursuant to a    
c\rt ord] or law t prohibits ! cov]$    
entity f reveal+ t in/ance ( %>+ to !   
individual to :om ! p]sonal in=mation   
p]ta9s2  7ii7 a ?ird p>ty if ! p]sonal  
in=mation is-- 7,i7 made available to & 
readily accessible by ! g5]al public ) !
 cons5t ( ! individual to :om ! p]sonal 
in=mation p]ta9s2 &  7,,ii7 %>$ )1 or   
leas$ or sold to1 ! ?ird p>ty ?r\gh a   
me*anism available to any memb] ( !     

g5]al public2 or  7iii7 a ?ird p>ty )   
:i* ! cov]$ entity %>es1 or to :i* !    
cov]$ entity leases or sells1 p]sonal   
in=mation ( an individual t ! cov]$     
entity did n obta9 f ! individual1 if   
reveal+ t in/ance ( %>+1 leas+1 or sell+
 p]sonal in=mation w\ld expose ano!r    
individual to likely h>m2  7,f7 9 ! case
 ( ! %>+1 leas+1 or sell+ ( p]sonal     
in=mation describ$ 9 subp>agraph 7,e7 t 
is n exclud$ "u clause 7i71 7ii71 or    
7iii7 ( t subp>agraph1 :at p]sonal      
in=mation is %>$ ) or leas$ or sold to  
?ird p>ties & = :at purpose2  7,g7 h[ an
 individual c access1 correct1 & delete 
! p]sonal in=mation ( ! individual t !  
cov]$ entity reta9s z requir$ "u section
 #f2  7,h7 ! practices ( ! cov]$ entity 
= collect+ p]sonal in=mation ( an       
individual1 includ+ (fl9e practices1 :5 
! individual is n directly int]act+ ) ! 
cov]$ entity2  7,i7 ! practices ( !     
cov]$ entity = us+ p]sonal in=mation 9  
automat$ decisionmak+2 &  7,j7 ! "r ( an
 individual to provide opt-9 approval & 

revoke approval consi/5t ) section #e2  
7#b7 ensure t ! %ort-=m notice develop$ 
"u p>agraph 7#a7-- 7,a7 is cle>1        
concise1 well-organiz$1 und]/&ably      
writt51 & complete2  7,b7 does n conta9 
unrelat$1 confus+1 or contradictory     
mat]ials2 &  7,c7 is 9 a =mat t is--    
7i7 prom95t & easily accessible2  7ii7 (
 reasonable l5g?2 &  7iii7 cle>ly       
di/+ui%able f o!r matt]s2  7#c7 n lat]  
?an #ae days aft] mak+ a mat]ial *ange  
to ! privacy practices or policies ( !  
cov]$ entity1 update ! %ort-=m notice   
develop$ "u p>agraph 7#a72  7#d7 make ! 
%ort-=m notice requir$ "u p>agraph 7#a7 
p]si/5tly & conspicu\sly available--    
7,a7 on ! website or mobile application 
( ! cov]$ entity1 if ! cov]$ entity     
ma9ta9s a website or mobile application2
 &  7,b7 at ! physical place ( bus9ess  
or any o!r (fl9e equival5t ma9ta9$ by ! 
cov]$ entity2 &  7#e7 ensure t ! %ort-=m
 notice requir$ "u p>agraph 7#a7 is made
 available to an individual-- 7,a7 7i7  
at ! po9t ( sale ( a product or s]vice  

(1 subscription to a s]vice (1 or       
e/abli%m5t ( an acc\nt )1 ! cov]$       
entity1 prior to ! sale1 subscription1  
or e/abli%m5t1 :e!r t po9t ( sale1      
subscription1 or e/abli%m5t is 9 p]son1 
onl9e1 ov] ! telephone1 or ?r\gh ano!r  
means2 or  7ii7 if !re is no su* sale1  
subscription1 or e/abli%m5t1 be=e !     
individual uses ! product or s]vice ( ! 
cov]$ entity2 &  7,b7 reg>dless ( !     
decision ( ! individual z to :e!r to    
provide opt-9 approval to ! cov]$       
entity4  7b7 ,requirem5ts = unexpect$   
collection or use ( p]sonal in=mation   
7#a7 ,9 g5]al ,9 promulgat+ regulations 
"u section #c1 ! ,commission %all apply 
! requirem5ts "u p>agraph 7#b7 ( ?is    
subsection to any collection or use (   
p]sonal in=mation ( an individual by a  
cov]$ entity o!r ?an collection or use  
t--  7,a7 is necess>y = ! p]=mance ( a  
contract to :i* ! individual is p>ty2   
7,b7 consi/s ( actions t an individual  
w\ld consid] necess>y 9 ord] to provide 
a reque/$ product or s]vice2 or  7,c7   

consi/s ( actions tak5 at ! reque/ ( !  
individual prior to ent]+ into a        
contract to :i* ! individual is p>ty4   
7#b7 ,requirem5ts ,a cov]$ entity t is  
subject to p>agraph 7#a71 ) respect to  
any individual ^: p]sonal in=mation !   
cov]$ entity collects or uses z describ$
 9 t p>agraph--  7,a7 %all provide !    
%ort-=m notice develop$ "u subsection   
7a77#a7 to ! individual 9 a mann] t     
ensures t ! individual reviews ! notice 
& c provide opt-9 approval "u section   
#e2  7,b7 %all notify ! individual ( any
 mat]ial *ange to ! privacy practices or
 policies ( ! cov]$ entity n lat] ?an ! 
date on :i* ! cov]$ entity updates !    
%ort-=m notice "u subsection 7a77#c72   
7,c7 may n collect any p]sonal in=mation
 ( ! individual n specifi$ 9 ! %ort-=m  
notice mo/ rec5tly provid$ to !         
individual 9 accordance ) subp>agraph   
7,a7 unless ! cov]$ entity provides !   
individual ) a new %ort-=m notice       
consi/5t ) t subp>agraph at ! po9t (    
collection ( ! additional in=mation2 &  

