,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #bcih  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,july #ca1 #bjai ,mrs4 
,fe9/e9 introduc$ ! foll[+ bill2 :i* 0  
read twice & ref]r$ to ! ,committee on  
,rules & ,adm9i/ration  ,a ,,bill  ,to  
am5d ! ,f$]al ,election ,campaign ,act (
 #aiga to ensure privacy ) respect to   
vot] in=mation4  #a4 ,%ort title ,?is   
,act may be cit$ z ! ,vot] ,privacy ,act
 ( #bjai4  #b4 ,f9d+s ,congress makes ! 
foll[+ f9d+s3 7#a7 ,accord+ to ! ,pew   
,rese>* ,c5t]1 #ij p]c5t ( ,am]icans    
report$ us+ ! int]net 9 #bjai1 :i* 0 an 
increase f #eb p]c5t 9 #bjjj4  7#b7     
,int]net s]vice provid]s1 br[s]s1       
websites1 se>* eng9es1 email provid]s1  
device manufactur]s1 & c]ta9 social m$ia
 companies collect unique data on ne>ly 
e ,am]ican's onl9e & increas+ly (fl9e   
activities1 e day4  7#c7 ,"o ,unit$     
,/ates bas$ se>* eng9e adv]tises its    
ability to track hundr$s ( categories ( 
data ab\t specific individuals includ+  
age1 g5d]1 occupation1 income level1    

sexual ori5tation1 national orig91      
religion1 m$ical conditions su* z       
,a,i,ds1 erectile dysfunction1 bipol>   
disord]1 eat+ disord]s1 & sexually      
transmitt$ diseases1 family in=mation   
su* z numb] ( *ildr51 *ildr5 ) special  
ne$s1 inf]tility1 & sub/ance misuse1 &  
support = social issues su* z           
reproductive rights1 unions & labor     
issues1 & support = gun rights4  7#d7   
,t>get+ s]vices1 su* z c]ta9 l>ge se>*  
eng9es & social m$ia plat=ms1 ma9ta9    
sophi/icat$ data pr(iles on ne>ly e     
,am]ican4 ,^! t>get+ s]vices are us$ by 
?ird p>ties to t>get & deliv]           
communications to specific individuals  
bas$ on _! s5sitive p]sonal in=mation1  
ev5 if a ?ird p>ty does n control any   
individual's p]sonal in=mation4  7#e7 ,9
 te/imony be=e ! ,committee on !        
,judici>y ( ! ,s5ate titl$1 ,und]/&+    
,digital ,adv]tis+ ,ecosy/em & ! ,impact
 on ,data ,privacy1 ! ,committee receiv$
 ! foll[+ te/imony reg>d+ behavioral    
adv]tis+3 almo/ e s+le "t y visit a     

website3 data ab\t y is broadca/ to t5s 
or hundr$s ( companies1 :i* lets        
adv]tis]s compete = ! opportunity to %[ 
y an ad4 ,adv]tis+ is necess>y1 & ?is   
s\nds ,,ok4 ,b wait until y he> :at     
in=mation ab\t y is 9 t big broadca/3 x 
c include y\r - inf]r$ sexual           
ori5tation1 political views1 :e!r y are 
,*ri/ian1 ,jewi%1 or ,muslim1 etc41 :e!r
 y h ,a,i,ds1 erectile dysfunction1 or  
bi-pol> disord]4 ,x includes :at y are  
read+1 wat*+1 & li/5+ to4 ,x includes   
y\r location1 sometimes "r up to y\r    
exact ,,gps coord9ates4 ,& x includes   
unique ,,id codes t are z specific to y 
z is y\r social security numb]1 s t all 
( ?is data c be ti$ to y ov] "t4 ,?is   
all[s companies y h nev] he>d ( to      
ma9ta9 intimate pr(iles on y1 & on      
ev]yone y h ev] kn[n44  7#f7 ,onl9e     
surveillance te*niques are becom+ m     
sophi/icat$4 ,accord+ to ! ,c5t] =      
,in=mation ,te*nology ,policy at        
,pr9ceton ,univ]sity1 new website track+
 s(tw>e c provide real-"t surveillance (

 an individual's onl9e activity3 ,unlike
 typical analytics s]vices1 t provide   
aggregate /ati/ics1 ^! scripts are      
int5d$ = record+ & playback ( individual
 br[s+ sessions1 z if someone is look+  
ov] y\r %\ld]44  7#g7 ,! volume ( data  
n[ publicly available & attributable to 
a specific individual p]mits rese>*]s to
 inf] private in=mation ab\t t          
individual t ! individual nev] disclos$ 
publicly4  7#h7 ,accord+ to a /udy f    
rese>*]s at ,cambridge ,univ]sity &     
,micros(t ,rese>*1 an individual's      
social m$ia po/s1 pictures1 & pr(ile    
in=mation c be comb9$ to reliably inf] t
 individual's lat5t p]sonality traits1  
includ+ op5ness1 consci5ti\sness1       
extrav]sion1 agreeabl5ess1 &            
neuroticism4 ,prior to int]net-bas$ data
 track+1 ! only way to obta9 t type (   
s5sitive psy*ological data w\ld h be5 = 
an individual to elect to respond to a  
detail$ p]sonality que/ionnaire4  7#i7  
,accord+ to a /udy publi%$ by !         
,national ,academy ( ,sci5ces1 comput]s 

