,,ii #aag? ,,congress #a/ ,session ,s4 #bacd ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,june #ag1 #bjba ,mrs4 ,gillibr& 7= h]self & ,mr4 ,br[n7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to e/abli% ! ,data ,protection ,ag5cy4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,data ,protection ,act ( #bjba4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,ag5cy ,! t]m ,ag5cy means ! ,data ,protection ,ag5cy e/abli%$ "u section #c4 7#b7 ,anonymiz$ data ,! t]m anonymiz$ data means in=mation-- 7,a7 t does n id5tify an individual2 & 7,b7 ) respect to :i* !re is no reasonable basis to believe t ! in=mation c be us$ on its own or 9 comb9ation ) o!r reasonably available in=mation to id5tify an individual4 7#c7 ,automat$ decision sy/em ,! t]m automat$ decision sy/em means a computational process1 includ+ "o d]iv$ f ma*9e le>n+1 /ati/ics1 or o!r data process+ or artificial intellig5ce te*niques1 t makes a decision1 or facilitates human decision mak+4 7#d7 ,biometric in=mation ,! t]m biometric in=mation-- 7,a7 means in=mation reg>d+ ! physiological or biological *>act]i/ics ( an individual t may be us$1 s+ly or 9 comb9ation ) ea* o!r or ) o!r id5tify+ data1 to e/abli% ! id5tity ( an individual2 7,b7 includes-- 7i7 g5etic data2 7ii7 imag]y ( ! iris1 ret9a1 f+]pr9t1 face1 h&1 palm1 ve9 patt]ns1 & voice record+s1 f :i* an id5tifi] template1 su* z a facepr9t1 a m9utiae template1 or a voicepr9t1 c be extract$2 7iii7 key/roke patt]ns or rhy?ms1 gait patt]ns or rhy?ms1 & sleep1 heal?1 or ex]cise data t conta9 id5tify+ in=mation2 & 7iv7 any ma!matical code1 pr(ile1 or algori?mic model d]iv$ f in=mation reg>d+ ! physiological or biological *>act]i/ics ( an individual2 7,c7 does n include in=mation captur$ f a pati5t 9 a heal? c>e sett+ = a m$ical purpose or in=mation collect$1 us$1 or /or$ = heal? c>e treatm5t1 paym5t1 or op]ations "u ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7,public ,law #ajd-aia72 & 7,d7 does n include an ,x-ray1 ro5tg5 process1 comput$ tomography1 ,,mri1 ,,pet scan1 mammography1 or o!r image or film ( ! human anatomy us$ to diagnose1 prognose1 or treat an illness or o!r m$ical condition or to fur!r validate sci5tific te/+ or scre5+4 7#e7 ,collect ,! t]m collect-- 7,a7 means buy+1 r5t+1 ga!r+1 obta9+1 receiv+1 or access+ any p]sonal data by any means2 & 7,b7 includes-- 7i7 receiv+ p]sonal data f an individual or device2 & 7ii7 creat+1 d]iv+1 or inf]r+ p]sonal data by analyz+ data ab\t an individual or ab\t gr\ps ( individuals simil> to ! individual4 7#f7 ,data aggregator ,! t]m data aggregator-- 7,a7 means any p]son t collects1 uses1 or %>es1 9 or affect+ int]/ate comm]ce1 an am\nt ( p]sonal data t is n de m9imis1 z well z entities relat$ to t p]son by common own]%ip or corporate control2 & 7,b7 does n include an individual :o collects1 uses1 or %>es p]sonal data solely = non-comm]cial reasons4 7#g7 ,device ,! t]m device means any physical object t-- 7,a7 is capable ( connect+ to ! int]net or o!r communication network2 or 7,b7 has comput] process+ capabilities t c collect1 s5d1 receive1 or /ore data4 7#h7 ,director ,! t]m ,director means ! ,director ( ! ,data ,protection ,ag5cy4 7#i7 ,electronic data ,! t]m electronic data means any in=mation t is 9 an electronic or digital =mat or any electronic or digital ref]5ce t conta9s in=mation ab\t an individual or device4 7#aj7 ,f$]al privacy law ,! t]m ,f$]al privacy law means ! provisions ( ?is ,act1 any o!r rule or ord] prescrib$ by ! ,ag5cy "u ?is ,act1 & ! foll[+ laws 7includ+ any am5dm5ts made to su* laws73 7,a7 ,title ,v ( ! ,gramm-,lea*-,bliley ,act 7,public ,law #ajf-ajb2 #aac ,/at4 #acch74 7,b7 ,! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha et seq474 7,c7 ,! ,telem>ket+ & ,consum] ,fraud & ,abuse ,prev5tion ,act 7#ae ,u4,s4,c4 #faja et seq474 7,d7 ,! ,fair & ,accurate ,cr$it ,transactions ,act ( #bjjc 7,public ,law #ajh-aei2 #aag ,/at4 #aieb74 7,e7 ,! ,,c-,,spam ,act ( #bjjc 7#ae ,u4,s4,c4 #ggja et seq474 7,f7 ,sections #bbb1 #bbg1 #cch7l71 #fca1 & #gje ( ! ,communications ,act ( #aicd 7#dg ,u4,s4,c4 #bbb1 #bbg1 #cch7l71 #eea1 #gje74 7,g7 ,! ,*ildr5's ,onl9e ,privacy ,protection ,act ( #aiih 7#ae ,u4,s4,c4 #feja et seq474 7,h7 ,! ,"r to ,f9ancial ,privacy ,act ( #aigh 7#ab ,u4,s4,c4 #cdja et seq474 7,i7 ,! ,id5tity ,!ft ,assumption & ,det]r5ce ,act ( #aiih 7,public ,law #aje-cah2 #aag ,/at4 #cjjg74 7,j7 ,! ,g5]al ,education ,provisions ,act 7#bj ,u4,s4,c4 #abba et seq47 7commonly kn[n z ! ,family ,educational ,rights & ,privacy ,act ( #aigd74 7,k7 ,section #eeb;a ( title #e1 ,unit$ ,/ates ,code4 7,l7 ,! ,e-,gov]nm5t ,act ( #bjjb 7,public ,law #ajg-cdg2 #aaf ,/at4 #bhii74 7,m7 ,! ,comput] ,security ,act ( #aihg 7#dj ,u4,s4,c4 #adda note74 7,n7 ,! ,employee ,polygraph ,protection ,act ( #aihh 7#bi ,u4,s4,c4 #bjja et seq474 7,o7 ,! ,communications ,assi/ance = ,law ,en=cem5t ,act 7,public ,law #ajc-dad2 #ajh ,/at4 #dbgi74 7,p7 ,sections #ajbh;,a1 #ajcj1 #ahja1 #bgaj1 & #bgba & *apt] #aai1 ( title #ah1 ,unit$ ,/ates ,code4 7,q7 ,! ,g5etic ,in=mation ,nondiscrim9ation ,act ( #bjjh 7,public ,law #aaj-bcc2 #abb ,/at4 #hha74 7,r7 ,! ,taxpay] ,br[s+ ,protection ,act 7,public ,law #aje-ce2 #aaa ,/at4 #aajd74 7,s7 ,! ,privacy ,protection ,act ( #aihj 7#db ,u4,s4,c4 #bjjj;aa et seq474 7,t7 ,! ,cable ,communications ,policy ,act ( #aihd 7,public ,law #ih-edi2 #ih ,/at4 #bggi74 7,u7 ,! ,d-,n-,call ,implem5tation ,act 7,public ,law #ajh-aj2 #aag ,/at4 #eeg74 7,v7 ,! ,wireless ,communications & ,public ,safety ,act ( #aiii 7,public ,law #ajf-ha2 #aac ,/at4 #abhf74 7,w7 ,title ,,xxx ( ! ,public ,heal? ,s]vice ,act 7#db ,u4,s4,c4 #cjj;jj et seq474 7#aa7 ,high-risk data practice ,! t]m high-risk data practice means an action by a data aggregator t involves-- 7,a7 ! use ( an automat$ decision sy/em2 7,b7 ! process+ ( data 9 a mann] t involves an individual's protect$ class1 familial /atus1 lawful s\rce ( income1 f9ancial /atus su* z ! individual's income or assets71 vet]an /atus1 crim9al convictions or arre/s1 citiz5%ip1 pa/1 pres5t1 or future physical or m5tal heal? or condition1 psy*ological /ates1 or any o!r factor us$ z a proxy = id5tify+ any ( ^! *>act]i/ics2 7,c7 a sy/ematic process+ ( publicly accessible data on a l>ge scale2 7,d7 process+ involv+ ! use ( new te*nologies1 or comb9ations ( te*nologies1 t causes or mat]ially contributes to privacy h>m2 7,e7 decisions ab\t an individual's access to a product1 s]vice1 opportunity1 or b5efit :i* is bas$ to any ext5t on automat$ decision sy/em process+2 7,f7 any pr(il+ ( individuals on a l>ge scale2 7,g7 any process+ ( biometric in=mation = ! purpose ( uniquely id5tify+ an individual1 ) ! exception ( "o-to-"o biometric au!ntication2 7,h7 comb9+1 comp>+1 or mat*+ p]sonal data obta9$ f multiple s\rces2 7,i7 process+ :i* involves an individual's precise geolocation2 7,j7 ! process+ ( p]sonal data ( *ildr5 & te5s "u #ag or o!r vuln]able individuals su* z ! eld]ly1 p ) disabilities1 & o!r gr\ps kn[n to be susceptible = exploitation = m>ket+ purposes1 pr(il+1 or automat$ process+2 or 7,k7 consum] scor+ or o!r bus9ess practices t p]ta9 to ! eligibility ( an individual1 & relat$ t]ms1 rights1 b5efits1 & privileges1 = employm5t 7includ+ hir+1 fir+1 promotion1 demotion1 & comp5sation71 cr$it1 insurance1 h\s+1 education1 pr(essional c]tification1 or ! provision ( heal? c>e & relat$ s]vices4 7#ab7 ,high-risk data practice impact evaluation ,! t]m high-risk data practice impact evaluation means a /udy conduct$ aft] deploym5t ( a high-risk data practice t includes1 at a m9imum-- 7,a7 an evaluation ( a high-risk data practice's accuracy1 disp>ate impacts on ! basis ( protect$ class1 & privacy h>ms2 7,b7 an evaluation ( ! effectiv5ess ( measures tak5 to m9imize risks z outl9$ 9 any prior high-risk data practice risk assessm5ts2 & 7,c7 recomm5d$ measures to fur!r m9imize risks to accuracy1 disp>ate impacts on ! basis ( protect$ class1 & privacy h>ms4 7#ac7 ,high-risk data practice risk assessm5t ,! t]m high-risk data practice risk assessm5t means a /udy evaluat+ a high-risk data practice & ! high-risk data practice's developm5t process1 includ+ ! design & tra9+ data ( ! high-risk data practice1 if applicable1 = likelihood & sev]ity ( risks to accuracy1 bias1 discrim9ation1 & privacy h>ms t includes1 at a m9imum-- 7,a7 a detail$ description ( ! high-risk data practice1 includ+-- 7i7 its design & me?odologies2 7ii7 tra9+ data *>act]i/ics2 7iii7 data2 & 7iv7 purpose2 7,b7 an assessm5t ( ! relative b5efits & co/s ( ! high-risk data practice 9 light ( its purpose1 pot5tial un9t5d$ consequ5ces1 & tak+ into acc\nt relevant factors1 includ+-- 7i7 data m9imization practices2 7ii7 ! duration & me?ods = :i* p]sonal data & ! results ( ! high-risk data practice are /or$2 7iii7 :at in=mation ab\t ! high-risk data practice is available to individuals2 7iv7 ! ext5t to :i* individuals h access to ! results ( ! high-risk data practice & may correct or object to its results2 & 7v7 ! recipi5ts ( ! results ( ! high-risk data practice2 7,c7 an assessm5t ( ! risks ( privacy h>m pos$ by ! high-risk data practice & ! risks t ! high-risk data practice may result 9 or contribute to inaccurate1 bias$1 or discrim9atory decisions impact+ individuals or gr\ps ( individuals2 & 7,d7 ! decision to accept1 reject1 or mitigate & m9imize risks & ! measures a data aggregator w employ includ+ to m9imize ! risks describ$ 9 subp>agraph7,c71 includ+ te*nological & physical safegu>ds4 7#ad7 ,individual ,! t]m individual means a natural p]son4 7#ae7 ,p]son ,! t]m p]son means an individual1 a local1 ,/ate1 or ,f$]al gov]nm5tal entity1 a p>tn]%ip1 a company1 a corporation1 an association 7incorporat$ or un9corporat$71 a tru/1 an e/ate1 a coop]ative organization1 ano!r entity1 or any o!r organization or gr\p ( su* entities act+ 9 conc]t4 7#af7 ,p]sonal data ,! t]m p]sonal data means electronic data t1 alone or 9 comb9ation ) o!r data-- 7,a7 id5tifies1 relates to1 describes1 is capable ( be+ associat$ )1 or c\ld reasonably be l9k$1 directly or indirectly1 ) a p>ticul> individual1 h\sehold1 or device2 or 7,b7 c\ld be us$ to det]m9e t an individual or h\sehold is "p ( a protect$ class4 7#ag7 ,precise geolocation ,! t]m precise geolocation means any data t is d]iv$ f a device & t is us$ or int5d$ to be us$ to locate an individual )9 a geographic area t is equal to or less ?an ! area ( a circle ) a radius ( "o ?