7,d7 may n use p]sonal in=mation ( !    
individual = a purpose n specifi$ 9 !   
%ort-=m notice mo/ rec5tly provid$ to ! 
individual 9 accordance ) subp>agraph   
7,a7 unless ! cov]$ entity provides !   
individual ) a new %ort-=m notice       
consi/5t ) t p>agraph t discloses !     
additional purpose4  7c7 ,/&>diz$       
%ort-,=m privacy notice  7#a7 ,/&>diz$  
notice ,! ,commission %all e/abli%      
/&>diz$ %ort-=m privacy notices t comply
 ) ?is section4  7#b7 ,use ( /&>diz$    
notice ,a cov]$ entity may satisfy !    
requirem5ts ( subsection 7a7 by adopt+ a
 /&>diz$ %ort-=m privacy notice e/abli%$
 by ! ,commission "u p>agraph 7#a7 ( ?is
 subsection4  7d7 ,jo9t notice =        
affiliat$ cov]$ entities ,two or m      
affiliat$ cov]$ entities may use a s+le 
jo9t %ort-=m notice = purposes ( ?is    
section if ! %ort-=m notice--  7#a7     
/ates t ! notice applies to multiple    
affiliat$ cov]$ entities & names ea* su*
 cov]$ entity2 &  7#b7 is accurate )    
respect to ! actions ( ea* cov]$ entity 

us+ ! notice4  #e4 ,"r to control  7a7  
,opt-,9 approval requir$ ,9 promulgat+  
regulations "u section #c1 ! ,commission
 %all require a cov]$ entity to obta9   
opt-9 approval f an individual to--     
7#a7 collect1 use1 reta91 %>e1 or sell !
 individual's p]sonal in=mation2 or     
7#b7 make any mat]ial *anges 9 !        
collection1 use1 ret5tion1 %>+1 or sale 
( ! individual's p]sonal in=mation4  7b7
 ,rules = approval  7#a7 ,proc$ures ,a  
cov]$ entity %all obta9 approval "u     
subsection 7a7 9 accordance ) !         
proc$ures = notification "u section #d4 
7#b7 ,mann] ,9 ord] to satisfy          
subsection 7a71 approval %all be freely 
giv51 specific1 in=m$1 & unambigu\s4    
7#c7 ,)drawal ,an individual %all h ! "r
 to )draw 8 or h] approval at any "t4   
7#d7 ,means ,a cov]$ entity %all seek to
 obta9 approval ?r\gh ! prim>y m$ium us$
 to (f] or deliv] ! cov]$ entity's      
product or s]vice4  7c7 ,exceptions ,a  
cov]$ entity %all n be requir$ to obta9 
opt-9 approval f an individual "u       

subsection 7a7--  7#a7 if collection is 
necess>y = ! p]=mance ( a contract to   
:i* ! individual is p>ty2  7#b7 to take 
/eps t an individual w\ld consid]       
necess>y 9 ord] to provide a reque/$    
product or s]vice2 or  7#c7 to take /eps
 at ! reque/ ( ! individual prior to    
ent]+ into a contract to :i* !          
individual is p>ty4  7d7 ,em]g5cy or    
exig5t circum/ances  7#a7 ,9 g5]al      
,subject to p>agraph 7#b71 a cov]$      
entity %all n be requir$ to obta9 opt-9 
approval "u subsection 7a7 if ! cov]$   
entity1 9 good fai?1 believes dang] (   
dea? or s]i\s physical injury to any    
individual requires use1 access1 or     
disclosure )\t delay ( p]sonal in=mation
 relat+ to ! em]g5cy4  7#b7 ,notice     
requirem5t ,n lat] ?an #ij days aft] !  
date on :i* a cov]$ entity uses1        
accesses1 or discloses p]sonal in=mation
 ( an individual )\t obta9+ opt-9       
approval "u p>agraph 7#a71 ! cov]$      
entity %all in=m ! individual (--  7,a7 
! p]sonal in=mation t ! cov]$ entity    

us$1 access$1 or disclos$2  7,b7 !      
details ( ! em]g5cy or exig5t           
circum/ances2 &  7,c7 ! reasons :y !    
cov]$ entity ne$$ to use1 access1 or    
disclose ! p]sonal in=mation4  7e7      
,exemptions  7#a7 ,9 g5]al ,9 promulgat+
 regulations "u subsection 7a71 !       
,commission may grant an exemption to a 
specific cov]$ entity f ! control       
requirem5ts "u ?is section aft] tak+    
into acc\nt--  7,a7 privacy risks pos$  
by ! use ( p]sonal in=mation by ! cov]$ 
entity2  7,b7 ! co/s & b5efits ( apply+ 
! regulations to ! cov]$ entity2 &  7,c7
 :e!r-- 7i7 ! p]sonal in=mation held by 
! cov]$ entity is--  7,i7 necess>y &    
us$1 reta9$1 or %>$ only to protect !   
security ( ! cov]$ entity's s]vice2     
7,,ii7 7aa7 necess>y = provid+ a s]vice 
reque/$ by an individual2 &  7bb7       
consi/5t ) ! context ( ! s]vice provid$2
  7,,iii7 necess>y to initiate1 r5d]1   
bill =1 or collect paym5t = a s]vice or 
product reque/$ by an individual f !    
cov]$ entity2 or  7,,iv7 necess>y to    