c pr$ict an individual's lat5t          
p]sonality traits bett] ?an humans4     
,specifically1 rese>*]s f\nd t a comput]
 ne$$ only #aj social m$ia impressions  
to bett] pr$ict an individual's         
responses to a p]sonality que/ionnaire  
?an a c[ork]1 #gj = a cohabitant or     
fri5d1 #aej = a family memb]1 & #cjj = a
 sp\se4  7#aj7 ,communications tailor$  
to an individual's unique p]sonality    
traits are design$ to manipulate        
cognitive function r ?an to p]suade via 
appeals to rational decision mak+4 ,a   
=?com+ publication by ,julie ,e4 ,coh5  
titl$ ,betwe5 ,tru? & ,p[] describes !  
ph5om5on z foll[s ,! op]ation ( !       
digital in=mation environm5t has begun  
to mimic ! op]ation ( ! collection (    
bra9 /ructures t mid-tw5tie?-c5tury     
neurologi/s *ri/5$ ! limbic sy/em & t   
play vital roles 9 a numb] (            
precognitive functions1 includ+ emotion1
 motivation1 & habit-=mation1 & obs]v$ t
 today's network$ in=mation fl[s are    
optimiz$ to produce :at social          

psy*ologi/ ,%o%ana ,zub(f calls         
in/rum5t>ian p[]3 ,!y employ a radical  
behaviori/ approa* to human psy*ology to
 mobilize & re9=ce patt]ns ( motivation1
 cognition1 & behavior t op]ate on      
automatic1 ne>-in/9ctual levels & t may 
be manipulat$ in/rum5tally4  7#aa7      
,accord+ to num]\s /udies1 messages     
tailor$ to an individual's unique       
p]sonality traits are mat]ially m       
effective at alt]+ an individual's      
behavior4  7#ab7 ,a rec5t /udy publi%$ 9
 ! ,national ,academy ( ,sci5ces f\nd t 
x is possible to conduct psy*ological   
manipulation ef=ts onl9e t are t>get$ & 
cu/omiz$ to ea* individual's unique     
p]sonality traits on a national scale4  
7#ac7 ,c&idates1 campaigns1 & political 
organizations are increas+ly us+ onl9e  
data to inf] p]sonality traits & o!r    
psy*ological *>act]i/ics reg>d+ specific
 ,unit$ ,/ates p]sons1 us+ t nonpublic  
in=mation to t>get psy*ologically       
manipulative communications & us+       
algori?ms & o!r automat$ processes to   

automatically ref9e communications ov]  
"t to improve _! effectiv5ess4  7#ad7   
,accord+ to a /udy titl$ ,vot] ,privacy 
9 ! ,age ( ,big ,data1 political        
entities assemble a va/ array (         
p]sonally id5tifiable in=mation into    
detail$ dossi]s on practically e        
,am]ican vot] 9 ord] to t>get vot]s )   
individualiz$ messages ''' ,mo/ vot]s   
are ignorant ( ! /eps tak5 to create ^! 
dossi]s & "k ev5 less ab\t relat$ t>get+
 practices44  7#ae7 ,! /udy fur!r f\nd t
 ,political databases hold records on   
almo/ #bjj million eligible ,am]ican    
vot]s4 ,ea* records conta9s hundr$s if n
 ?\s&s ( fields d]iv$ f vot] rolls1     
donor & response data1 campaign web     
data1 & consum] & o!r data obta9$ f data
 brok]s1 all ( :i* is comb9$ into a     
giant assemblage ''' ,ubiquit\s p]sonal 
id5tifi]s 7"n1 address1 telephone       
numb]s1 email addresses1 ,,ip addresses1
 cookies1 mobile devices ,i,ds1 & o!r   
unique ,i,ds7 all[ campaigns to l9k &   
integrate ^! div]se data sets1 :ile data

 m9+ & sophi/icat$ /ati/ical te*niques  
all[ !m to engage 9 highly /rategic &   
co/-effective analysis & t>get+1 & t    
,campaign insid]s & paid consultants :o 
n only view vot] microt>get+ z highly   
effective b also h assign$ x a crucial  
role 9 det]m9+ ! outcome ( ! pa/ ?ree   
presid5tial campaigns44  7#af7 ,!       
political consult+ firm ,cambridge      
,analytica report$ly us$ a database (   
#bbj1jjj1jjj ,am]icans1 includ+ ?\s&s ( 
unique data po9ts on ea* individual &   
inf]r$ p]sonality trait analysis1 to    
conduct psy*ological op]ations *ang+ p's
 m9ds n ?r\gh p]suasion b ?r\gh         
in=mational dom9ance1 a set ( te*niques 
t includes rumor1 dis9=mation & fake    
news4 ,cambridge ,analytica report$ly   
work$ 9 #dd ,unit$ ,/ates elections 9   
#bjad & ano!r #ej 9 #bjaf1 includ+ on   
behalf ( #b major ,presid5tial          
campaigns4  7#ag7 ,9 ,sorrell v4 ,,ims  
,heal? ,inc41 ! ,supreme ,c\rt          
invalidat$ a ,v]mont ,/ate law reg>d+   
re/rictions on ! use ( p]sonal in=mation

