,,ii #aaf? ,,congress #b;d ,session ,s4 #cgdi ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,may #ad1 #bjbj,mr4 ,blum5?al 7= himself & ,mr4 ,w>n]7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,heal?1 ,education1 ,labor1 & ,p5sions ,a ,,bill ,to protect ! privacy ( heal? in=mation dur+ a national heal? em]g5cy4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,public ,heal? ,em]g5cy ,privacy ,act4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,affirmative express cons5t ,! t]m affirmative express cons5t means an affirmative act by an individual t-- 7,a7 cle>ly & conspicu\sly communicates ! individual's au?orization ( an act or practice2 7,b7 is made 9 ! abs5ce ( any me*anism 9 ! us] int]face t has ! purpose or sub/antial effect ( obscur+1 subv]t+1 or impair+ decision mak+ or *oice to obta9 cons5t2 & 7,c7 _c be inf]r$ f inaction4 7#b7 ,collect ,! t]m collect1 ) respect to em]g5cy heal? data1 means obta9+ 9 any mann] by a cov]$ organization4 7#c7 ,commission ,! t]m ,commission means ! ,f$]al ,trade ,commission4 7#d7 ,cov]$ organization 7,a7 ,9 g5]al ,! t]m cov]$ organization means any p]son 7includ+ a gov]nm5t entity7-- 7i7 t collects1 uses1 or discloses em]g5cy heal? data electronically or ?r\gh communication by wire or radio2 or 7ii7 t develops or op]ates a website1 web application1 mobile application1 mobile op]at+ sy/em feature1 or sm>t device application = ! purpose ( track+1 scre5+1 monitor+1 contact trac+1 or mitigation1 or o!rwise respond+ to ! ,,covid-#ai public heal? em]g5cy4 7,b7 ,exclusions ,! t]m cov]$ organization does n include-- 7i7 a heal? c>e provid]2 7ii7 a p]son engag$ 9 a de m9imis collection or process+ ( em]g5cy heal? data2 7iii7 a s]vice provid]2 7iv7 a p]son act+ 9 _! individual or h\sehold capacity2 or 7v7 a public heal? au?ority4 7#e7 ,demographic data ,! t]m demographic data means in=mation relat+ to ! actual or p]ceiv$ race1 color1 e?nicity1 national orig91 religion1 sex1 g5d]1 g5d] id5tity1 sexual ori5tation1 age1 ,tribal affiliation1 disability1 domicile1 employm5t /atus1 familial /atus1 immigration /atus1 or vet]an /atus ( an individual or gr\p ( individuals4 7#f7 ,device ,! t]m device means any electronic equipm5t t is prim>ily design$ = or m>ket$ to consum]s4 7#g7 ,disclosure ,! t]m disclosure1 ) respect to em]g5cy heal? data1 means ! releas+1 transf]r+1 sell+1 provid+ access to1 lic5s+1 or divulg+ 9 any mann] by a cov]$ organization to a ?ird p>ty4 7#h7 ,em]g5cy heal? data ,! t]m em]g5cy heal? data means data l9k$ or reasonably l9kable to an individual or device1 includ+ data inf]r$ or d]iv$ ab\t ! individual or device f o!r collect$ data provid$ su* data is /ill l9k$ or reasonably l9kable to ! individual or device1 t conc]ns ! public ,,covid-#ai heal? em]g5cy4 ,su* data includes-- 7,a7 in=mation t reveals ! pa/1 pres5t1 or future physical or behavioral heal? or condition (1 or provision ( heal?c>e to1 an individual1 includ+-- 7i7 data d]iv$ f ! te/+ or exam9ation ( a body "p or bodily sub/ance1 or a reque/ = su* te/+2 7ii7 :e!r or n an individual has contract$ or be5 te/$ =1 or an e/imate ( ! likelihood t a p>ticul> individual may contract1 su* disease or disord]2 & 7iii7 g5etic data1 biological samples1 & biometrics2 & 7,b7 o!r data collect$ 