protect-- 7aa7 ! rights or prop]ty ( !  
cov]$ entity2 or  7bb7 individuals :o   
use ! s]vices or products provid$ by !  
cov]$ entity or o!r cov]$ entities f    
fraudul5t1 abusive1 or unlawful use ( ! 
s]vice or product2 or  7ii7 ! cov]$     
entity-- 7,i7 de-id5tifies ! p]sonal    
in=mation held by ! cov]$ entity2 &     
7,,ii7 :]e possible1 provides           
individuals ) ! *oice to opt-out ( !    
collection & use ( ! de-id5tifi$        
in=mation ( ! individuals4  7#b7        
,report+ requirem5t ,if ! ,commission   
grants an exemption to a cov]$ entity "u
 p>agraph 7#a71 ! ,commission %all li/ !
 cov]$ entity on ! website ( !          
,commission e/abli%$ "u section         
#c7;b77#c7 & provide a brief            
ju/ification = grant+ ! exemption to !  
cov]$ entity4  #f4 ,"r to access1       
correction1 deletion1 & data portability
  7a7 ,9 g5]al ,9 promulgat+ regulations
 "u section #c1 ! ,commission %all      
require a cov]$ entity to--  7#a7 ^u    
reque/1 provide confirmation to an      

individual :o uses a product or s]vice (
 ! cov]$ entity1 or has e/abli%$ a      
subscription or acc\nt ) ! cov]$ entity1
 z to :e!r ! cov]$ entity reta9s p]sonal
 in=mation p]ta9+ to ! individual2  7#b7
 if ! cov]$ entity reta9s ! individual's
 p]sonal in=mation1 provide to !        
individual--  7,a7 reasonable means to  
access ! p]sonal in=mation2  7,b7 a     
description (--  7i7 ! p]sonal in=mation
 be+ reta9$2  7ii7 ea* date on :i* !    
cov]$ entity collect$ ! p]sonal         
in=mation2  7iii7 ! ?ird p>ties to :i* !
 cov]$ entity has disclos$ or w disclose
 ! p]sonal in=mation2 &  7iv7 if        
possible1 h[ long ! p]sonal in=mation w 
be reta9$ or /or$1 or if n possible1 !  
crit]ia us$ = det]m9+ h[ long ! p]sonal 
in=mation w be reta9$ or /or$2 &  7,c7  
notice ( ! "r to correct & delete       
p]sonal in=mation2  7#c7 provide !      
access to ! p]sonal in=mation "u        
p>agraph 7#b77;,a7 9 ! =m ( a portable  
electronic table t--  7,a7 is 9 a usable
 & se>*able =mat2  7,b7 all[s !         

individual to transf] ! p]sonal         
in=mation f "o entity to ano!r entity   
)\t h9drance2 &  7,c7 to ! ext5t t !    
,commission det]m9es practicable &      
appropriate1 del9eates betwe5-- 7i7     
p]sonal in=mation collect$ & %>$ 9 ord] 
to provide ! individual ) ! desir$      
product or s]vice2 &  7ii7 p]sonal      
in=mation t 0 sold by ! cov]$ entity to 
a ?ird p>ty2  7#d7 provide an individual
 ) a me*anism to correct inaccurate     
p]sonal in=mation reta9$ or /or$ by !   
cov]$ entity2  7#e7 7,a7 provide an     
individual ) a me*anism to reque/ !     
deletion ( ! p]sonal in=mation ( !      
individual t ! cov]$ entity reta9s or   
/ores ab\t ! individual2 &  7,b7 :5 !   
cov]$ entity receives a reque/ f an     
individual "u subp>agraph 7,a71 delete !
 p]sonal in=mation collect$ f !         
individual unless ! cov]$ entity ne$s to
 reta9 ! p]sonal in=mation 9 ord] to--  
7i7 7,i7 complete ! transaction = :i* ! 
p]sonal in=mation 0 collect$2  7,,ii7   
provide a good or s]vice reque/$ by !   

individual or reasonably anticipat$ )9 !
 context ( ! cov]$ entity's ongo+       
relation%ip ) ! individual2 or  7,,iii7 
o!rwise p]=m a contract to :i* !        
individual is p>ty2  7ii7 detect        
security incid5ts1 protect aga9/        
activity t violates ! cov]$ entity's    
t]ms ( s]vice or malici\s1 deceptive1   
fraudul5t1 or illegal activity1 or      
prosecute p]sons responsible = su*      
activity2  7iii7 debug to id5tify &     
repair errors t impair exi/+            
functionality2  7iv7 ex]cise free spee*1
 ensure ! ability ( ano!r individual to 
ex]cise 8 or h] "r to free spee*1 or    
ex]cise ano!r "r provid$ = by law2  7v7 
comply ) *apt] #aai1 #aba1 or #bjf (    
title #ah1 ,unit$ ,/ates ,code2  7vi7   
engage 9 public or pe]-review$          
sci5tific1 hi/orical1 or /ati/ical      
rese>* 9 ! public int]e/ t adh]es to all
 o!r applicable e?ics & privacy laws1   
if--  7,i7 ! cov]$ entity's deletion ( !
 in=mation is likely to r5d] impossible 
or s]i\sly impair ! a*ievem5t ( su*     