 z violat+ ! ,fir/ ,am5dm5t4 ,! c\rt    
held t ! gov]nm5t's prohibition         
disfavored ''' spee* ) a p>ticul>       
cont5t1 namely m>ket+1 & disfavored     
specific speak]s1 namely ph>maceutical  
manufactur]s because x int]f]$ ) !      
manufactur]s' attempts to p]suade       
recipi5ts to use _! products4           
,psy*ological t>get+ te*niques seek to  
manipulate1 n to p]suade4  7#ah7 ,9     
,citiz5s ,unit$ v4 ,,fec1 ! ,supreme    
,c\rt invalidat$ ! ,f$]al ,election     
,campaign ,act's prohibition on         
corporate indep5d5t exp5ditures on !    
gr\nds t ! ,fir/ ,am5dm5t does n all[   
political spee* re/rictions bas$ on a   
speak]'s corporate id5tity4 ,all[+      
individuals to control ! use ( _! own   
p]sonal in=mation 9 ! context ( an      
election does n re/rict ! political     
spee* ( any p]son bas$ on _! id5tity4   
7#ai7 ,9 ,buckley v4 ,valeo1 ! ,supreme 
,c\rt invalidat$ ! ,f$]al ,election     
,campaign ,act's exp5diture limitations1
 f9d+ t !y impose direct & sub/antial   

re/ra9ts on ! quantity ( political      
spee*4 ,all[+ individuals to control !  
use ( _! own p]sonal in=mation 9 !      
context ( an election does n limit ! any
 p]son's quantity ( political spee*4    
#c4 ,s5se ( ,congress ,x is ! s5se (    
,congress t-- 7#a7 ! ,f$]al ,gov]nm5t   
has a compell+ int]e/ 9 protect+ vot]s f
 surveillance & manipulation2 &  7#b7 ! 
,vot] ,privacy ,act ( #bjai is ! mo/    
n>r[ly tailor$ approa* to protect+ vot]s
 f psy*ological manipulation onl9e1     
h[ev] ! ,f$]al ,gov]nm5t's int]e/ w\ld  
ju/ify additional prohibitions if ?is   
,act is insuffici5t4  #d4 ,vot] data    
privacy  7a7 ,9 g5]al ,title ,,iii ( !  
,f$]al ,election ,campaign ,act ( #aiga 
7#eb ,u4,s4,c4 #cjaja7 is am5d$ by add+ 
at ! end ! foll[+ new subtitle3  ,b     
,privacy ( ,vot]'s ,p]sonal ,in=mation  
#cea4 ,def9itions ,9 ?is subtitle3 7#a7 
,cov]$ entity ,! t]m cov]$ entity       
means--  7,a7 any c&idate1 political    
committee1 national committee1 connect$ 
organization1 or political p>ty 7z ^?   

t]ms are def9$ 9 section #cja72  7,b7   
any political organization "u section   
#ebg ( ! ,int]nal ,rev5ue ,code ( #aihf2
 &  7,c7 any p]son t obta9s an          
individual's p]sonal in=mation = !      
purpose ( conduct+--  7i7 a public      
communication z def9$ 9 section         
#cja7bb71 except = purposes ( ?is       
subtitle su* t]m includes a             
communication by means ( any paid       
int]net or paid digital communication2  
7ii7 an electione]+ communication z     
def9$ 9 section #cjd7;f77#c72  7iii7 any
 communication t w\ld be an electione]+ 
communication z def9$ 9 su* section if  
su* section 7 appli$--  7,i7 by tak+    
into acc\nt communications made ov] !   
int]net2  7,,ii7 )\t reg>d to           
subp>agraph 7,a77i77,,iii7 ( su* section
 ) respect to communications describ$ 9 
subclause 7,i7 ( ?is clause2 &  7,,iii7 
by treat+ ! facilities ( any onl9e or   
digital newspap]1 magaz9e1 blog1        
publication1 or p]iodical 9 ! same mann]
 z ! facilities ( a broadca/+ /ation =  