9 conjunction ) o!r em]g5cy heal? data or = ! purpose ( track+1 scre5+1 monitor+1 contact trac+1 or mitigation1 or o!rwise respond+ to ! ,,covid-#ai public heal? em]g5cy1 includ+-- 7i7 geolocation data1 :5 su* t]m means data capable ( det]m9+ ! pa/ or pres5t precise physical location ( an individual at a specific po9t 9 "t1 tak+ acc\nt ( population d5sities1 includ+ cell-site location in=mation1 triangulation data d]iv$ f ne>by wireless or radio frequ5cy networks1 & global position+ sy/em data2 7ii7 proximity data1 :5 su* t]m means in=mation t id5tifies or e/imates ! pa/ or pres5t physical proximity ( "o individual or device to ano!r1 includ+ in=mation d]iv$ f ,bluetoo?1 audio signatures1 ne>by wireless networks1 & ne>-field communications2 7iii7 demographic data2 7iv7 contact in=mation = id5tifiable individuals or a hi/ory ( ! individual's contacts ov] a p]iod ( "t1 su* z an address book or call log2 & 7v7 any o!r data collect$ f a p]sonal device4 7#i7 ,gov]nm5t entity ,! t]m gov]nm5t entity includes a ,f$]al ag5cy1 a ,/ate1 a local gov]nm5t1 & o!r organizations1 z su* t]ms are def9$ 9 section #ccga ( title #e1 ,unit$ ,/ates ,code4 7#aj7 ,heal? c>e provid] ,! t]m heal? c>e provid] has ! mean+ giv5 ! t]m eligible heal? c>e provid] 9 title ,,viii ( division ,b ( ! ,,c>es ,act 7,public ,law #aaf-acf74 7#aa7 ,,hipaa regulations ,! t]m ,,hipaa regulations means p>ts #afj & #afd ( title #de1 ,code ( ,f$]al ,regulations4 7#ab7 ,public heal? au?ority ,! t]m public heal? au?ority means an entity t is au?oriz$ by law to collect or receive in=mation = ! purpose ( prev5t+ or controll+ disease1 injury1 or disability includ+1 b n limit$ to1 ! report+ ( disease1 injury1 vital ev5ts su* z bir? or dea?1 & ! conduct ( public heal? surveillance1 public heal? inve/igations1 & public heal? int]v5tions1 & a p]son1 su* z a designat$ ag5cy or associate1 act+ "u a grant ( au?ority f1 or "u a contract )1 su* public entity1 includ+ ! employees or ag5ts ( su* entity or its contractors or p]sons or entities to :om x has grant$ au?ority4 7#ac7 ,,covid-#ai ,public heal? em]g5cy ,! t]m ,,covid-#ai public heal? em]g5cy means ! outbreak & public heal? response p]ta9+ to ,coronavirus ,disease #bjai 7,,covid-#ai71 associat$ ) ! em]g5cy decl>$ by ! ,secret>y on ,janu>y #ca1 #bjbj1 "u section #cai ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #bdg;d71 & any r5ewals !re( & any subsequ5t decl>ations by ! ,secret>y relat$ to ! coronavirus4 7#ad7 ,secret>y ,! t]m ,secret>y means ! ,secret>y ( ,heal? & ,human ,s]vices4 7#ae7 ,s]vice provid] 7,a7 ,9 g5]al ,! t]m s]vice provid] means a p]son t collects1 uses1 or discloses em]g5cy heal? data = ! sole purpose (1 & only to ! ext5t t su* entity is1 conduct+ bus9ess activities on behalf (1 = ! b5efit (1 "u in/ruction (1 & "u contractual agreem5t ) a cov]$ organization4 7,b7 ,limitation ( application ,su* p]son %all only be consid]$ a s]vice provid] 9 ! c\rse ( activities describ$ 9 subp>agraph 7,a74 7,c7 ,exclusions ,! t]m s]vice provid] excludes a p]son t develops or op]ates a website1 web application1 mobile application1 or sm>t device application = ! purpose ( track+1 scre5+1 monitor+1 contact trac+1 or mitigation1 or o!rwise respond+ to ! ,,covid-#ai public heal? em]g5cy4 7#af7 ,/ate ,! t]m ,/ate means ea* ,/ate ( ! ,unit$ ,/ates1 ! ,di/rict ( ,columbia1 ea* commonweal?1 t]ritory1 or possession ( ! ,unit$ ,/ates1 & ea* f$]ally recogniz$ ,indian ,tribe4 7#ag7 ,?ird p>ty 7,a7 ,9 g5]al ,! t]m ?ird p>ty means1 ) respect to a cov]$ organization-- 7i7 ano!r p]son to :om su* cov]$ organization disclos$ em]g5cy heal? data2 & 7ii7 a corporate affiliate or a relat$ p>ty ( ! cov]$ organization t does n h a direct relation%ip ) an individual ) :om ! em]g5cy heal? data is l9k$ or is reasonably l9kable4 7,b7 ,exclusion ,! t]m ?ird p>ty excludes1 ) respect to a cov]$ organization-- 7i7 a s]vice provid] ( su* cov]$ organization2 or 7ii7 a public heal? au?ority4 7#ah7 ,use ,! t]m use1 ) respect to em]g5cy heal? data1 means ! process+1 employm5t1 application1 utilization1 exam9ation1 or analysis ( su* data by a cov]$ organization t ma9ta9s su* data4 #c4 ,protect+ ! privacy & security ( em]g5cy heal? data 7a7 ,"r to privacy ,a cov]$ organization t collects em]g5cy heal? data %all-- 7#a7 only collect1 use1 or disclose su* data t is necess>y1 proportionate1 & limit$ = a good fai? public heal? purpose1 includ+ a s]vice or feature to support su* a purpose2 7#b7 take reasonable measures1 :]e possible1 to ensure ! accuracy ( em]g5cy heal? data & provide an effective me*anism = an individual to correct inaccurate in=mation2 7#c7 adopt reasonable safegu>ds to prev5t unlawful discrim9ation on ! basis ( em]g5cy heal? data2 & 7#d7 only disclose su* data to a gov]nm5t entity :5 ! disclosure-- 7,a7 is to a public heal? au?ority2 & 7,b7 is made 9 solely = good fai? public heal? purposes & 9 direct response to exig5t circum/ances4 7b7 ,"r to security ,a cov]$ organization or s]vice provid] t collects1 uses1 or discloses em]g5cy heal? data %all e/abli% & implem5t reasonable data security policies1 practices1 & proc$ures to protect ! security & confid5tiality ( em]g5cy heal? data4 7c7 ,prohibit$ uses ,a cov]$ organization %all n collect1 use1 or disclose em]g5cy heal? data = any purpose n au?oriz$ "u ?is section1 includ+-- 7#a7 comm]cial adv]tis+1 recomm5dation = e-comm]ce1 or ! tra9+ ( ma*9e-le>n+ algori?ms relat$ to1 or subsequ5tly = use 91 comm]cial adv]tis+ & e-comm]ce2 7#b7 solicit+1 (f]+1 sell+1 leas+1 lic5s+1 r5t+1 adv]tis+1 m>ket+1 or o!rwise comm]cially contract+ = employm5t1 f9ance1 cr$it1 insurance1 h\s+1 or education opportunities 9 a mann] t discrim9ates or o!rwise makes opportunities unavailable on ! basis ( em]g5cy heal? data2 & 7#c7 segregat+1 discrim9at+ 91 or o!rwise mak+ unavailable ! goods1 s]vices1 facilities1 privileges1 advantages1 or accommodations ( any place ( public accommodation 7z su* t]m is def9$ 9 section #cja ( ! ,am]icans ,) ,disabilities ,act ( #aiij 7#db ,u4,s4,c4 #abaha771 except z au?oriz$ by a ,/ate or ,f$]al ,gov]nm5t entity = a public heal? purpose not)/&+ subsection 7g74 7d7 ,cons5t 7#a7 ,9 g5]al ,x %all be unlawful = a cov]$ organization to collect1 use1 or disclose em]g5cy heal? data1 unless-- 7,a7 ! individual to :om ! data p]ta9s has giv5 affirmative express cons5t to su* collection1 use1 or disclosure2 7,b7 su* collection1 use1 or disclosure is necess>y & = ! sole purpose (-- 7i7 protect+ aga9/ malici\s1 deceptive1 fraudul5t1 or illegal activity2 or 7ii7 detect+1 respond+ to1 or prev5t+ in=mation security incid5ts or ?reats2 or 7,c7 ! cov]$ organization is compell$ to d s by a legal obligation4 7#b7 ,revocation 7,a7 ,9 g5]al ,a cov]$ organization %all provide an effective me*anism = an individual to revoke cons5t aft] x is giv54 7,b7 ,effect ,aft] an individual revokes cons5t1 ! cov]$ organization %all cease collect+1 us+1 or disclos+ ! individual's em]g5cy heal? data z soon z practicable1 b 9 no case lat] ?an #ae days aft] ! receipt ( ! individual's revocation ( cons5t4 7,c7 ,de/ruction ,n lat] ?an #cj days aft] ! receipt ( an individual's revocation ( cons5t1 a cov]$ organization %all de/roy or r5d] n l9kable t individuals em]g5cy heal? data "u ! same proc$ures 9 subsection 7f74 7e7 ,notice ,a cov]$ organization t collects1 uses1 or discloses em]g5cy heal? data %all provide to an individual a privacy policy t-- 7#a7 is disclos$ 9 a cle> & conspicu\s mann]1 9 ! language 9 :i* ! individual typically int]acts ) ! cov]$ organization1 prior to or at ! po9t ( ! collection ( em]g5cy heal? data2 7#b7 describes h[ & = :at purposes ! cov]$ organization collects1 uses1 & discloses em]g5cy heal? data1 includ+ ! categories ( recipi5ts to :om x discloses data & ! purpose ( disclosure = ea* category2 7#c7 describes ! cov]$ organization's data ret5tion & data security policies & practices = em]g5cy heal? data2 & 7#d7 describes h[ an individual may ex]cise ! rights "u ?is ,act & h[ to contact ! ,commission to file a compla9t4 7f7 ,public report+ 7#a7 ,9 g5]al ,a cov]$ organization t collects1 uses1 or discloses em]g5cy heal? data ( at lea/ #ajj1jjj individuals %all1 at lea/ once e #ij days1 issue a public report-- 7,a7 /at+ 9 aggregate t]ms ! numb] ( individuals ^: em]g5cy heal? data ! cov]$ organization collect$1 us$1 or disclos$ to ! ext5t practicable2 & 7,b7 describ+ ! categories ( em]g5cy heal? data collect$1 us$1 or disclos$1 ! purposes = :i* ea* su* category ( em]g5cy heal? data 0 collect$1 us$1 or disclos$1 & ! categories ( ?ird p>ties to :om x 0 disclos$4 7#b7 ,rules ( con/ruction ,no?+ 9 ?is subsection %all be con/ru$ to require a cov]$ organization to-- 7,a7 take an action t w\ld conv]t data t is n em]g5cy heal? data into em]g5cy heal? data2 7,b7 collect or ma9ta9 em]g5cy heal? data t ! cov]$ organization w\ld o!rwise n ma9ta92 or 7,c7 ma9ta9 em]g5cy heal? data long] ?an ! cov]$ organization w\ld o!rwise ma9ta9 su* data4 7g7 ,requir$ data de/ruction 7#a7 ,9 g5]al ,a cov]$ organization may n use or ma9ta9 em]g5cy heal? data ( an individual aft] ! lat] (-- 7,a7 ! date t is #fj days aft] ! t]m9ation ( ! public heal? em]g5cy decl>$ by ! ,secret>y on ,janu>y #ca1 #bjbj1 p]ta9+ to ,coronavirus ,disease #bjai 7,,covid-#ai7 "u section #cai ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #bdg;d7 & any r5ewals !re(2 7,b7 ! date t is #fj days aft] ! t]m9ation ( a public heal? em]g5cy decl>$ by a gov]nor or *ief executive ( a ,/ate p]ta9+ to ,coronavirus ,disease #bjai 7,,covid-#ai7 9 :i* ! individual resides2 or 7,c7 #fj days aft] collection4 7#b7 ,requirem5t ,= ! requirem5ts "u p>agraph 7#a71 data %all be de/roy$ or r5d]$ n l9kable 9 su* a mann] t x is impossible or demon/rably impracticable to id5tify any individual f ! data4 7#c7 ,relation to c]ta9 requirem5ts ,! provisions ( ?is subsection %all n sup]s$e any requirem5ts or au?orizations "u-- 7,a7 ! ,privacy ,act ( #aigd 7,public ,law #ic-gi72 7,b7 ! ,,hippa regulations2 or 7,c7 ,f$]al or ,/ate m$ical records ret5tion & heal? privacy laws or regulations1 or o!r applicable ,f$]al or ,/ate laws4 7h7 ,em]g5cy data collect$1 us$1 or disclos$ be=e enactm5t 7#a7 ,initiat+ a rulemak+ ,n lat] ?an #g days aft] ! date ( enactm5t ( ?is ,act1 ! ,commission %all initiate a public rulemak+ to promulgate regulations to ensure a cov]$ organization t has collect$1 us$1 or disclos$ em]g5cy heal? data be=e ! date ( enactm5t ( ?is ,act is 9 compliance ) ?is ,act1 to ! degree practicable4 7#b7 ,complet+ a rulemak+ ,! ,commission %all complete ! rulemak+ )9 #de days aft] ! date ( enactm5t ( ?is ,act4 7i7 ,non-,application to manual contact trac+ & case inve/igation ,no?+ 9 ?is ,act %all be con/ru$ to limit or prohibit a public heal? au?ority f adm9i/]+ programs or activities to id5tify individuals :o h contract$1 or may h be5 expos$ to1 ,,covid-#ai ?r\gh int]views1 outrea*1 case inve/igation1 & o!r recogniz$ inve/igatory measures by a public heal? au?ority or _! designat$ ag5t by a public heal? au?ority or _! designat$ ag5t int5d$ to monitor & mitigate ! transmission ( a disease or disord]4 7j7 ,rese>* & developm5t ,?is section %all n be con/ru$ to prohibit-- 7#a7 public heal? or sci5tific rese>* associat$ ) ! ,,covid-#ai public heal? em]g5cy by-- 7,a7 a public heal? au?ority2 7,b7 a nonpr(it organization1 z describ$ 9 section #eja7;c77#c7 ( ! ,int]nal ,rev5ue ,code ( #aihf2 or 7,c7 an in/itution ( high] education1 z su* t]m is def9$ 9 section #aja ( ! ,high] ,education ,act ( #aife 7#bj ,u4,s4,c4 #ajja72 or 7#b7 rese>*1 developm5t1 manufacture1 or di/ribution ( a drug1 biological product1 or vacc9e t relates to a disease or disord] t is associat$ or pot5tially associat$ ) a public heal? em]g5cy4 7k7 ,legal requirem5ts ,not)/&+ subsection 7a77#e71 no?+ 9 ?is ,act %all be con/ru$ to prohibit a good fai? response to1 or compliance )1 o!rwise valid subpo5as1 c\rt ord]s1 or o!r legal processes1 or to prohibit /orage or provid+ in=mation z o!rwise requir$ by law4 7l7 ,application to ,,hipaa cov]$ entities 7#a7 ,9 g5]al ,?is ,act does n apply to a cov]$ entity or a p]son act+ z a bus9ess associate "u ! ,,hipaa regulations 7to ! ext5t t su* entities or associates are act+ 9 su* capacity7 or any heal? c>e provid]4 7#b7 ,guidance = consi/5cy ,n lat] ?an #cj days aft] ! date ( enactm5t ( ?is ,act1 ! ,secret>y %all promulgate guidance on ! applicability ( requirem5ts1 simil> to ^? 9 ?is section to cov]$ entities & p]sons act+ z bus9ess associates "u ! ,,hipaa regulations4 ,9 promulgat+ su* guidance1 ! ,secret>y %all r$uce duplication ( requirem5ts & may exclude a requirem5t ( ?is section if su* requirem5t is already a requirem5t ( ! ,,hipaa regulations4 #d4 ,protect+ ! "r to vote 7a7 ,9 g5]al ,a gov]nm5t entity may n1 & a cov]$ organization may n kn[+ly facilitate1 on ! basis ( an individual's em]g5cy heal? data1 m$ical condition1 or p>ticipation or non-p>ticipation 9 a program to collect em]g5cy heal? data-- 7#a7 d5y1 re/rict1 or int]f]e ) ! "r to vote 9 a ,f$]al1 ,/ate1 or local election2 7#b7 attempt to d5y1 re/rict1 or int]f]e ) ! "r to vote 9 