rese>*2  7,,ii7 ! individual has provid$
 in=m$ cons5t2 &  7,,iii7 ! rese>* is   
already 9 progress at ! "t t deletion is
 reque/$2 or  7vii7 comply ) a legal    
obligation2  7#f7 provide ! me*anisms "u
 p>agraphs 7#d7 & 7#e7 9 a =m t is--    
7,a7 cle> & conspicu\s2 &  7,b7 made    
available--  7i7 at no additional co/ to
 ! us]2  7ii7 )\t requir+ an individual 
to e/abli% an acc\nt ) ! cov]$ entity2  
7iii7 9 a language o!r ?an ,engli%1 if !
 provid] transacts bus9ess ) individuals
 9 t o!r language2  7iv7 to individuals 
reg>dless ( :e!r ! in=mation 0 obta9$ by
 ! cov]$ entity directly f ! individual1
 n to include publicly available or     
de-id5tifi$ p]sonal in=mation2  7v7 7,i7
 ?r\gh a toll-free numb]2  7,,ii7 on !  
cov]$ entity's website1 if ! cov]$      
entity ma9ta9s a website2 or  7,,iii7   
?r\gh ! prim>y me*anism ?r\gh :i* !     
cov]$ entity engages 9 a relation%ip ) !
 individual 9 ord] to provide a product 
or s]vice2 &  7vi7 su* t an individual  
has ! opportunity to reque/ correction  

or deletion ( p]sonal in=mation n less  
frequ5tly ?an once e #f mon?s2  7#g7    
in=m any entity ) :i* ! cov]$ entity has
 %>$1 sold1 or disclos$ an individual's 
p]sonal in=mation ( any reque/ f !      
individual = confirmation (1 access to1 
correction (1 or deletion ( !           
individual's p]sonal in=mation "u ?is   
subsection2  7#h7 comply ) an           
individual's reque/ = confirmation1     
access1 correction1 or deletion "u ?is  
subsection ev5 if ! reque/ is receiv$ f 
ano!r cov]$ entity1 if ! receiv+ cov]$  
entity c v]ify t ! reque/ is orig9ally f
 ! individual2 &  7#i7 comply ) an      
individual's reque/ = confirmation1     
access1 correction1 or deletion "u ?is  
subsection n lat] ?an #ij days aft]     
receiv+ a v]ifiable reque/ f !          
individual or ano!r cov]$ entity4  7b7  
,"r ( p>5ts & gu>dians ( m9ors ,=       
purposes ( subsection 7a71 a p>5t or    
gu>dian ( a m9or may act on behalf ( !  
m9or ) respect to p]sonal in=mation ( ! 
m9or held by a cov]$ entity1 includ+ by 

reque/+ confirmation (1 access to1      
correction (1 or deletion ( ! p]sonal   
in=mation4  7c7 ,prohibition on         
de-,id5tify+ p]sonal in=mation subsequ5t
 ,to reque/ ,a cov]$ entity may n       
de-id5tify an individual's p]sonal      
in=mation dur+ ! #ij-;day p]iod beg9n+  
on ! date on :i* ! cov]$ entity receives
 a reque/ f ! individual = confirmation1
 access1 correction1 or deletion ( !    
individual's p]sonal in=mation "u       
subsection 7a74  #g4 ,prohibition on    
re-id5tify+ p]sonal in=mation  7a7 ,9   
g5]al ,9 promulgat+ regulations "u      
section #c1 ! ,commission %all require a
 cov]$ entity to ensure t p]sonal       
in=mation t has be5 de-id5tifi$ is n    
re/or$ su* t ! in=mation c be l9k$ to a 
specific individual or device4  7b7     
,actions requir$ ,9 c>ry+ out subsection
 7a71 ! ,commission %all-- 7#a7 require 
a cov]$ entity to implem5t--  7,a7      
te*nical safegu>ds t prohibit           
id5tification ( ! individual to :om or  
device to :i* ! in=mation may p]ta92    

7,b7 processes t specifically prohibit  
reid5tification ( ! in=mation2 &  7,c7  
processes t prev5t inadv]t5t release (  
de-id5tifi$ in=mation2 &  7#b7 prohibit 
a cov]$ entity f mak+ any attempt to    
reid5tify ! in=mation4  #h4 ,prohibition
 on take-x-or-leave-x ,a cov]$ entity   
may n refuse to s]ve an individual :o   
does n approve ! collection1 use1       
ret5tion1 %>+1 or sale ( ! individual's 
p]sonal in=mation = comm]cial purposes  
on ! basis ( t lack ( approval 7commonly
 kn[n z a take-x-or-leave-x-(f]74  #i4  
,prohibition on f9ancial inc5tives  7a7 
,9 g5]al ,a cov]$ entity may n (f] an   
individual a program t relates ! price (
 a product or s]vice to ! privacy       
protections af=d$ ! individual1 includ+ 
by provid+ a disc\nt or o!r inc5tive 9  
ex*ange = ! opt-9 approval ( !          
individual to ! use & %>+ ( !           
individual's p]sonal in=mation4  7b7    
,rule ( con/ruction ,no?+ 9 subsection  
7a7 %all be con/ru$ to prohibit !       
relation ( price ( a s]vice or ! level (

 s]vice provid$ to an individual to !   
provision1 by ! individual1 ( f9ancial  
in=mation t is necess>ily collect$ & us$
 only = ! purpose ( initiat+1 r5d]+1    
bill+ =1 or collect+ paym5t = a s]vice  
or product reque/$ by ! individual f !  
cov]$ entity4  7c7 ,exemptions ,!       
,commission may exempt a specific type (
 f9ancial inc5tive (f]$ by a p>ticul>   
cov]$ entity f ! prohibition "u         
subsection 7a7 if ! ,commission det]m9es
 t ! type ( f9ancial inc5tive1 z (f]$ by
 t cov]$ entity1 is reasonable1 j1 &    
non-co]cive4  #aj4 ,prohibition on      
disclos+ in=mation to ?ird p>ties )\t   
prop] assurances  7a7 ,9 g5]al ,a cov]$ 
entity may n disclose ! p]sonal         
in=mation ( an individual to a ?ird p>ty
 "u a writt5 contract unless--  7#a7 !  
contract prohibits ! ?ird p>ty f-- 7,a7 
us+ ! p]sonal in=mation = any reason o!r
 ?an p]=m+ ! specifi$ s]vice on behalf (
 ! cov]$ entity2 or  7,b7 disclos+ !    
p]sonal in=mation to ano!r ?ird p>ty =  
any reason o!r ?an p]=m+ ! specifi$     