purposes ( subp>agraph 7,b77i7 ( su*    
section2  7iv7 an indep5d5t exp5diture z
 def9$ 9 section #cja7ag72 or  7v7 a    
g5]ic campaign activity z def9$ 9       
section #cja7ba74  7#b7 ,t>get+ s]vice  
,! t]m t>get+ s]vice means any          
int]active comput] s]vice1 z def9$ 9    
section #bcj7;f77#b7 ( ! ,communications
 ,act ( #aicd 7#db ,u4,s4,c4            
#bcj7;f77#b771 t all[s a ?ird p>ty to   
t>get communications to an individual   
bas$ on t individual's p]sonal          
in=mation4  7#c7 ,individual ,! t]m     
individual means a natural p]son1 h[ev] 
id5tifi$1 includ+ by any unique         
id5tifi]4  7#d7 ,p]sonal in=mation  7,a7
 ,9 g5]al ,subject to subp>agraph 7,b71 
! t]m p]sonal in=mation means in=mation 
t id5tifies1 relates to1 describes1 is  
capable ( be+ associat$ )1 or c\ld      
reasonably be l9k$1 directly or         
indirectly1 ) a p>ticul> individual or  
h\sehold t includes--  7i7 id5tifi]s su*
 z int]net protocol address1 email      
address1 acc\nt "n1 social security     

numb]1 driv]'s lic5se numb]1 passport   
numb]1 or o!r simil> id5tifi]s2  7ii7   
*>act]i/ics ( any protect$ class "u     
title ,,vii ( ! ,civil ,rights ,act (   
#aifd 7#db ,u4,s4,c4 #bjjj;e et seq472  
7iii7 comm]cial in=mation1 includ+      
records ( p]sonal prop]ty1 products or  
s]vices pur*as$1 obta9$1 or consid]$1 or
 o!r pur*as+ or consum+ hi/ories or     
t5d5cies2  7iv7 biometric in=mation2    
7v7 int]net or o!r electronic network   
activity in=mation1 includ+ br[s+       
hi/ory1 se>* hi/ory1 & in=mation reg>d+ 
consum]'s int]action ) an int]net       
website1 application1 or adv]tisem5t2   
7vi7 geolocation data2  7vii7 heal?     
insurance in=mation2  7viii7 audio1     
electronic1 visual1 !rmal1 olfactory1 or
 simil> in=mation2  7ix7 pr(essional or 
employm5t-relat$ in=mation2  7x7        
education in=mation2 &  7xi7 inf]5ces   
drawn f any ( ! in=mation id5tifi$ 9 ?is
 subp>agraph to create a pr(ile reg>d+  
an individual reflect+ ! individual's   
pref]5ces1 *>act]i/ics1 psy*ological    

traits1 psy*ographic model+1            
pr$ispositions1 behavior1 attitudes1    
intellig5ce1 abilities1 & aptitudes4    
7,b7 ,exclusions  7i7 ,9 g5]al ,! t]m   
p]sonal in=mation does n include !      
foll[+3 7,i7 ,publicly available        
in=mation4  7,,ii7 ,deid5tifi$          
in=mation4  7,,iii7 ,aggregate poll+    
in=mation4  7ii7 ,def9itions ,= purposes
 ( clause 7i73 7,i7 ,publicly available 
in=mation ,! t]m publicly available     
in=mation means in=mation obta9$ f a    
,f$]al1 ,/ate1 or local vot] regi/ration
 database t is lawfully made available  
to ! public4  7,,ii7 ,deid5tifi$        
in=mation ,! t]m deid5tifi$ in=mation   
means in=mation t _c reasonably id5tify1
 relate to1 describe1 be capable ( be+  
associat$ )1 or be l9k$1 directly or    
indirectly1 to a p>ticul> individual4   
7,,iii7 ,aggregate poll+ in=mation ,!   
t]m aggregate poll+ in=mation means     
in=mation t relates to a gr\p or        
category ( individuals1 f :i* individual
 id5tities h be5 remov$1 t is n l9k$ or 

reasonably l9kable to any kn[n          
individual1 includ+ via a device or o!r 
unique id5tifi]4  7#e7 ,biometric       
in=mation ,! t]m biometric in=mation    
means an individual's physiological1    
biological1 or behavioral *>act]i/ics1  
includ+ an individual's deoxyribonucleic
 acid 7,,dna71 t c be us$1 s+ly or 9    
comb9ation ) ea* o!r or ) o!r id5tify+  
data1 to e/abli% individual id5tity4    
,biometric in=mation includes imag]y ( !
 iris1 ret9a1 f+]pr9t1 face1 h&1 palm1  
ve9 patt]ns1 & voice record+s1 f :i* an 
id5tifi] template1 su* z a facepr9t1 a  
m9utiae template1 or a voicepr9t1 c be  
extract$1 & key/roke patt]ns or rhy?ms1 
& sleep1 heal?1 or ex]cise data t conta9
 id5tify+ in=mation4  7#f7 ,heal?       
insurance in=mation ,! t]m heal?        
insurance in=mation means an            
individual's insurance policy numb] or  
subscrib] id5tification numb]1 any      
unique id5tifi] us$ by a heal? insur] to
 id5tify a p]son1 or any in=mation 9 !  
individual's application & claims       