a ,f$]al1 ,/ate1 or local election2 or 7#c7 retaliate aga9/ an individual = vot+ 9 a ,f$]al1 ,/ate1 or local election4 7b7 ,civil action ,9 ! case ( any violation ( subsection 7a71 an individual may br+ a civil action to obta9 appropriate relief aga9/ a gov]nm5t entity 9 a ,f$]al di/rict c\rt4 #e4 ,reports on civil rights impacts 7a7 ,report requir$ ,! ,secret>y1 9 consultation ) ! ,unit$ ,/ates ,commission on ,civil ,rights & ! ,commission1 %all prep>e & submit to ,congress reports t exam9es ! civil rights impact ( ! collection1 use1 & disclosure ( heal? in=mation 9 response to ! ,,covid-#ai public heal? em]g5cy4 7b7 ,scope ( report ,ea* report requir$ "u subsection 7a7 %all1 at a m9imum-- 7#a7 evaluate ! impact ( su* practices on civil rights & protections = individuals bas$ on race1 color1 e?nicity1 national orig91 religion1 sex1 g5d]1 g5d] id5tity1 sexual ori5tation1 age1 ,tribal affiliation1 disability1 domicile1 employm5t /atus1 familial /atus1 immigration /atus1 or vet]an /atus2 7#b7 analyze ! impact1 risks1 co/s1 legal consid]ations1 disp>ate impacts1 & o!r implications to civil rights ( policies to inc5tivize or require ! adoption ( digital tools or apps us$ = contact trac+1 exposure notification1 or heal? monitor+2 & 7#c7 include recomm5dations on prev5t+ & address+ undue or disp>ate impact1 segregation1 discrim9ation1 or infr+em5ts ( civil rights 9 ! collection & use ( heal? in=mation1 includ+ dur+ a national heal? em]g5cy4 7c7 ,tim+ 7#a7 ,initial report ,! ,secret>y %all submit an initial report "u subsection 7a7 n soon] ?an #i mon?s1 & n lat] ?an #ab mon?s aft] ! date ( enactm5t ( ?is ,act4 7#b7 ,subsequ5t reports ,! ,secret>y %all submit reports annually aft] ! initial report requir$ "u p>agraph 7#a7 until #a ye> aft] ! t]m9ation ( any public heal? em]g5cy p]ta9+ to ,coronavirus ,disease #bjai 7,,covid-#ai7 "u section #cai ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #bdg;d74 #f4 ,en=cem5t 7a7 ,f$]al ,trade ,commission 7#a7 ,unfair or deceptive acts or practices ,a violation ( ?is ,act or a regulation promulgat$ "u ?is ,act %all be treat$ z a violation ( a rule def9+ an unfair or deceptive act or practice "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b77 reg>d+ unfair or deceptive acts or practices4 7#b7 ,p[]s ( ,commission ,! ,commission %all en=ce ?is ,act & ! regulations promulgat$ "u ?is ,act 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is ,act4 ,any p]son :o violates ?is ,act or a regulation promulgat$ "u ?is ,act %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act4 ,provid$1 h[ev]1 t1 not)/&+ ! requirem5ts ( section #af7;a7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #ef7;a771 ! ,commission %all h ! exclusive au?ority to comm5ce or def5d1 & sup]vise ! litigation (1 any action = a violation ( ?is ,act or a regulation promulgat$ "u ?is ,act & any appeal ( su* action 9 its own "n by any ( its attorneys designat$ by x = su* purpose1 )\t fir/ ref]r+ ! matt] to ! ,attorney ,g5]al4 7#c7 ,rulemak+ au?ority 7,a7 ,9 g5]al ,! ,commission %all h au?ority "u section #eec ( title #e1 ,unit$ ,/ates ,code1 to promulgate any regulations necess>y to implem5t ?is ,act4 7,b7 ,consultation ,9 promulgat+ any regulations "u ?is ,act1 ! ,commission %all consult ) ! ,secret>y4 7#d7 ,common c>ri]s & nonpr(it organizations ,not)/&+ section #d1 #e7;a77#b71 or #f ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #dd2 #de7;a77#b72 #df7 or any jurisdictional limitation ( ! ,commission1 ! ,commission %all also en=ce ?is ,act1 9 ! same mann] provid$ 9 p>agraphs 7#a7 & 7#b7 ( ?is p>agraph1 ) respect to-- 7,a7 common c>ri]s subject to ! ,acts to regulate comm]ce1 air c>ri]s1 & =eign air c>ri]s subject to "p ,a ( subtitle ,,vii ( title #di1 & p]sons1 p>tn]%ips1 or corporations ins(> z !y are subject to ! ,pack]s & ,/ocky>ds ,act1 #aiba 7#g ,u4,s4,c4 #aha et seq471 except z provid$ 9 section #djf7;b7 ( su* ,act 7#g ,u4,s4,c4 #bbg7;b772 & 7,b7 organizations n organiz$ to c>ry on bus9ess = _! own pr(it or t ( _! memb]s4 7b7 ,en=cem5t by ,/ates 7#a7 ,9 g5]al ,9 any case 9 :i* ! attorney g5]al ( a ,/ate has reason to believe t an int]e/ ( ! resid5ts ( ! ,/ate has be5 or is ?reat5$ or adv]sely affect$ by ! engagem5t ( any p]son subject to ?is ,act 9 a practice t violates su* subsection1 ! attorney g5]al ( ! ,/ate may1 z p>5s patriae1 br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to obta9 appropriate relief4 7#b7 ,rights ( ! ,f$]al ,trade ,commission 7,a7 ,notice to ,f$]al ,trade ,commission 7i7 ,9 g5]al ,except z provid$ 9 clause 7iii71 ! attorney g5]al ( a ,/ate %all notify ! ,commission 9 writ+ t ! attorney g5]al int5ds to br+ a civil action "u p>agraph 7#a7 be=e initiat+ ! civil action aga9/ a p]son subject to ?is ,act4 7ii7 ,cont5ts ,! notification requir$ by clause 7i7 ) respect to a civil action %all include a copy ( ! compla9t to be fil$ to initiate ! civil action4 7iii7 ,exception ,if x is n feasible = ! attorney g5]al ( a ,/ate to provide ! notification requir$ by clause 7i7 be=e initiat+ a civil action "u p>agraph 7#a71 ! attorney g5]al %all notify ! ,commission imm$iately ^u in/itut+ ! civil action4 7,b7 ,int]v5tion by ! ,f$]al ,trade ,commission ,! ,commission may-- 7i7 int]v5e 9 any civil action br\ght by ! attorney g5]al ( a ,/ate "u p>agraph 7#a72 & 7ii7 ^u int]v5+-- 7,i7 be he>d on all matt]s aris+ 9 ! civil action2 & 7,,ii7 file petitions = appeal ( a decision 9 ! civil action4 7,c7 ,inve/igatory p[]s ,no?+ 9 ?is subsection may be con/ru$ to prev5t ! attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on ! attorney g5]al by ! laws ( ! ,/ate to conduct inve/igations1 to adm9i/] oa?s or affirmations1 or to compel ! att5dance ( witnesses or ! production ( docum5t>y or o!r evid5ce4 7#c7 ,action by ! ,f$]al ,trade ,commission ,if ! ,commission in/itutes a civil action ) respect to a violation ( ?is ,act1 ! attorney g5]al ( a ,/ate may n1 dur+ ! p5d5cy ( su* action1 br+ a civil action "u p>agraph 7#a7 ( ?is subsection aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = ! violation ) respect to :i* ! ,commission in/itut$ su* action4 7#d7 ,v5ue2 s]vice ( process 7,a7 ,v5ue ,any action br\ght "u p>agraph 7#a7 may be br\ght 9-- 7i7 ! di/rict c\rt ( ! ,unit$ ,/ates t meets applicable requirem5ts relat+ to v5ue "u section #acia ( title #bh1 ,unit$ ,/ates ,code2 or 7ii7 ano!r c\rt ( compet5t jurisdiction4 7,b7 ,s]vice ( process ,9 an action br\ght "u p>agraph 7#a71 process may be s]v$ 9 any di/rict 9 :i* ! def5dant-- 7i7 is an inhabitant2 or 7ii7 may be f\nd4 7,c7 ,actions by o!r ,/ate (ficials 7i7 ,9 g5]al ,9 addition to civil actions br\ght by attorneys g5]al "u p>agraph 7#a71 any o!r (fic] ( a ,/ate :o is au?oriz$ by ! ,/ate to d s may br+ a civil action "u p>agraph 7#a71 subject to ! same requirem5ts & limitations t apply "u ?is subsection to civil actions br\ght by attorneys g5]al4 7ii7 ,sav+s provision ,no?