s]vice on behalf ( ! cov]$ entity2 &    
7#b7 ! cov]$ entity ensures t ! ?ird    
p>ty effectively en=ces ! prohibitions  
describ$ 9 p>agraph 7#a71 includ+ by    
audit+ ! data security & data in=mation 
practices ( ! ?ird p>ty n less frequ5tly
 ?an once e #b ye>s4  7b7 ,rule (       
con/ruction ,no?+ 9 subsection 7a7 %all 
be con/ru$ to prev5t ! disclosure (     
p]sonal in=mation ( an individual--     
7#a7 by a cov]$ entity to a ?ird p>ty if
 necess>y to comply ) applicable law or 
a c\rt-issu$ subpo5a1 w>rant1 or ord]2  
7#b7 by a cov]$ entity to a ?ird p>ty t 
is reasonably necess>y to-- 7,a7 address
 fraud1 security1 or te*nical issues2   
7,b7 protect ! individual's rights or   
prop]ty2 or  7,c7 protect individuals or
 ! public f illegal activities z requir$
 or p]mitt$ by law2 or  7#c7 if !       
individual has specifically approv$ ( ! 
disclosure4  #aa4 ,use limitations  7a7 
,9 g5]al ,9 promulgat+ regulations "u   
section #c1 ! ,commission %all prohibit 
a cov]$ entity f us+ p]sonal in=mation =

 unreasonable purposes1 includ+--  7#a7 
sell+1 leas+1 trad+1 or o!rwise pr(it+ f
 an individual's biometric in=mation2   
7#b7 %>+1 re%>+1 or o!rwise dissem9at+  
an individual's biometric in=mation )\t 
fir/ obta9+ specific cons5t f !         
individual1 unless--  7,a7 !            
dissem9ation is requir$ by ,/ate or     
,f$]al law or municipal ord9ance2 or    
7,b7 ! dissem9ation is requir$ pursuant 
to a valid w>rant or subpo5a issu$ by a 
c\rt ( compet5t jurisdiction2  7#c7     
process+ p]sonal in=mation = ! purpose (
 adv]tis+1 m>ket+1 solicit+1 (f]+1      
sell+1 leas+1 lic5s+1 r5t+1 or o!rwise  
comm]cially contract+ = employm5t1      
f9ance1 heal?c>e1 cr$it1 insurance1     
h\s+1 or education opportunities1 9 a   
mann] t discrim9ates aga9/ or o!rwise   
makes ! opportunity unavailable on !    
basis ( a p]son's or class ( p]sons'    
actual or p]ceiv$ race1 color1 e?nicity1
 religion1 national orig91 sex1 g5d]1   
g5d] id5tity1 sexual ori5tation1        
familial /atus1 biometric in=mation1    

lawful s\rce ( income1 or disability2 or
  7#d7 process+ p]sonal in=mation 9 a   
mann] t segregates1 discrim9ates 91 or  
o!rwise makes unavailable ! goods1      
s]vices1 facilities1 privileges1        
advantages1 or accommodations ( any     
place ( public accommodation on ! basis 
( a p]son's or class ( p]sons' actual or
 p]ceiv$ race1 color1 e?nicity1         
religion1 national orig91 sex1 g5d]1    
g5d] id5tity1 sexual ori5tation1 or     
disability4  7b7 ,def9ition ( place (   
public accommodation ,= purposes (      
subsection 7a71 ! t]m place ( public    
accommodation means-- 7#a7 any entity   
consid]$ a place ( public accommodation 
"u section #bja7;b7 ( ! ,civil ,rights  
,act ( #aifd 7#db ,u4,s4,c4 #bjjj;a7b77 
or section #cja ( ! ,am]icans )         
,disabilities ,act ( #aiij 7#db         
,u4,s4,c4 #abaha72 &  7#b7 any entity t 
(f]s goods or s]vices ?r\gh ! int]net to
 ! g5]al public4  #ab4 ,data m9imization
 ,9 promulgat+ regulations "u section   
#c1 ! ,commission %all prohibit a cov]$ 

entity f--  7#a7 collect+ p]sonal       
in=mation ( an individual beyond :at is 
adequate1 relevant1 & necess>y-- 7,a7 = 
! p]=mance ( a contract to :i* !        
individual is p>ty2  7,b7 to provide a  
reque/$ product or s]vice2 or  7,c7 to  
take /eps at ! reque/ ( ! individual    
prior to ent]+ into a contract to :i* ! 
individual is p>ty2 or  7#b7 access+ !  
p]sonal in=mation ( an individual lat]  
?an #ij days aft] ! late/ date on :i*-- 
7,a7 ! cov]$ entity concludes ! p]=mance
 ( a contract to :i* ! individual is    
p>ty2  7,b7 ! cov]$ entity concludes    
tak+ /eps t an individual w\ld consid]  
necess>y 9 ord] to provide a reque/$    
product or s]vice1 includ+ /eps to      
prev5t fraud1 ensure safety1 or ensure  
compliance ) ! cov]$ entity's t]ms (    
s]vice2 or  7,c7 ! individual o!rwise   
t]m9ates 8 or h] relation%ip ) ! cov]$  
entity4  #ac4 ,"r to data security  7a7 
,reasonable proc$ures  7#a7 ,9 g5]al ,9 
promulgat+ regulations "u section #c1 ! 
,commission %all require a cov]$ entity 