hi/ory4  7#g7 ,categories ( p]sonal     
in=mation ,! t]m categories ( p]sonal   
in=mation means ! enum]at$ categories ( 
in=mation describ$ 9 clauses 7i7 ?r\gh  
7xi7 ( p>agraph 7#d77;,a71 except z     
modifi$ pursuant to regulations or      
guidance ( ! ,commission pursuant to    
section #cei7;b74  7#h7 ,v]ifiable      
reque/ ,! t]m v]ifiable reque/ means a  
reque/ made by an individual t a cov]$  
entity c reasonably v]ify1 pursuant to  
regulations adopt$ by ! ,commission     
pursuant to section #cei1 to be !       
individual ab\t :om ! cov]$ entity has  
collect$ in=mation4  7#i7 ,collect or   
collect$ ,! t]ms collect or collect$    
mean1 ) respect to an individual1 any   
p]sonal in=mation t is ga!r$ directly f 
t individual4  7#aj7 ,receiv$ ,! t]m    
receiv$ means any individual's p]sonal  
in=mation t is n collect$ by a cov]$    
entity directly f t individual1 includ+ 
any p]sonal in=mation t is b\ght1 r5t$1 
lic5s$1 acquir$1 or access$1 by a cov]$ 
entity f any ?ird p>ty4  7#aa7 ,obta9$  

,! t]m obta9$ means any p]sonal         
in=mation t is ei!r collect$ or receiv$4
  7#ab7 ,process+ ,! t]m process+ means 
any op]ation or set ( op]ations t are   
p]=m$ on p]sonal in=mation or on sets ( 
p]sonal in=mation1 :e!r or n by automat$
 means4  7#ac7 ,?ird p>ty ,! t]m ?ird   
p>ty means a p]son :o is n-- 7,a7 !     
p]son t collects an individual's p]sonal
 in=mation directly f t individual2 or  
7,b7 a p]son to :om a cov]$ entity      
discloses an individual's p]sonal       
in=mation = process+ pursuant to a      
writt5 contract1 provid$ t ! contract   
prohibits ! p]son receiv+ ! p]sonal     
in=mation f--  7i7 sell+ or transf]r+ ! 
p]sonal in=mation to a ?ird p>ty2 or    
7ii7 reta9+1 us+1 or disclos+ ! p]sonal 
in=mation = any purpose o!r ?an = !     
specific purpose ( p]=m+ ! s]vices      
specifi$ 9 ! writt5 contract4  #ceb4    
,vot]'s "r ( access  7a7 ,9 g5]al ,an   
individual %all h ! "r to direct a cov]$
 entity t obta9s an individual's p]sonal
 in=mation to disclose to t individual !

 categories ( p]sonal in=mation &       
specific pieces ( p]sonal in=mation !   
cov]$ entity has obta9$ ) respect to !  
individual4  7b7 ,requirem5t ,a cov]$   
entity t receives a v]ifiable reque/ f  
an individual to access t individual's  
p]sonal in=mation pursuant to subsection
 7a71 %all provide ! reque/$ in=mation 9
 accordance ) subsection 7e74  7c7      
,v]ifiable reque/ ,a cov]$ entity %all  
provide ! in=mation specifi$ 9          
subsection 7a7 only ^u receipt ( a      
v]ifiable reque/4  7d7 ,tim+ ,a cov]$   
entity %all comply ) all v]ifiable      
reque/s made pursuant to subsection 7a7 
)9 a reasonable p]iod aft] receiv+ su* a
 reque/1 b n lat] ?an #aj cal5d> days   
aft] receiv+ su* a reque/4  7e7 ,cont5ts
 ,ea* reque/ "u subsection 7a71 )       
respect to ! p]sonal in=mation ( !      
reque/+ individual1 %all include !      
foll[+3  7#a7 ,! categories ( p]sonal   
in=mation obta9$ reg>d+ t individual4   
7#b7 ,! specific s\rces f :i* ! p]sonal 
in=mation 0 obta9$4  7#c7 ,! specific   

?ird p>ty or ?ird p>ties to :om !       
p]sonal in=mation has be5 transf]r$ or  
disclos$4  7#d7 ,! p]iod = :i* ! p]sonal
 in=mation w be /or$ by ! cov]$ entity4 
7#e7 ,! exi/5ce ( ! "r ( an individual  
to reque/ a copy ( t individual's       
specific pieces ( p]sonal in=mation "u  
subsection 7f74  7#f7 ,! exi/5ce ( ! "r 
( an individual to reque/ erasure ( t   
individual's p]sonal in=mation "u       
section #cec4  7#g7 ,! exi/5ce ( ! "r to
 reque/ prohibition ( ! transf] (       
p]sonal in=mation to any ?ird p>ty "u   
section #ced4  7#h7 ,in=mation reg>d+ ! 
"r to lodge a compla9t ) ! ,commission  
"u section #cji7;a7 z describ$ 9 section
 #cef reg>d+ any pot5tial violation (   
?is subtitle4  7f7 ,specific pieces (   
p]sonal in=mation ,9 addition to !      
in=mation provid$ "u subsection 7e71 ^u 
specific1 v]ifiable reque/ an individual
 %all h ! "r to access all ( t          
individual's specific pieces ( p]sonal  
in=mation obta9$ by a cov]$ entity4  7g7
 ,=mat ,a cov]$ entity %all provide     

