,i #aag? ,,congress #b;d ,session ,h4 ,r4 #fgeb ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,febru>y #ae1 #bjbb ,mrs4 ,trahan introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,en]gy & ,comm]ce ,a ,,bill ,to e/abli% a c5traliz$ sy/em to all[ individuals to reque/ ! simultane\s deletion ( _! p]sonal id5tifi]s across c]ta9 data brok]s1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,data ,elim9ation & ,limit+ ,ext5sive ,track+ & ,ex*ange ,act or ! ,,delete ,act4 #b4 ,data deletion requirem5ts 7a7 ,data brok] annual regi/ration 7#a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is section1 ! ,commission %all promulgate regulations to require any data brok] to-- 7,a7 n lat] ?an #ah mon?s aft] ! date ( enactm5t ( ?is section1 & annually !reaft]1 regi/] ) ! ,commission2 & 7,b7 provide ! foll[+ in=mation ) su* regi/ration3 7i7 ,! "n & prim>y physical1 email1 & uni=m res\rce locator 7,,url7 addresses ( ! data brok]4 7ii7 ,if ! data brok] p]mits an individual to opt out ( ! data brok]'s collection or use ( p]sonal in=mation1 c]ta9 sales ( su* in=mation1 or its databases-- 7,i7 ! me?od = reque/+ an opt-out2 7,,ii7 any limitations on ! type ( data collection1 uses1 or sales = :i* an individual may opt out2 & 7,,iii7 :e!r ! data brok] p]mits an individual to au?orize a ?ird p>ty to p]=m ! opt-out on ! individual's behalf4 7iii7 ,a response to a /&>diz$ =m 7z issu$ by ! ,commission7 specify+ ! types ( in=mation ! data brok] collects or obta9s & ! s\rces f :i* ! data brok] obta9s data4 7iv7 ,a /atem5t z to :e!r ! data brok] implem5ts a cr$5tial+ process &1 if s1 a description ( t process4 7v7 ,any additional in=mation or explanation ! data brok] *ooses to provide conc]n+ its data collection practices4 7vi7 ,any o!r in=mation det]m9$ appropriate by ! ,commission4 7#b7 ,public availability 7,a7 ,9 g5]al ,! ,commission %all make ! in=mation describ$ 9 p>agraph 7#a7 publicly available 9 a d[nloadable & ma*9e-readable =mat1 except 9 ! ev5t t ! ,commission-- 7i7 det]m9es t ! risk ( mak+ su* in=mation available is n 9 ! int]e/ ( public safety or welf>e2 & 7ii7 provides a ju/ification = su* det]m9ation4 7,b7 ,disclaim] ,! ,commission %all include on ! website ( ! ,commission a disclaim] t-- 7i7 ! ,commission _c confirm ! accuracy ( ! responses provid$ by ! data brok]s 9 ! regi/ration describ$ 9 p>agraph 7#a72 & 7ii7 individuals may contact su* data brok]s at _! own risk4 7b7 ,c5traliz$ data deletion sy/em 7#a7 ,e/abli%m5t 7,a7 ,9 g5]al ,n lat] ?an #a ye> aft] ! date ( enactm5t ( ?is section1 ! ,commission %all promulgate regulations to e/abli% a c5traliz$ sy/em t-- 7i7 implem5ts & ma9ta9s reasonable security proc$ures & practices 7includ+ adm9i/rative1 physical1 & te*nical safegu>ds7 appropriate to ! nature ( ! in=mation & ! purposes = :i* ! p]sonal in=mation w be us$1 to protect individuals' p]sonal in=mation f unau?oriz$ use1 disclosure1 access1 de/ruction1 or modification2 & 7ii7 all[s an individual1 ?r\gh a s+le