,,ii #aaf? ,,congress #a/ ,session ,s4 #ahi ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,janu>y #ag1 #bjai,ms4 ,klobu*> 7= h]self & ,mr4 ,k5n$y7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to protect ! privacy ( us]s ( social m$ia & o!r onl9e plat=ms4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,social ,m$ia ,privacy ,protection & ,consum] ,rights ,act ( #bjai4 #b4 ,def9itions ,9 ?is ,act-- 7#a7 ! t]m ,commission means ! ,f$]al ,trade ,commission2 7#b7 ! t]m cov]$ onl9e plat=m means an onl9e plat=m t collects p]sonal data dur+ ! onl9e behavior ( a us] ( ! onl9e plat=m2 7#c7 ! t]m geolocation in=mation means1 ) respect to an individual1 any in=mation t is n ! cont5t ( a communication1 conc]n+ ! location ( a wireless communication device t-- 7,a7 9 :ole or 9 "p1 is g5]at$ by or d]iv$ f ! op]ation ( t device2 & 7,b7 c\ld be us$ to det]m9e or inf] in=mation reg>d+ ! location ( ! individual2 7#d7 ! t]m onl9e plat=m-- 7,a7 means any public-fac+ website1 web application1 or digital application 7includ+ a mobile application72 & 7,b7 includes a social network1 an ad network1 a mobile op]at+ sy/em1 a se>* eng9e1 an email s]vice1 or an int]net access s]vice2 7#e7 ! t]m op]ator has ! mean+ giv5 ! t]m 9 section #acjb ( ! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja72 & 7#f7 ! t]m p]sonal data means individually id5tifiable in=mation ab\t an individual collect$ onl9e1 includ+-- 7,a7 location in=mation suffici5t to id5tify ! "n ( a /reet & a city or t[n1 includ+ a physical address2 7,b7 an email address2 7,c7 a telephone numb]2 7,d7 a gov]nm5t id5tifi]1 su* z a ,social ,security numb]2 7,e7 geolocation in=mation2 7,f7 ! cont5t ( a message2 7,g7 protect$ heal? in=mation1 z def9$ 9 section #afj4ajc ( title #de1 ,code ( ,f$]al ,regulations1 or any successor regulation2 & 7,h7 nonpublic p]sonal in=mation1 z def9$ 9 section #eji ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhji74 #c4 ,privacy protections 7a7 ,transp>5cy & t]ms ( s]vice 7#a7 ,disclosure & obta9+ initial cons5t & privacy pref]5ces 7,a7 ,9 g5]al ,be=e a us] creates an acc\nt )1 or o!rwise beg9s to use1 a cov]$ onl9e plat=m1 ! op]ator ( ! onl9e plat=m %all-- 7i7 in=m ! us] t1 unless ! us] makes an election "u clause 7ii77,,ii71 p]sonal data ( ! us] produc$ dur+ ! onl9e behavior ( ! us]1 :e!r on ! onl9e plat=m or o!rwise1 w be collect$ & us$ by ! op]ator & ?ird p>ties2 & 7ii7 provide ! us] ! option to specify ! privacy pref]5ces ( ! us]1 includ+ by-- 7,i7 agree+ to ! t]ms ( s]vice = use ( ! onl9e plat=m1 includ+1 except z provid$ 9 subclause 7,,ii71 ! collection & use ( p]sonal data describ$ 9 clause 7i72 & 7,,ii7 prohibit+1 if ! us] s elects1 ! collection & use ( p]sonal data describ$ 9 clause 7i71 subject to subp>agraph 7,b74 7,b7 ,consequ5ce ( prohibition ( data collection ,if ! election ( a us] "u subp>agraph 7,a77ii77,,ii7 creates inop]ability 9 ! onl9e plat=m1 ! op]ator ( ! onl9e plat=m may d5y c]ta9 s]vices or completely d5y access to ! us]4 7,c7 ,=m ( disclosure ,an op]ator ( a cov]$ onl9e plat=m %all