to e/abli% & ma9ta9 reasonable data     
security practices to protect !         
confid5tiality1 integrity1 &            
availability ( p]sonal in=mation4  7#b7 
,proportionality ,! requirem5ts         
prescrib$ "u p>agraph 7#a7 %all provide 
= security proc$ures t are proportional 
to ! volume & nature ( ! p]sonal        
in=mation a cov]$ entity collects4  7#c7
 ,commission guidance2 indu/ry practices
 ,! requirem5ts prescrib$ "u p>agraph   
7#a7 %all be consi/5t ) guidance provid$
 by ! ,commission & recogniz$ indu/ry   
practices = safety & security1 includ+  
adm9i/rative1 te*nical1 & physical      
safegu>ds to secure ! p]sonal in=mation 
( us]s4  7#d7 ,te*nologically neutral ,!
 ,commission may n require a specific   
te*nological means ( meet+ a requirem5t 
"u p>agraph 7#a74  7b7 ,o!r requirem5ts 
,9 promulgat+ regulations "u section #c1
 ! ,commission %all require a cov]$     
entity--  7#a7 to make publicly         
available a description ( ! practices   
e/abli%$ by ! cov]$ entity "u subsection

 7a7 t details--  7,a7 h[ ! cov]$ entity
 w address privacy & security risks     
associat$ ) ! developm5t ( new products 
& s]vices2  7,b7 ! access t employees & 
contractors ( ! cov]$ entity h to !     
p]sonal in=mation ( an individual :o    
uses a s]vice or product ( ! cov]$      
entity2 &  7,c7 ! int]nal policies ( !  
cov]$ entity = ! use ( ! p]sonal        
in=mation describ$ 9 subp>agraph 7,b72  
7#b7 7,a7 to notify an individual if !  
cov]$ entity det]m9es t--  7i7 an       
unau?oriz$ disclosure ( ! p]sonal       
in=mation ( ! individual has occurr$2 & 
7ii7 h>m is reasonably likely to occur2 
&  7,b7 z "p ( ! notification "u        
subp>agraph 7,a71 to (f] ! individual-- 
7i7 ! option to prohibit ! cov]$ entity 
f collect+1 us+1 reta9+1 %>+1 or sell+ !
 p]sonal in=mation ( ! individual2 &    
7ii7 ! option to h ! cov]$ entity-- 7,i7
 erase all p]sonal in=mation ( !        
individual held by ! cov]$ entity2      
7,,ii7 cease %>+ & sell+ ! p]sonal      
in=mation ( ! individual2  7,,iii7      

provide ! individual a copy ( ! p]sonal 
in=mation ( ! individual t ! cov]$      
entity holds ab\t ! individual 9 a =mat 
consi/5t ) section #f7;a77#c72 or       
7,,iv7 close ! individual's acc\nt or   
o!rwise t]m9ate ! individual's          
relation%ip ) ! cov]$ entity2 &  7#c7 n 
less frequ5tly ?an once e #b ye>s-- 7,a7
 to audit ! privacy & security practices
 9 place t protect ! confid5tiality1    
integrity1 & availability ( p]sonal     
in=mation held by ! cov]$ entity2 or    
7,b7 if ! ,commission det]m9es x        
appropriate bas$ on ! volume & nature ( 
! p]sonal in=mation collect$ by ! cov]$ 
entity1 to--  7i7 h an indep5d5t        
?ird-p>ty auditor conduct ! audit       
describ$ 9 subp>agraph 7,a72 &  7ii7    
make ! results ( ! audit available to ! 
,commission ^u completion4  #ad4        
,privacy & security (fic] ,9 promulgat+ 
regulations "u section #c1 ! ,commission
 %all require a cov]$ entity to-- 7#a7  
designate n less ?an #a employee ( !    
cov]$ entity to coord9ate ! ef=ts to    

comply ) & c>ry out ! responsibilities (
 ! cov]$ entity "u ?is ,act1 includ+ any
 reque/ or *all5ge relat$ to p]sonal    
in=mation2 &  7#b7 provide publicly     
accessible contact in=mation = ea*      
employee designat$ "u p>agraph 7#a74    
#ae4 ,f$]al en=cem5t  7a7 ,en=cem5t by !
 ,commission  7#a7 ,unfair or deceptive 
acts or practices ,except z provid$ 9   
subsection 7b71 a violation ( ?is ,act  
or a regulation promulgat$ "u ?is ,act  
%all be treat$ z a violation ( a rule   
def9+ an unfair or deceptive act or     
practice prescrib$ "u section           
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b774  7#b7 ,p[]s ( !     
,commission  7,a7 ,9 g5]al ,except z    
provid$ 9 subsection 7b71 ! ,commission 
%all en=ce ?is ,act & any regulations   
promulgat$ "u ?is ,act 9 ! same mann]1  
by ! same means1 & ) ! same             
jurisdiction1 p[]s1 & duties z ?\gh all 
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7#ae ,u4,s4,c4  