submission1 to reque/ t e data brok] :o is regi/]$ "u subsection 7a7 & :o ma9ta9s any p]si/5t id5tifi]s 7z describ$ 9 subp>agraph 7,b77iii77 delete any p]sonal in=mation relat$ to su* individual held by su* data brok] or affiliat$ legal entity ( ! data brok]4 7,b7 ,requirem5ts ,! c5traliz$ sy/em e/abli%$ 9 subp>agraph 7,a7 %all meet ! foll[+ requirem5ts3 7i7 ,subject to ! regulations promulgat$ 9 accordance ) p>agraph 7#b77;,b77ii71 ! c5traliz$ sy/em %all all[ an individual to reque/ ! deletion ( all p]sonal in=mation relat$ to su* individual ?r\gh a s+le deletion reque/4 7ii7 ,! c5traliz$ sy/em %all provide a /&>diz$ =m to all[ an individual to make su* reque/4 7iii7 ,su* /&>diz$ =m %all include ! individual's email1 phone numb]1 physical address1 & any o!r p]si/5t id5tifi] det]m9$ by ! ,commission to aid 9 ! deletion reque/4 7iv7 ,! c5traliz$ sy/em %all automatically ha% all submitt$ in=mation & all[ ! ,commission to ma9ta9 indep5d5t ha%$ regi/ries ( ea* type ( in=mation obta9$ ?r\gh su* =m4 7v7 ,! c5traliz$ sy/em %all only p]mit data brok]s :o are regi/]$ ) ! ,commission to submit ha%$ qu]ies to ! indep5d5t ha%$ regi/ries describ$ 9 clause 7iv74 7vi7 ,! c5traliz$ sy/em %all all[ an individual to make su* reque/ us+ an int]net website op]at$ by ! ,commission4 7vii7 ,! c5traliz$ sy/em %all n *>ge ! individual to make su* reque/4 7viii7 ,! c5traliz$ sy/em %all automatically delete any individual data field /or$ 9 ! sy/em once su* data field has be5 /or$ 9 ! c5traliz$ sy/em = #b ye>s4 ,! ,commission %all in=m ! individual ( ?is automatic deletion p]iod :5 ! individual makes a deletion reque/4 ,beg9n+ #d ye>s aft] ! date ( enactm5t ( ?is ,act1 ! ,commission may promulgate rules to adju/ su* ret5tion p]iod or enable automatic r5ewal ( reque/s if x det]m9es t su* adju/m5t or automatic r5ewal w\ld bett] protect individual privacy or ! public int]e/4 7,c7 ,transition 7i7 ,9 g5]al ,n lat] ?an #h mon?s aft] ! effective date ( ! regulations promulgat$ "u subp>agraph 7,a71 ea* data brok] %all-- 7,i7 n less ?an once e #ca days1 access ! ha%$ regi/ries ma9ta9$ by ! ,commission z describ$ 9 subp>agraph 7,b77iv72 & 7,,ii7 process any deletion reque/ associat$ ) a mat* betwe5 su* ha%$ regi/ries & ! records ( ! data brok]4 7ii7 ,,ftc guidance ,n lat] ?an #f mon?s aft] ! effective date ( ! regulations promulgat$ "u subp>agraph 7,a71 ! ,commission %all publi% guidance on ! process & /&>ds to :i* a data brok] mu/ adh]e 9 c>ry+ out clause 7i74 7#b7 ,deletion 7,a7 ,in=mation deletion 7i7 ,9 g5]al ,subject to clause 7ii71 n lat] ?an #ca days aft] access+ ! ha%$ regi/ries describ$ 9 p>agraph 7#a77;,b77iv71 a data brok] & any associat$ legal entity %all delete all p]sonal in=mation 9 its possession relat$ to ! individual mak+ ! reque/4 ,imm$iately foll[+ ! deletion1 ! data brok] %all s5d an affirmative repres5tation to ! ,commission ) ! numb] ( records delet$ pursuant to ea* mat* ) a value 9 ! ha%$ regi/ries4 7ii7 ,exclusions ,9 c>ry+ out clause 7i71 