provide a us] ( ! onl9e plat=m ) ! t]ms ( s]vice = use ( ! onl9e plat=m1 includ+ ! collection & use ( p]sonal data describ$ 9 subp>agraph 7,a77i71 9 a =m t-- 7i7 is-- 7,i7 easily accessible2 7,,ii7 ( reasonable l5g?2 & 7,,iii7 cle>ly di/+ui%able f o!r matt]s2 & 7ii7 uses language t is cle>1 concise1 & well organiz$1 & foll[s o!r be/ practices appropriate to ! subject & int5d$ audi5ce4 7,d7 ,privacy or security program ,an op]ator ( a cov]$ onl9e plat=m %all-- 7i7 e/abli% & ma9ta9 a privacy or security program = ! onl9e plat=m2 & 7ii7 publi% a description ( ! privacy or security program t-- 7,i7 details h[ ! op]ator w use ! p]sonal data ( a us] ( ! onl9e plat=m1 includ+ requirem5ts = h[ ! op]ator w address privacy risks associat$ ) ! developm5t ( new products & s]vices2 & 7,,ii7 includes details ( ! access t employees & contractors ( ! op]ator h to ! p]sonal data ( a us] ( ! onl9e plat=m1 & int]nal policies = ! use ( t p]sonal data4 7#b7 ,new products2 *anges to privacy or security program ,an op]ator ( a cov]$ onl9e plat=m may n introduce a new product1 or implem5t any mat]ial *ange to ! privacy or security program ( ! onl9e plat=m t ov]rides ! privacy pref]5ces ( a us] ( ! onl9e plat=m1 z specifi$ "u p>agraph 7#a77;,a77ii71 unless ! op]ator has-- 7,a7 in=m$ ! us] t ! new product or *ange w result 9 ! collection & use ( p]sonal data describ$ 9 p>agraph 7#a77;,a77i71 if t is ! case2 7,b7 provid$ ! us] ! option "u p>agraph 7#a77;,a77ii72 & 7,c7 obta9$ affirmative express cons5t f ! us] to ! introduction ( ! new product or ! implem5tation ( ! *ange4 7#c7 ,)drawal ( cons5t ,an op]ator ( a cov]$ onl9e plat=m %all ensure t-- 7,a7 a us] ( ! onl9e plat=m is able to )draw cons5t to ! t]ms ( s]vice = use ( ! onl9e plat=m1 includ+ ! collection & use ( p]sonal data describ$ 9 p>agraph 7#a77;,a77i71 z easily z ! us] is able to give su* cons5t2 & 7,b7 except z o!rwise requir$ by law1 no p]son is able to access ! p]sonal data ( a us] ( ! onl9e plat=m lat] ?an #cj days aft] ! date on :i* ! us] closes 8 or h] acc\nt or o!rwise t]m9ates 8 or h] use ( ! onl9e plat=m4 7b7 ,"r to access ,an op]ator ( a cov]$ onl9e plat=m %all (f] a us] ( ! onl9e plat=m a copy ( ! p]sonal data ( ! us] t ! op]ator has process$1 free ( *>ge & 9 an electronic & easily accessible =mat1 includ+ a li/ ( ea* p]son t receiv$ ! p]sonal data f ! op]ator = bus9ess purposes1 :e!r ?r\gh sale or o!r means4 7c7 ,violations ( privacy 7#a7 ,9 g5]al ,n lat] ?an #gb h\rs aft] an op]ator ( a cov]$ onl9e plat=m becomes aw>e t ! p]sonal data ( a us] ( ! onl9e plat=m has be5 transmitt$ 9 violation ( ! privacy or security program ( ! onl9e plat=m1 includ+ ! privacy pref]5ces specifi$ by ! us] "u subsection 7a77#a77;,a77ii71 ! op]ator %all-- 7,a7 notify ! us] ( ! transmission2 7,b7 (f] ! us] ! option to elect to prohibit ! op]ator f collect+ & us+ ! p]sonal data ( ! us]1 subject to p>agraph 7#b72 7,c7 except z provid$ 9 p>agraph 7#c71 (f] ! us] ! option to h ! op]ator-- 7i7 erase all p]sonal data ( ! us] track$ by ! op]ator2 & 7ii7 cease fur!r dissem9ation ( p]sonal data ( ! us] track$ by ! op]ator2 7,d7 (f] ! us] a copy ( ! p]sonal data ( ! us] t ! op]ator has process$1 free ( *>ge & 9 an electronic & easily accessible =mat1 includ+ a li/ ( ea* p]son t receiv$ ! p]sonal data f ! op]ator1 :e!r ?r\gh sale or o!r means2 & 7,e7 (f] ! us] ! option to close 8 or h] acc\nt or o!rwise t]m9ate 8 or h] use ( ! onl9e plat=m4 7#b7 ,consequ5ce ( prohibition ( data collection ,if ! election ( a us] "u p>agraph 7#a77;,b7 creates inop]ability 9 ! onl9e plat=m1 ! op]ator ( ! onl9e plat=m may d5y c]ta9 s]vices or completely d5y access to ! us]4 7#c7 ,public safety exception ,if ! op]ator ( a cov]$ onl9e plat=m1 9 good fai?1 believes t an em]g5cy involv+ dang] ( dea? or s]i\s physical injury to any individual requires disclosure )\t delay ( specific p]sonal data ( a us] ( ! onl9e plat=m t relates to ! em]g5cy1 ! op]ator %all-- 7,a7 reta9 ! specific p]sonal data2 & 7,b7 notify ! prop] au?orities4 7d7 ,compliance ,n less frequ5tly ?an once e #b ye>s1 ! op]ator ( a cov]$ onl9e plat=m %all audit ! privacy or security program ( ! onl9e plat=m4 7e7 ,safe h>bor ,subsections 7a71 7b71 & 7c7 %all n apply ) respect to ! developm5t ( privacy-enhanc+ te*nology by an op]ator ( an onl9e plat=m4 #d4 ,en=cem5t 7a7 ,en=cem5t by ,commission 7#a7 ,unfair or deceptive acts or practices ,a violation ( section #c %all be treat$ z a violation ( a rule def9+ an unfair or deceptive act or practice prescrib$ "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b774 7#b7 ,p[]s ( ,commission 7,a7 ,9 g5]al ,except z provid$ 9 subp>agraph 7,c71 ! ,commission %all en=ce ?is ,act 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is ,act4 7,b7 ,privileges & immunities ,except z provid$ 9 subp>agraph 7,c71 any p]son :o violates ?is ,act %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7,c7 ,common c>ri]s & nonpr(it organizations ,not)/&+ section #d1 #e7;a77#b71 or #f ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #dd1 #de7;a77#b71 #df7 or any jurisdictional limitation ( ! ,commission1 ! ,commission %all also en=ce ?is ,act1 9 ! same mann] provid$ 9 subp>agraphs 7,a7 & 7,b7 ( ?is p>agraph1 ) respect to-- 7i7 common c>ri]s subject to ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #aea et seq47 & ,acts am5datory !re( & supplem5t>y !reto2 & 7ii7 organizations n organiz$ to c>ry on bus9ess = _! own pr(it or t ( _! memb]s4 7,d7 ,au?ority pres]v$ ,no?+ 9 ?is ,act %all be con/ru$ to limit ! au?ority ( ! ,commission "u any o!r provision ( law4 7b7 ,en=cem5t by ,/ates 7#a7 ,au?orization ,subject to p>agraph 7#b71 9 any case 9 :i* ! attorney g5]al ( a ,/ate has reason to believe1 bas$ on a legitimate consum] compla9t1 t an int]e/ ( ! resid5ts ( ! ,/ate has be5 or is ?reat5$ or adv]sely affect$ by ! engagem5t ( any p]son subject to section #c 9 a practice t violates t section1 ! attorney g5]al ( ! ,/ate may1 z p>5s patriae1 br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to obta9 appropriate relief4 7#b7 ,rights ( ,f$]al ,trade ,commission 7,a7 ,notice to ,f$]al ,trade ,commission 7i7 ,9 g5]al ,except z provid$ 9 clause 7iii71 ! attorney g5]al ( a ,/ate %all notify ! ,commission 9 writ+ t ! attorney g5]al int5ds to br+ a civil action "u p>agraph 7#a7 be=e initiat+ ! civil action aga9/ a p]son describ$ 9 subsection 7a77#a74 7ii7 ,cont5ts ,! notification requir$ by clause 7i7 ) respect to a civil action %all include a copy ( ! compla9t to be fil$ to initiate ! civil action4 7iii7 ,exception ,if x is n feasible = ! attorney g5]al ( a ,/ate to provide ! notification requir$ by clause 7i7 be=e initiat+ a civil action "u p>agraph 7#a71 ! attorney g5]al %all notify ! ,commission imm$iately ^u in/itut+ ! civil action4 7,b7 ,int]v5tion by ,f$]al ,trade ,commission ,! ,commission may-- 7i7 int]v5e 9 any civil action br\ght by ! attorney g5]al ( a ,/ate "u p>agraph 7#a7 aga9/ a p]son describ$ 9 subsection 7a77#a72 & 7ii7 ^u int]v5+-- 7,i7 be he>d on all matt]s aris+ 9 ! civil action2 & 7,,ii7 file petitions = appeal ( a decision 9 ! civil action4 7#c7 ,inve/igatory p[]s ,no?+ 9 ?is subsection may be con/ru$ to prev5t ! attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on ! attorney g5]al by ! laws ( ! ,/ate to conduct inve/igations1 to adm9i/] oa?s or affirmations1 or to compel ! att5dance ( witnesses or ! production ( docum5t>y or o!r evid5ce4 7#d7 ,action by ,f$]al ,trade ,commission ,if ! ,f$]al ,trade ,commission in/itutes a civil action or an adm9i/rative action ) respect to a violation ( section #c1 ! attorney g5]al ( a ,/ate may n1 dur+ ! p5d5cy ( ! action1 br+ a civil action "u p>agraph 7#a7 aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = ! violation ) respect to :i* ! ,commission in/itut$ su* action4 7#e7 ,v5ue2 s]vice ( process 7,a7 ,v5ue ,any action br\ght "u p>agraph 7#a7 may be br\ght 9-- 7i7 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code2 or 7ii7 ano!r c\rt ( compet5t jurisdiction4 7,b7 ,s]vice ( process ,9 an action br\ght "u p>agraph 7#a71 process may be s]v$ 9 any di/rict 9 :i* ! def5dant-- 7i7 is an inhabitant2 or 7ii7 may be f\nd4 7#f7 ,actions by o!r ,/ate (ficials 7,a7 ,9 g5]al ,9 addition to civil actions br\ght by attorneys g5]al "u p>agraph 7#a71 any o!r consum] protection (fic] ( a ,/ate :o is au?oriz$ by ! ,/ate to d s may br+ a civil action "u p>agraph 7#a71 subject to ! same requirem5ts & limitations t apply "u ?is subsection to civil actions br\ght by attorneys g5]al4 7,b7 ,sav+s provision ,no?+ 9 ?is subsection may be con/ru$ to prohibit an au?oriz$ (ficial ( a ,/ate f initiat+ or cont9u+ any proce$+ 9 a c\rt ( ! ,/ate = a violation ( any civil or crim9al law ( ! ,/ate4 #e4 ,effective date 7a7 ,9 g5]al ,?is ,act %all take effect #ahj days aft] ! date ( enactm5t ( ?is ,act4 7b7 ,applicability to exi/+ us]s ( onl9e plat=ms ,an individual :o becomes a us] ( a cov]$ onl9e plat=m be=e ! effective date "u subsection 7a7 %all be treat$ z if he or %e _h become a us] ( ! onl9e plat=m on t effective date4 7c7 ,no retroactive applicability ,?is ,act %all n apply to any conduct t occurr$ be=e ! effective date "u subsection 7a74