+ 9 ?is subsection may be con/ru$ to prohibit an au?oriz$ (ficial ( a ,/ate f initiat+ or cont9u+ any proce$+ 9 a c\rt ( ! ,/ate = a violation ( any civil or crim9al law ( ! ,/ate4 7c7 ,private "r ( action 7#a7 ,en=cem5t by individuals 7,a7 ,9 g5]al ,any individual alleg+ a violation ( ?is ,act may br+ a civil action 9 any c\rt ( compet5t jurisdiction1 ,/ate or ,f$]al4 7,b7 ,relief ,9 a civil action br\ght "u p>agraph 7#a7 9 :i* ! pla9tiff prevails1 ! c\rt may aw>d-- 7i7 an am\nt n less ?an #ajj & n great] ?an #a1jjj p] violation aga9/ any p]son :o neglig5tly violates a provision ( ?is ,act2 7ii7 an am\nt n less ?an #ejj & n great] ?an #e1jjj p] violation aga9/ any p]son :o recklessly1 willfully1 or int5tionally violates a provision ( ?is ,act2 7iii7 reasonable attorney's fees & litigation co/s2 & 7iv7 any o!r relief1 includ+ equitable or decl>atory relief1 t ! c\rt det]m9es appropriate4 7,c7 ,injury 9 fact ,a violation ( ?is ,act ) respect to ! em]g5cy heal? data ( an individual con/itutes a concrete & p>ticul>iz$ injury 9 fact to t individual4 7#b7 ,invalidity ( pre-dispute arbitration agreem5ts & pre-dispute jo9t action waiv]s 7,a7 ,9 g5]al ,not)/&+ any o!r provision ( law1 no pre-dispute arbitration agreem5t or pre-dispute jo9t action waiv] %all be valid or en=ceable ) respect to a dispute aris+ "u ?is ,act4 7,b7 ,applicability ,any det]m9ation z to :e!r or h[ ?is subsection applies to any dispute %all be made by a c\rt1 r ?an an arbitrator1 )\t reg>d to :e!r su* agreem5t purports to delegate su* det]m9ation to an arbitrator4 7,c7 ,def9itions ,9 ?is subsection3 7i7 ,! t]m pre-dispute arbitration agreem5t means any agreem5t to arbitrate a dispute t has n aris5 at ! "t ( mak+ ! agreem5t4 7ii7 ,! t]m pre-dispute jo9t-action waiv] means an agreem5t1 :e!r or n "p ( a pre-dispute arbitration agreem5t1 t w\ld prohibit1 or waive ! "r (1 "o ( ! p>ties to ! agreem5t to p>ticipate 9 a jo9t1 class1 or collective action 9 a judicial1 arbitral1 adm9i/ration1 or o!r =um1 conc]n+ a dispute t has n yet aris5 at ! "t ( mak+ ! agreem5t4 7iii7 ,! t]m dispute means any claim relat$ to an alleg$ violation ( ?is ,act & betwe5 an individual & a cov]$ organization4 #g4 ,nonpreemption ,no?+ 9 ?is ,act %all preempt or sup]s$e1 or be int]pret$ to preempt or sup]s$e1 any ,f$]al or ,/ate law or regulation1 or limit ! au?ority ( ! ,commission or ! ,secret>y "u any o!r provision ( law4 #h4 ,effective date 7a7 ,9 g5]al ,?is ,act %all apply beg9n+ on ! date t is #cj days aft] ! date ( enactm5t ( ?is ,act4 7b7 ,au?ority ,to promulgate regulations & take c]ta9 o!r actions ,no?+ 9 subsection 7a7 affects-- 7#a7 ! au?ority ( any p]son to take an action expressly requir$ by a provision ( ?is ,act be=e ! effective date describ$ 9 su* subsection2 or 7#b7 ! au?ority ( ! ,commission to promulgate regulations to implem5t ?is ,act or beg9 a rulemak+ to promulgate su* regulations4