#da et seq47 7 incorporat$ into & made a
 "p ( ?is ,act4  7,b7 ,privileges &     
immunities ,any p]son :o violates ?is   
,act or a regulation promulgat$ "u ?is  
,act %all be subject to ! p5alties &    
entitl$ to ! privileges & immunities    
provid$ 9 ! ,f$]al ,trade ,commission   
,act 7#ae ,u4,s4,c4 #da et seq474  7b7  
,entities n regulat$ by ! ,commission   
,compliance ) ?is ,act & ! regulations  
promulgat$ "u ?is ,act %all be en=c$ z  
foll[s3  7#a7 ,"u section #h ( ! ,f$]al 
,deposit ,insurance ,act 7#ab ,u4,s4,c4 
#ahah7 by ! appropriate ,f$]al bank+    
ag5cy1 ) respect to an insur$ depository
 in/itution 7z ^? t]ms are def9$ 9      
section #c ( t ,act 7#ab ,u4,s4,c4      
#ahac774  7#b7 ,"u ! ,f$]al ,cr$it      
,union ,act 7#ab ,u4,s4,c4 #agea et     
seq47 by ! ,national ,cr$it ,union      
,adm9i/ration ,bo>d1 ) respect to any   
,f$]al cr$it union4  7#c7 ,"u "p ,a (   
subtitle ,,vii ( title #di1 ,unit$      
,/ates ,code1 by ! ,secret>y (          
,transportation1 ) respect to any air   

c>ri] or =eign air c>ri] subject to t   
"p4  7#d7 ,"u ! ,pack]s & ,/ocky>ds     
,act1 #aiba 7#g ,u4,s4,c4 #aha et seq47 
7except z provid$ 9 section #djf ( t    
,act 7#g ,u4,s4,c4 #bbf1 #bbg77 by !    
,secret>y ( ,agriculture1 ) respect to  
any activities subject to t ,act4  7#e7 
,"u ! ,f>m ,cr$it ,act ( #aiga 7#ab     
,u4,s4,c4 #bjja et seq47 by ! ,f>m      
,cr$it ,adm9i/ration1 ) respect to any  
,f$]al l& bank1 ,f$]al l& bank          
association1 ,f$]al int]m$iate cr$it    
bank1 or production cr$it association4  
7c7 ,relation to private agreem5ts ,x   
%all be unlawful = any cov]$ entity to  
commit an act prohibit$ "u ?is ,act or a
 regulation promulgat$ "u ?is ,act1     
reg>dless ( any specific agreem5t betwe5
 entities or individuals4  7d7 ,no waiv]
 ( rights & rem$ies ,! rights & rem$ies 
provid$ "u ?is ,act may n be waiv$ or   
limit$ by contract or o!rwise4  #af4    
,/ate en=cem5t  7a7 ,9 g5]al ,9 any case
 9 :i* ! attorney g5]al ( a ,/ate has   
reason to believe t an int]e/ ( !       

resid5ts ( t ,/ate has be5 or is ?reat5$
 or adv]sely affect$ by ! engagem5t (   
any cov]$ entity 9 a practice t violates
 ?is ,act or a regulation promulgat$ "u 
?is ,act1 ! attorney g5]al ( ! ,/ate    
may1 z p>5s patriae1 br+ a civil action 
on behalf ( ! resid5ts ( ! ,/ate 9 an   
appropriate di/rict c\rt ( ! ,unit$     
,/ates to--  7#a7 enjo9 t practice2     
7#b7 en=ce compliance ) ?is ,act or !   
regulation2  7#c7 obta9 damages1        
re/itution1 or o!r comp5sation on behalf
 ( resid5ts ( ! ,/ate2 or  7#d7 obta9   
any o!r relief t ! c\rt consid]s        
appropriate4  7b7 ,notice  7#a7 ,9 g5]al
 ,be=e fil+ an action "u subsection 7a71
 ! attorney g5]al ( ! ,/ate involv$ %all
 provide to ! ,commission--  7,a7 writt5
 notice ( ! action2 &  7,b7 a copy ( !  
compla9t = ! action4  7#b7 ,exemption   
7,a7 ,9 g5]al ,p>agraph 7#a7 %all n     
apply ) respect to ! fil+ ( an action by
 an attorney g5]al ( a ,/ate if !       
attorney g5]al det]m9es t x is n        
feasible to provide ! notice describ$ 9 

t p>agraph be=e ! fil+ ( ! action4  7,b7
 ,notification ,9 an action describ$ 9  
subp>agraph 7,a71 ! attorney g5]al ( a  
,/ate %all provide notice & a copy ( !  
compla9t to ! ,commission at ! same "t z
 ! attorney g5]al files ! action4  7c7  
,int]v5tion  7#a7 ,9 g5]al ,^u receiv+  
notice "u subsection 7b71 ! ,commission 
%all h ! "r to int]v5e 9 ! action t is !
 subject ( ! notice4  7#b7 ,effect ,if !
 ,commission int]v5es 9 an action "u    
p>agraph 7#a71 ! ,commission %all h !   
"r-- 7,a7 to be he>d ) respect to any   
matt] t arises 9 ! action2 &  7,b7 to   
file a petition = appeal4  7d7 ,rule (  
con/ruction ,= purposes ( br++ a civil  
action "u subsection 7a71 no?+ 9 ?is    
,act %all be con/ru$ to prev5t !        
attorney g5]al ( a ,/ate f ex]cis+ !    
p[]s conf]r$ on ! attorney g5]al by !   
laws ( ! ,/ate to--  7#a7 conduct       
inve/igations2  7#b7 adm9i/] oa?s or    
affirmations2 or  7#c7 compel !         
att5dance ( witnesses or ! production ( 
docum5t>y & o!r evid5ce4  7e7           