a data brok] may reta91 :]e requir$1 ! foll[+ in=mation3 7,i7 ,any p]sonal in=mation t is process$ or ma9ta9$ solely z "p ( human subjects rese>* conduct$ 9 compliance ) any legal requirem5ts = ! protection ( human subjects4 7,,ii7 ,any p]sonal in=mation necess>y to comply ) a w>rant1 subpo5a1 c\rt ord]1 rule1 or o!r applicable law4 7,,iii7 ,any p]sonal in=mation relat$ to ! suppression li/ describ$ 9 subp>agraph 7,b77ii74 7,,iv7 ,any in=mation necess>y = an activity describ$ 9 subsection 7e77#c77;,b71 provid$ t ! reta9$ in=mation is us$ solely = any su* activity4 7iii7 ,use ( in=mation ,any p]sonal in=mation exclud$ "u clause 7ii7 may only be us$ = ! purpose describ$ 9 ! applicable subclause ( clause 7ii71 & may n be us$ = any o!r purpose1 includ+ m>ket+ purposes4 7,b7 ,d ,n ,track li/2 suppression li/ 7i7 ,d ,n ,track li/ ,n lat] ?an #ah mon?s aft] ! date ( enactm5t ( ?is section1 ! ,commission %all promulgate regulations to prohibit any data brok] regi/]$ "u subsection 7a7 f collect+ or reta9+ p]sonal in=mation on any individual :o has submitt$ a deletion reque/ ?r\gh ! c5traliz$ sy/em e/abli%$ 9 p>agraph 7#a77;,a71 unless su* data collection is reque/$ by ! individual4 7ii7 ,suppression li/ ,n lat] ?an #ah mon?s aft] ! date ( enactm5t ( ?is section1 ! ,commission %all promulgate regulations to ensure t-- 7,i7 any individual :o submits a deletion reque/ ?r\gh ! c5traliz$ sy/em e/abli%$ 9 p>agraph 7#a7 %all be includ$ on ! ,d ,n ,track li/ describ$ 9 clause 7i72 & 7,,ii7 ea* data brok] regi/]$ "u subsection 7a7-- 7aa7 may n collect or reta9 m p]sonal in=mation ?an is necess>y to id5tify an individual :o is includ$ on ! ,d ,n ,track li/2 & 7bb7 9 ! case t unnecess>y p]sonal in=mation is collect$ or reta9$1 %all imm$iately delete any p]sonal in=mation n requir$ to comply ) ! regulations promulgat$ "u ?is subp>agraph4 7,c7 ,annual report ,ea* data brok] regi/]$ "u subsection 7a7 %all submit to ! ,commission1 on an annual basis1 a report on-- 7i7 ! completion rate ) respect to ! completion ( deletion reque/s "u subp>agraph 7,a72 & 7ii7 ! effectiv5ess ( ! suppression li/ "u subp>agraph 7,b77ii71 includ+-- 7,i7 ! numb] ( times ! data brok] collect$ p]sonal in=mation relat$ to an individual includ$ on ! suppression li/2 7,,ii7 ! numb] ( times ! data brok] collect$ data result+ 9 a mat* ) ! ha%$ regi/ries ma9ta9$ by ! ,commission z describ$ 9 p>agraph 7#a77;,b77iv72 & 7,,iii7 :e!r ! regulations promulgat$ "u subp>agraph 7,b7 & ! /ructure or =mat ( ! ha%$ regi/ries promote effici5t comp>ison ( ! suppression li/ ) in=mation collect$ or reta9$ by ! data brok]4 7,d7 ,audit 7i7 ,9 g5]al ,n lat] ?an #c ye>s aft] ! date ( enactm5t ( ?is section1 & e #c ye>s !reaft]1 ea* data brok] regi/]$ "u subsection 7a7 %all und]go an indep5d5t ?ird p>ty audit to det]m9e compliance ) ?is subsection4 7ii7 ,audit report ,n lat] ?an #f mon?s aft] ! completion ( any audit "u clause 7i71 ea* su* data brok] %all submit to ! ,commission any report produc$ z