in=mation z requir$ "u ?is section to ! 
reque/+ individual 9 a concise1 & easily
 accessible =m1 us+ cle> & pla9         
language4 ,! in=mation requir$ "u ?is   
subsection may be deliv]$ by mail or    
electronic mail1 or made available via a
 secur$ int]net website4  7h7 ,co/ ,a   
cov]$ entity t receives a v]ifiable     
reque/ f an individual %all provide     
in=mation requir$ "u ?is section free ( 
*>ge4  7i7 ,limitation ,a cov]$ entity  
%all n be requir$ to provide an         
individual's p]sonal in=mation to !     
individual pursuant to ?is section m ?an
 two times 9 a #ab-mon? p]iod4  7j7     
,prohibition on ?ird-,p>ty reque/s ,no  
?ird p>ty %all submit a v]ifiable reque/
 to a cov]$ entity on behalf ( ano!r    
individual4 ,no individual may au?orize 
a ?ird p>ty to submit a v]ifiable reque/
 to a cov]$ entity on _! behalf4  #cec4 
,vot]'s "r ( erasure  7a7 ,9 g5]al ,an  
individual %all h ! "r to direct a cov]$
 entity to delete any ( t individual's  
p]sonal in=mation obta9$ by a cov]$     

entity4  7b7 ,requirem5t ,a cov]$ entity
 t receives a v]ifiable reque/ to delete
 an individual's p]sonal in=mation      
pursuant to subsection 7a7--  7#a7 %all 
imm$iately cease process+ su* p]sonal   
in=mation1 & z soon z practicable1      
p]man5tly delete su* in=mation1 except z
 provid$ "u subsections 7c71 7d71 & 7e72
 &  7#b7 %all n1 unless ! cov]$ entity  
receives writt5 au?orization f !        
individual1 re-collect or o!rwise obta9 
any ( ! individual's p]sonal in=mation1 
except z provid$ "u su* subsections4    
7c7 ,limitation ,! requirem5t to delete 
p]sonal in=mation 9 subsection 7b7 does 
n apply to publicly available in=mation 
z def9$ 9 ?is subtitle4  7d7 ,records   
,not)/&+ subsections 7a7 & 7b71 a cov]$ 
entity %all ma9ta9 su* p]sonal in=mation
 z is necess>y to ma9ta9 adequate       
records ( a reque/ to delete in=mation  
"u subsection 7a7 or to comply ) section
 #ceb7;e77#c7 & section #ced ( ?is      
subtitle4 ,any p]sonal in=mation reta9$ 
consi/5t ) ?is subsection %all n be     

process$ = any o!r purpose1 & %all be   
reviewable by ! ,commission4  7e7       
,confirmation ,a cov]$ entity %all      
provide confirmation to ! individual    
reque/+ deletion ( p]sonal in=mation "u 
subsection 7a7 n lat] ?an #e days foll[+
 ! deletion ( ! in=mation4  #ced4       
,vot]'s "r to prohibit transf]  7a7 ,9  
g5]al ,an individual %all h ! "r to     
direct a cov]$ entity n to sell or      
o!rwise transf] any ( t individual's    
p]sonal in=mation obta9$ by a cov]$     
entity to any ?ird p>ty4  7b7           
,requirem5t ,a cov]$ entity t receives a
 v]ifiable reque/ f an individual n to  
transf] t individual's p]sonal in=mation
 pursuant to subsection 7a71 %all n     
transf] t p]sonal in=mation directly or 
indirectly to a ?ird p>ty4  7c7 ,notice 
,a cov]$ entity t seeks to sell or      
transf] an individual's p]sonal         
in=mation to any ?ird p>ty %all provide 
notice z requir$ "u section             
#cee7;b77#c74  7d7 ,records ,not)/&+    
section #cec1 a cov]$ entity %all reta9 

suffici5t records1 includ+ any necess>y 
p]sonal in=mation1 to det]m9e :e!r an   
individual has direct$ ! cov]$ entity n 
to transf] t individual's data to a ?ird
 p>ty4 ,any p]sonal in=mation reta9$    
pursuant to ?is section %all n be us$ = 
any o!r purpose1 & %all be reviewable by
 ! ,commission4  7e7 ,prohibition on    
transf] ov]seas  7#a7 ,(f5se ,x %all be 
unlawful = any cov]$ entity to kn[+ly   
transf] outside ( ! ,unit$ ,/ates any   
individual's p]sonal in=mation1 publicly
 available in=mation1 or anonymiz$      
in=mation z def9$ 9 ?is subtitle4  7#b7 
,p5alty ,any p]son :o violates p>agraph 
7#a7 %all be f9$ "u title #ah1 ,unit$   
,/ates ,code1 imprison$ n m ?an #c ye>s1
 or bo?4  #cee4 ,notice ( receipt (     
vot]'s p]sonal in=mation  7a7 ,notice ,a
 cov]$ entity t receives any            
individual's p]sonal in=mation f a ?ird 
p>ty %all in=m su* individual z to !    
scope & purpose ( receiv+ su* p]sonal   
in=mation4  7b7 ,tim+ ,a cov]$ entity   
%all provide notice requir$ 9 subsection