,preemptive action by ,commission ,if ! 
,commission in/itutes an action )       
respect to a violation ( ?is ,act or a  
regulation promulgat$ "u ?is ,act1 a    
,/ate may n1 dur+ ! p5d5cy ( t action1  
in/itute an action "u subsection 7a7    
aga9/ any def5dant nam$ 9 ! compla9t 9 !
 action in/itut$ by ! ,commission bas$  
on ! same set ( facts giv+ rise to !    
violation ) respect to :i* ! ,commission
 in/itut$ ! action4  #ag4 ,private "r ( 
action  7a7 ,"r ( action  7#a7 ,9 g5]al 
,any individual alleg+ a violation ( ?is
 ,act or a regulation promulgat$ "u ?is 
,act may br+ a civil action 9 any c\rt (
 compet5t jurisdiction4  7#b7 ,injury 9 
fact ,a violation ( ?is ,act or a       
regulation promulgat$ "u ?is ,act )     
respect to ! p]sonal in=mation ( an     
individual con/itutes an injury 9 fact  
to t individual4  7b7 ,relief ,9 a civil
 action br\ght "u subsection 7a7 9 :i* !
 pla9tiff prevails1 ! c\rt may aw>d--   
7#a7 actual damages2  7#b7 punitive     
damages2  7#c7 reasonable attorney's    

fees & co/s2 &  7#d7 any o!r relief1    
includ+ an injunction1 t ! c\rt det]m9es
 appropriate4  7c7 ,pre-,dispute        
arbitration agreem5ts  7#a7 ,9 g5]al    
,not)/&+ any o!r provision ( law1 no    
pre-dispute arbitration agreem5t %all be
 valid or en=ceable ) respect to a      
dispute betwe5 a cov]$ entity & an      
individual t relates to a violation (   
?is ,act or a regulation promulgat$ "u  
?is ,act4  7#b7 ,applicability ,an issue
 z to :e!r ?is subsection applies )     
respect to a dispute %all be det]m9$ by 
a c\rt4 ,! validity & en=ceability ( an 
agreem5t to :i* ?is subsection applies  
%all be det]m9$ by a c\rt1 r ?an an     
arbitrator1 irrespective ( :e!r !       
agreem5t purports to delegate su*       
det]m9ations to an arbitrator4  #ah4    
,relation to o!r laws  7a7 ,9 g5]al     
,except z provid$ 9 subsection 7b71 no?+
 9 ?is ,act %all be con/ru$ to-- 7#a7   
modify1 limit1 or sup]s$e ! op]ation (  
any privacy or security provision 9--   
7,a7 section #eeb;a ( title #e1 ,unit$  

,/ates ,code 7commonly kn[n z ! ,privacy
 ,act ( #aigd72  7,b7 ! ,"r to ,f9ancial
 ,privacy ,act ( #aigh 7#ab ,u4,s4,c4   
#cdja et seq472  7,c7 ! ,fair ,cr$it    
,report+ ,act 7#ae ,u4,s4,c4 #afha et   
seq472  7,d7 ! ,fair ,debt ,collection  
,practices ,act 7#ae ,u4,s4,c4 #afib et 
seq472  7,e7 ! ,*ildr5's ,onl9e ,privacy
 ,protection ,act ( #aiih 7#ae ,u4,s4,c4
 #feja et seq472  7,f7 title ,v ( !     
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhja et seq472  7,g7 *apt]s #aai1     
#abc1 & #bjf ( title #ah1 ,unit$ ,/ates 
,code2  7,h7 section #ddd ( ! ,g5]al    
,education ,provisions ,act 7#bj        
,u4,s4,c4 #abcb;g7 7commonly ref]r$ to z
 ! ,family ,educational ,rights &       
,privacy ,act ( #aigd72  7,i7 section   
#dde ( ! ,g5]al ,education ,provisions  
,act 7#bj ,u4,s4,c4 #abcb;h72  7,j7 !   
,privacy ,protection ,act ( #aihj 7#db  
,u4,s4,c4 #bjjj;aa et seq472  7,k7 !    
regulations promulgat$ "u section       
#bfd7;c7 ( ! ,heal? ,insurance          
,portability & ,acc\ntability ,act (    

#aiif 7#db ,u4,s4,c4 #acbj;d-#b note71 z
 ^? regulations relate to--  7i7 a p]son
 describ$ 9 section #aagb7;a7 ( !       
,social ,security ,act 7#db ,u4,s4,c4   
#acbj;d-#a7;a772 or  7ii7 transactions  
ref]r$ to 9 section #aagc7;a77#a7 ( !   
,social ,security ,act 7#db ,u4,s4,c4   
#acbj;d-#b7;a77#a772  7,l7 !            
,communications ,assi/ance = ,law       
,en=cem5t ,act 7#dg ,u4,s4,c4 #ajja et  
seq472  7,m7 sections #bbb & #bbg ( !   
,communications ,act ( #aicd 7#dg       
,u4,s4,c4 #bbb1 #bbg72 or  7,n7 any o!r 
privacy or security provision ( ,f$]al  
law2  7#b7 limit ! au?ority ( !         
,commission "u any o!r provision ( law2 
or  7#c7 limit ! au?ority ( ! ,f$]al    
,communications ,commission to          
promulgate regulations & en=ce any      
privacy law n 9 contradiction ) ?is     
,act4  7b7 ,applicability to m9ors ,to !
 ext5t t a provision ( ?is ,act or a    
regulation promulgat$ "u ?is ,act is    
inconsi/5t ) a provision ( any o!r      
,f$]al law relat+ to ! protection &     

control ( ! p]sonal in=mation ( m9ors1 !
 provision t provides ! mo/ protection &
 control to m9ors & _! p>5ts or gu>dians
 %all apply4  #ai4 ,effective date ,?is 
,act %all take effect on ! date t is #ij
 days aft] ! date ( enactm5t ( ?is ,act4