a result ( ! audit1 along ) any relat$ mat]ials4 7iii7 ,ma9ta9 records ,ea* su* data brok] %all ma9ta9 ! mat]ials describ$ 9 clause 7ii7 = a p]iod ( n less ?an #f ye>s4 7#c7 ,annual fee 7,a7 ,9 g5]al ,subject to subp>agraph 7,b71 ea* data brok] regi/]$ "u subsection 7a7 & :o ma9ta9s any p]si/5t id5tifi]s 7z describ$ 9 p>agraph 7#a77;,b77iii77 %all pay to ! ,commission1 on an annual basis1 a subscription fee det]m9$ by ! ,commission to access ! database4 7,b7 ,limit ,! am\nt ( ! subscription fee "u subp>agraph 7,a7 may n exce$ #a p]c5t ( ! expect$ annual co/ ( op]at+ ! c5traliz$ sy/em & ha%$ regi/ries describ$ 9 p>agraph 7#a71 z det]m9$ by ! ,commission4 7,c7 ,availability ,any am\nts collect$ by ! ,commission pursuant to ?is p>agraph %all be available )\t fur!r appropriation to ! ,commission = ! purpose ( en=c+ & adm9i/]+ ?is ,act1 includ+ ! implem5tation & ma9t5ance ( su* c5traliz$ sy/em & ha%$ regi/ries & ! promotion ( public aw>5ess ( ! c5traliz$ sy/em4 7c7 ,en=cem5t by ! ,commission 7#a7 ,unfair or deceptive acts or practices ,a violation ( subsection 7a7 or 7b7 or a regulation promulgat$ "u ?is ,act %all be treat$ z a violation ( a rule def9+ an unfair or deceptive act or practice "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b774 7#b7 ,p[]s ( ! ,commission 7,a7 ,9 g5]al ,! ,commission %all en=ce ?is section 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is ,act4 7,b7 ,privileges & immunities ,any p]son :o violates subsection 7a7 or 7b7 or a regulation promulgat$ "u ?is ,act %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7,c7 ,au?ority pres]v$ ,no?+ 9 ?is section %all be con/ru$ to limit ! au?ority ( ! ,commission "u any o!r provision ( law4 7,d7 ,rulemak+ ,! ,commission %all promulgate 9 accordance ) section #eec ( title #e1 ,unit$ ,/ates ,code1 su* rules z may be necess>y to c>ry out ?is section4 7d7 ,/udy & report 7#a7 ,/udy ,! ,commission %all conduct a /udy on ! implem5tation & en=cem5t ( ?is section4 ,su* /udy %all include-- 7,a7 an analysis ( ! effectiv5ess ( ! c5traliz$ sy/em e/abli%$ 9 subsection 7b77#a77;,a72 7,b7 ! numb] deletion reque/s submitt$ annually us+ su* c5traliz$ sy/em2 7,c7 an analysis ( ! progress ( coord9at+ ! op]ation & en=cem5t ( su* reque/s ) simil> sy/ems e/abli%$ & ma9ta9$ by ! v>i\s ,/ates2 & 7,d7 any o!r area det]m9$ appropriate by ! ,commission4 7#b7 ,report ,n lat] ?an #c ye>s aft] ! date ( enactm5t ( ?is section1 & annually !reaft] = ea* ( ! next #d ye>s1 ! ,commission %all submit to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ( ! ,s5ate & ! ,committee on ,en]gy & ,comm]ce ( ! ,h\se ( ,repres5tatives a report conta9+-- 7,a7 ! results ( ! /udy conduct$ "u p>agraph 7#a72 7,b7 a summ>y ( any en=cem5t actions tak5 pursuant to ?is ,act2 & 7,c7 recomm5dations = su* legislation & adm9i/rative action z ! ,commission det]m9es appropriate4 7e7 ,def9itions ,9 ?is section3 7#a7 ,commission ,! t]m ,commission means ! ,f$]al ,trade ,commission4 7#b7 ,cr$5tial+ process ,! t]m