 7a7 to an individual )9 a reasonable   
p]iod aft] receiv+ t individual's       
p]sonal in=mation1 b n lat] ?an--  7#a7 
except z provid$ 9 p>agraphs 7#b7 &     
7#c71 #cj days aft] receiv+ su*         
in=mation1 or if p]sonal in=mation is   
receiv$ 9 an anonymiz$ =mat !n #cj days 
aft] ! p]sonal in=mation is connect$ to 
an id5tifiable individual2  7#b7 if !   
p]sonal in=mation is to be us$ = a      
communication or t>get$ adv]tisem5t ) an
 individual1 at ! "t ( ! fir/           
communication ) t individual2 &  7#c7 if
 ! p]sonal in=mation is to be transf]r$ 
or sold to a ?ird p>ty1 #ad days prior  
to t transf] or sale4  7c7 ,cont5ts     
,notice requir$ "u subsection 7a7 %all  
include ! foll[+3 7#a7 ,! id5tity & !   
contact in=mation ( ! cov]$ entity4     
7#b7 ,! categories ( p]sonal in=mation  
receiv$4  7#c7 ,! purposes = :i* !      
p]sonal in=mation 0 receiv$4  7#d7 ,!   
p]iod = :i* ! p]sonal in=mation w be    
reta9$4  7#e7 ,! exi/5ce ( ! "r to      
reque/ f ! cov]$ entity access to all   

specific pieces ( p]sonal in=mation "u  
section #ceb7;f74  7#f7 ,! exi/5ce ( !  
"r ( an individual to reque/ erasure (  
all t individual's p]sonal in=mation    
obta9$ by a cov]$ entity "u section     
#cec4  7#g7 ,! exi/5ce ( ! "r ( an      
individual to prohibit ! transf] ( t    
individual's p]sonal in=mation to a ?ird
 p>ty "u section #ced4  7#h7 ,in=mation 
reg>d+ ! "r to lodge a compla9t ) !     
,commission "u section #cji7;a7 z       
describ$ 9 section #ceg reg>d+ any      
violation ( ?is subtitle4  7d7 ,=mat    
,notice requir$ "u subsection 7a7 %all  
be provid$ 9 a concise & easily         
accessible =m1 us+ cle> & pla9 language4
  7e7 ,co/ ,notice requir$ "u subsection
 7a7 %all be provid$ at no co/ to any   
individual ) respect to :om a cov]$     
entity has receiv$ p]sonal in=mation4   
7f7 ,additional notice ,a cov]$ entity  
%all n receive additional categories (  
p]sonal in=mation1 process p]sonal      
in=mation = an additional purpose1 or   
transf] p]sonal in=mation to an         

additional ?ird p>ty )\t provid+ su*    
p]sons notice consi/5t ) ?is section4   
#cef4 ,vot]'s "r to prohibit t>get+ bas$
 on p]sonal in=mation  7a7 ,9 g5]al ,an 
individual %all h ! "r to prohibit a    
t>get+ s]vice f us+ t individual's      
p]sonal in=mation to deliv] t>get$      
communications to t individual--  7#a7  
on behalf ( a cov]$ entity2 &  7#b7 on  
behalf ( all cov]$ entities4  7b7       
,requirem5t ,a t>get+ s]vice t receives 
a v]ifiable reque/ pursuant to p>agraph 
7#a7 or 7#b7 ( subsection 7a7--  7#a7   
%all imm$iately cease provid+ access1   
use1 or process+ ( t individual's       
p]sonal in=mation to any or all cov]$   
entities ) respect to :i* su* reque/ is 
made1 includ+ = use 9 deliv]+ t>get$    
communications to t individual bas$ on t
 individual's p]sonal in=mation2 &  7#b7
 %all n provide any future access1 use1 
or process+ ( t individual's p]sonal    
in=mation to any or all cov]$ entities )
 respect to :i* su* reque/ is made1     
includ+ = use 9 deliv]+ t>get$          

communications to t individual bas$ on  
_! p]sonal in=mation )\t express writt5 
p]mission f t individual4  7c7 ,notice  
7#a7 ,9 g5]al  7,a7 ,notice by cov]$    
entity ,a cov]$ entity %all provide     
notice to a t>get+ s]vice ( ! cov]$     
entity's /atus z a cov]$ entity "u ?is  
subtitle1 prior to access+1 us+1 or     
process+ any individual's p]sonal       
in=mation provid$ by ! t>get+ s]vice4   
7,b7 ,notice by t>get+ s]vice ,a t>get+ 
s]vice %all provide notice to any       
individual ^: p]sonal in=mation is      
access$1 us$1 or process$1 includ+ = use
 9 deliv]+ a t>get$ communication bas$  
on t individual's p]sonal in=mation1 by 
a cov]$ entity4  7#b7 ,cont5ts ,notice  
requir$ "u p>agraph 7#a77;,b7 %all      
include-- 7,a7 ! id5tity & ! contact    
in=mation = ! t>get+ s]vice2  7,b7 !    
id5tity & ! contact in=mation ( ! cov]$ 
entity2  7,c7 ! categories ( p]sonal    
in=mation access$1 us$1 or o!rwise made 
available to a cov]$ entity1 includ+ any
 p]sonal in=mation us$ to t>get an      