\s&1 eight hundr$ & fifty 7#a1hej7 feet4 7#ah7 ,privacy h>m ,! t]m privacy h>m means an adv]se consequ5ce1 or a pot5tial adv]se consequ5ce1 to an individual1 a gr\p ( individuals1 or society caus$1 9 :ole or 9 "p1 by ! collection1 process+1 or %>+ ( p]sonal data1 includ+-- 7,a7 direct or indirect f9ancial loss or economic h>m1 includ+ f9ancial loss or economic h>m aris+ f fraudul5t activities or data security brea*es2 7,b7 physical h>m1 h>assm5t1 or a ?reat to an individual or prop]ty2 7,c7 psy*ological h>m1 includ+ anxiety1 emb>rassm5t1 fe>1 o!r trauma1 /igmatization1 reputational h>m1 or ! reveal+ or expos+ ( an individual1 or a *>act]i/ic ( an individual1 9 an unexpect$ way2 7,d7 an adv]se outcome or decision1 includ+ relat+ to ! eligibility ( an individual = ! rights1 b5efits1 or privileges 9 cr$it & insurance 7includ+ ! d5ial ( an application or obta9+ less favorable t]ms71 h\s+1 education1 pr(essional c]tification1 employm5t 7includ+ hir+1 fir+1 promotion1 demotion1 & comp5sation71 or ! provision ( heal? c>e & relat$ s]vices2 7,e7 discrim9ation1 includ+ bo? diff]5tial treatm5t on ! basis ( a protect$ class & disp>ate impact on a protect$ class2 7,f7 ! *ill+ ( free expression or action ( an individual1 or society g5]ally1 due to p]ceiv$ or actual p]vasive & excessive collection1 process+1 or %>+ ( p]sonal data2 7,g7 ! use ( in=mation te*nology to cov]tly influ5ce an individual's decision-mak+1 by t>get+ & exploit+ decision-mak+ vuln]abilities2 & 7,h7 any o!r adv]se consequ5ce1 or pot5tial adv]se consequ5ce1 prohibit$ by or def9$ by ,f$]al privacy laws2 provisions ( ,f$]al civil rights laws relat$ to ! process+ ( p]sonal in=mation2 provisions ( ,f$]al consum] protection laws relat$ to ! process+ ( p]sonal in=mation2 ! ,fir/ ,am5dm5t2 & o!r con/itutional rights protect+ privacy4 7#ai7 ,process ,! t]m process means to p]=m an op]ation or set ( op]ations on p]sonal data1 ei!r manually or by automat$ means1 includ+ collect+1 record+1 organiz+1 /ructur+1 /or+1 adapt+ or alt]+1 retriev+1 consult+1 us+1 disclos+ by transmission1 sort+1 classify+1 dissem9at+ or o!rwise mak+ available1 align+ or comb9+1 re/rict+1 eras+ or de/roy+4 7#bj7 ,pr(ile ,! t]m pr(ile means ! use ( an automat$ decision sy/em to process data 7includ+ p]sonal data & o!r data7 to d]ive1 inf]1 pr$ict or evaluate in=mation ab\t an individual or gr\p1 su* z ! process+ ( data to analyze or pr$ict an individual's id5tity1 attributes1 int]e/s or behavior4 7#ba7 ,protect$ class ,! t]m protect$ class means ! actual or p]ceiv$ race1 color1 e?nicity1 national orig91 religion1 sex1 g5d]1 g5d] id5tity or expression1 sexual ori5tation1 familial /atus1 biometric in=mation1 g5etic in=mation1 or disability ( an individual or a gr\p ( individuals4 7#bb7 ,s]vice provid] ,! t]m s]vice provid] means a data aggregator t collects1 uses1 