cr$5tial+ process means ! practice ( tak+ reasonable /eps to confirm-- 7,a7 ! id5tity ( ! entity ) :om ! data brok] has a direct relation%ip2 7,b7 t any data disclos$ to ! entity by su* data brok] w be us$ = ! describ$ purpose ( su* disclosure2 & 7,c7 t su* data w n be us$ = unlawful purposes4 7#c7 ,data brok] 7,a7 ,9 g5]al ,! t]m data brok] means an entity t kn[+ly collects or obta9s ! p]sonal in=mation ( an individual ) :om ! entity does n h a direct relation%ip & !n-- 7i7 uses ! p]sonal in=mation to p]=m a s]vice = a ?ird p>ty2 or 7ii7 sells1 lic5ses1 trades1 provides = consid]ation1 or is o!rwise comp5sat$ = disclos+ p]sonal in=mation to a ?ird p>ty4 7,b7 ,exclusion ,! t]m data brok] does n include an entity :o solely uses1 sells1 lic5ses1 trades1 provides = consid]ation1 or is o!rwise comp5sat$ = disclos+ p]sonal in=mation = "o or m ( ! foll[+ activities3 7i7 ,provid+ #daa directory assi/ance or directory in=mation s]vices1 includ+ "n1 address1 & telephone numb]1 on behalf ( or z a function ( a telecommunications c>ri]4 7ii7 ,provid+ an individual's publicly available in=mation if ! in=mation is be+ us$ by ! recipi5t z x relates to t individual's bus9ess or pr(ession4 7iii7 ,provid+ or us+ p]sonal in=mation 9 a mann] t is regulat$ "u ano!r ,f$]al or ,/ate law1 includ+ ! ,fair ,cr$it ,report+ ,act1 ! ,gramm-,lea*-,bliley ,act1 or ! ,heal? ,insurance ,portability & ,acc\ntability ,act4 7iv7 ,provid+ p]sonal in=mation to a ?ird p>ty at ! express direction ( ! individual = a cle>ly disclos$ s+le-use purpose4 7v7 ,provid+ or us+ p]sonal in=mation = assess+1 v]ify+1 or au!nticat+ an individual's id5tity1 or = inve/igat+ or prev5t+ actual or pot5tial fraud4 7vi7 ,ga!r+1 prep>+1 collect+1 photograph+1 record+1 writ+1 edit+1 report+1 or publi%+ news or in=mation t conc]ns local1 national1 or int]national ev5ts or o!r matt]s ( public int]e/ = dissem9ation to ! public4 7,c7 ,exclusion f sale 7i7 ,9 g5]al ,= purposes ( ?is p>agraph1 ! t]m sells does n include a "o-"t or occasional sale ( assets ( an entity z "p ( a transf] ( control ( ^? assets t is n "p ( ! ord9>y conduct ( ! entity4 7ii7 ,notice requir$ ,to meet ! exclusion crit]ia describ$ 9 clause 7i71 an entity mu/ provide notice to ! ,commission1 9 ! mann] det]m9$ appropriate by ! ,commission1 ( any su* "o-"t or occasional sale ( assets4 7#d7 ,delete ,! t]m delete means to remove or de/roy in=mation su* t ! in=mation is n ma9ta9$ 9 human- or ma*9e-readable =m & _c be retriev$ or utiliz$ 9 su* =m 9 ! normal c\rse ( bus9ess4 7#e7 ,direct relation%ip 7,a7 ,9 g5]al ,! t]m direct relation%ip means a relation%ip betwe5 an individual & an entity :]e ! individual-- 7i7 is a curr5t cu/om]2 7ii7 has obta9$ a good or s]vice f ! entity )9 ! prior #ah mon?s2 or 7iii7 has made an inquiry ab\t ! products or s]vices ( ! entity )9 ! prior #ij days4 7,b7 ,exclusion ,! t]m direct relation%ip does n include a relation%ip betwe5 an individual & a data brok] :]e ! individual's only connection to ! data brok] is bas$ on ! individual's reque/-- 7i7 = ! data brok] to delete ! p]sonal in=mation ( ! individual2 or 7ii7 to opt out ( ! data brok]'s collection or use ( p]sonal in=mation1 c]ta9 sales ( su* in=mation1 or its databases4 7#f7 ,ha% ,! t]m ha% means to input data to a cryptographic1 "o-way1 collision resi/ant function t maps a bit /r+ ( arbitr>y l5g? to a fix$-l5g? bit /r+ to produce a cryptographically secure value4 7#g7 ,ha%$ ,! t]m ha%$ means ! type ( value produc$ by ha%+ data4 7#h7 ,human subjects rese>* ,! t]m human subjects rese>* means rese>* t-- 7,a7 an inve/igator 7:e!r pr(essional or /ud5t7 conducts on a liv+ individual2 & 7,b7 ei!r-- 7i7 obta9s in=mation or biospecim5s ?r\gh int]v5tion or int]action ) ! individual1 & uses1 /udies1 or analyzes ! in=mation or biospecim5s2 or 7ii7 obta9s1 uses1 /udies1 analyzes1 or g5]ates p]sonal in=mation or id5tifiable biospecim5s4 7#i7 ,p]sonal in=mation 7,a7 ,9 g5]al ,! t]m p]sonal in=mation means any in=mation held by a data brok]1 reg>dless ( h[ ! in=mation is collect$1 inf]r$1 creat$1 or obta9$1 t is l9k$ or reasonably l9kable by ! data brok] to a p>ticul> individual or consum] device1 includ+ ! foll[+ in=mation3 7i7 ,f9ancial in=mation1 includ+ any bank acc\nt numb]1 cr$it c>d numb]1 debit c>d numb]1 or insurance policy numb]4 7ii7 ,a "n1 alias1 home or o!r physical address1 onl9e id5tifi]1 ,int]net ,protocol address1 email address1 acc\nt "n1 ,/ate id5tification c>d numb]1 driv]'s lic5se numb]1 passport numb]1 or an id5tify+ numb] on a gov]nm5t-issu$ id5tification4 7iii7 ,geolocation in=mation4 7iv7 ,biometric in=mation4 7v7 ,! cont5ts (1 atta*m5ts to1 or p>ties to in=mation1 includ+ ) respect to email1 text messages1 picture messages1 voicemails1 audio conv]sations1 or video conv]sations4 7vi7 ,web br[s+ hi/ory1 includ+ any se>* qu]y4 7vii7 ,g5etic sequ5c+ in=mation4 7viii7 ,a device id5tifi]1 onl9e id5tifi]1 p]si/5t id5tifi]1 or digital f+]pr9t+ in=mation4 7ix7 ,any inf]5ce drawn f any ( ! in=mation describ$ 9 ?is p>agraph t is us$ to create a pr(ile ab\t an individual t reflects su* individual's pref]5ces1 *>act]i/ics1 psy*ological tr5ds1 pr$ispositions1 behavior1 attitudes1 intellig5ce1 abilities1 or aptitudes4 7x7 ,any o!r in=mation det]m9$ appropriate by ! ,commission4 7,b7 ,l9k$ or reasonably l9kable ,= purposes ( subp>agraph 7,a71 in=mation is l9k$ or reasonably l9kable to a p>ticul> individual or consum] device if ! in=mation c be us$ on its own or 9 comb9ation ) o!r in=mation held by or readily accessible to a data brok] to id5tify a p>ticul> individual or consum] device4 7#aj7 ,process ,! t]m process means to p]=m or direct ! p]=mance ( an op]ation on p]sonal in=mation1 includ+ ! collection1 transmission1 use1 disclosure1 analysis1 pr$iction1 or modification ( su* p]sonal in=mation1 :e!r or n by automat$ means4 7#aa7 ,uni=m res\rce locator2 ,,url ,! t]m uni=m res\rce locator or ,,url means a %ort /r+ conta9+ an address t ref]s to an object on ! web4