adv]tisem5t or o!r in=mation to t       
individual on behalf ( a cov]$ entity2 &
  7,d7 in=mation on ! "r ( an individual
 to prohibit a cov]$ entity or all cov]$
 entities f us+ a t>get+ s]vice to      
deliv] adv]tisem5ts or o!r in=mation to 
t individual bas$ on t individual's     
p]sonal in=mation "u ?is section4  7#c7 
,tim+ ,notice requir$ "u p>agraph       
7#a77;,b7 %all be provid$ by a t>get+   
s]vice at ! "t ( ea* t>get$             
communication ) an individual by !      
t>get+ s]vice on behalf ( a cov]$ entity
 t is bas$ on ! individual's p]sonal    
in=mation4  7#d7 ,=mat ,notice requir$  
"u p>agraph 7#a77;,b7 %all be provid$ 9 
a concise & easily accessible =m1 us+   
cle> & pla9 language4  7d7 ,confirmation
 ,a t>get+ s]vice %all provide          
confirmation ( an individual's v]ifiable
 reque/ to prohibit t>get$              
communications f a cov]$ entity or all  
cov]$ entities bas$ on t individual's   
p]sonal in=mation n lat] ?an #c days    
foll[+ receipt ( a v]ifiable reque/ f t 

individual pursuant to subsection 7a74  
7e7 ,records  7#a7 ,t>get+ s]vice ,a    
t>get+ s]vice %all ma9ta9 adequate      
records ( any individual's reque/ "u    
subsection 7a7 &1 if applicable1 any    
writt5 p]mission provid$ "u subsection  
7b77#b7 to ensure su* individuals d n   
receive t>get$ communications f a cov]$ 
entity unless su* writt5 p]mission is   
provid$4  7#b7 ,cov]$ entity ,a cov]$   
entity %all ma9ta9 records ( all notices
 provid$ to a t>get+ s]vice z requir$ "u
 subsection 7c77#a77;,a74  7#c7 ,review 
,all records requir$ "u ?is subsection  
%all be reviewable by ! ,commission4    
7f7 ,rule ( con/ruction ,no?+ 9 ?is     
section %all be int]pret$--  7#a7 to    
prohibit a cov]$ entity f us+ a t>get+  
s]vice to deliv] in=mation to an        
individual t is n bas$ on t individual's
 p]sonal in=mation2 or  7#b7 to prohibit
 a t>get+ s]vice f us+ an individual's  
p]sonal in=mation to deliv] t>get$      
communications to t individual on behalf
 ( a ?ird p>ty t is n a cov]$ entity4   

#ceg4 ,"r to lodge a compla9t ,an       
individual :o believes a violation ( ?is
 subtitle has occurr$ may file a        
compla9t ) ! ,commission pursuant to    
section #cji7;a74  #ceh4 ,en=cem5t ,any 
p]son :o kn[+ly & willfully commits a   
violation ( any provision ( ?is subtitle
 %all be f9$ "u ?is title or imprison$ n
 m ?an #c ye>s1 or bo?4  #cei4          
,commission rulemak+  7a7 ,9 g5]al ,n   
lat] ?an #ahj days aft] ! date (        
enactm5t ( ?is subtitle1 ! ,commission  
%all conduct a rulemak+ to implem5t !   
requirem5ts ( ?is subtitle1 includ+ to  
provide guidance on ! def9ition ( a     
v]ifiable reque/1 :i* w ensure          
individuals c ex]cise _! rights "u ?is  
subtitle 9 a secure mann]4  7b7 ,updat+ 
z ne$$ ,! ,commission %all produce &    
update z ne$$ guidance & regulations    
relat+ to add+ categories ( p]sonal     
in=mation = purposes ( ?is subtitle 9   
addition to ^? describ$ 9 section       
#cea7d77;,a71 9 ord] to address *anges 9
 te*nology1 data practices ( cov]$      

entities1 & privacy conc]ns4  4  7b7    
,sev]ability ,if any provision ( ?is    
,act or am5dm5t made by ?is ,act1 or !  
application ( a provision or am5dm5t to 
any p]son or circum/ance1 is held to be 
uncon/itutional1 ! rema9d] ( ?is ,act & 
am5dm5ts made by ?is ,act1 & !          
application ( ! provisions & am5dm5t to 
any p]son or circum/ance1 %all n be     
affect$ by ! hold+4  7c7 ,effective date
 ,! am5dm5ts made by ?is ,act %all apply
 ) respect to p]sonal in=mation obta9$1 
/or$1 or process$ on or aft] #cfj days  
aft] ! date ( enactm5t ( ?is ,act1 &    
%all take effect )\t reg>d to :e!r or n 
! ,f$]al ,election ,commission has      
promulgat$ regulations to c>ry out su*  
am5dm5ts4