or %>es p]sonal data only on behalf ( ano!r data aggregator 9 ord] to c>ry out a p]missible purpose1 & only to ! ext5t ( su* activity4 7#bc7 ,%>e ,! t]m %>e means dissem9at+1 mak+ available1 transf]r+1 or o!rwise communicat+ orally1 9 writ+1 or by electronic or o!r means1 p]sonal data4 #c4 ,e/abli%m5t ( ! data protection ag5cy 7a7 ,ag5cy e/abli%$ ,!re is e/abli%$ 9 ! ,executive bran* an indep5d5t ag5cy to be kn[n z ! ,data ,protection ,ag5cy1 :i* %all regulate high-risk data practices & ! collection1 process+1 & %>+ ( p]sonal data4 7b7 ,director & deputy director 7#a7 ,9 g5]al ,!re is e/abli%$ a position ( ! ,director ( ! ,data ,protection ,ag5cy 7ref]r$ to 9 ?is ,act z ! ,director71 :o %all s]ve z ! head ( ! ,ag5cy4 7#b7 ,appo9tm5t ,subject to p>agraph 7#c71 ! ,director %all be appo9t$ by ! ,presid5t1 by & ) ! advice & cons5t ( ! ,s5ate4 7#c7 ,qualification ,! ,presid5t %all nom9ate ! ,director f among memb]s ( ! public at l>ge :o are well qualifi$ = s]vice at ! ,ag5cy bas$ on _! k & exp]tise 9-- 7,a7 te*nology2 7,b7 protection ( p]sonal data2 7,c7 civil rights & lib]ties2 7,d7 law2 & 7,e7 social sci5ces4 7#d7 ,comp5sation 7,a7 ,9 g5]al ,! ,director %all be comp5sat$ at ! rate prescrib$ = level ,,ii ( ! ,executive ,s*$ule "u section #ecac ( title #e1 ,unit$ ,/ates ,code4 7,b7 ,con=m+ am5dm5t ,section #ecac ( title #e1 ,unit$ ,/ates ,code1 is am5d$ by ins]t+ aft] ! item relat+ to ! ,f$]al ,transit ,adm9i/rator1 ! foll[+ new item3 ,director ( ! ,data ,protection ,ag5cy44 7#e7 ,deputy director ,!re is e/abli%$ ! position ( ,deputy ,director1 :o %all-- 7,a7 be appo9t$ by ! ,director2 & 7,b7 s]ve z ! act+ ,director 9 ! abs5ce or unavailability ( ! ,director4 7#f7 ,act+ director ,9 ! ev5t ( ! dea?1 resignation1 sickness1 or abs5ce ( ! ,director1 ! ,presid5t %all designate ! ,deputy ,director to s]ve z act+ ,director until ! return ( ! ,director1 or ! appo9tm5t ( a successor pursuant to subsection 7b74 7c7 ,t]m 7#a7 ,9 g5]al ,! ,director %all s]ve = a t]m ( #e ye>s4 7#b7 ,expiration ( t]m ,an individual may s]ve z ,director aft] ! expiration ( ! t]m = :i* appo9t$ until a successor has be5 appo9t$ & qualifi$4 7#c7 ,removal ,! ,presid5t may remove ! ,director at w4 7#d7 ,vacancy ,a vacancy 9 ! position ( ,director t occurs be=e ! expiration ( ! t]m = :i* a ,director 0 appo9t$ %all be fill$ 9 ! mann] e/abli%$ "u p>agraph 7#b71 & ! ,director appo9t$ to fill su* vacancy %all be appo9t$ only = ! rema9d] ( su* t]m4 7d7 ,s]vice re/riction ,no ,director or ,deputy ,director may engage 9 any o!r employm5t dur+ ! p]iod ( s]vice ( su* p]son z ,director or ,deputy ,director4 7e7 ,(fices ,! pr9cipal (fice ( ! ,ag5cy %all be 9 ! ,di/rict ( ,columbia4 ,! ,director may e/abli% regional (fices ( ! ,ag5cy4 7f7 ,applicability ( o!r laws ,except z o!rwise provid$ expressly by law1 all ,f$]al laws deal+ ) public or ,f$]al contracts1 prop]ty1 works1 (fic]s1 employees1 budgets1 or funds1 includ+ ! provisions ( *apt] #e & #g ( title #e1 ,unit$ ,/ates ,codes1 %all apply to ! ex]cise ( ! p[]s ( ! ,ag5cy4 #d4 ,executive & adm9i/rative p[]s 7a7 ,p[]s ( ! ag5cy ,! ,director is au?oriz$ to e/abli% ! g5]al p[]s ( ! ,ag5cy ) respect to all executive & adm9i/rative functions1 includ+-- 7#a7 ! e/abli%m5t ( rules = conduct+ ! g5]al bus9ess ( ! ,ag5cy1 9 a mann] n inconsi/5t ) ?is ,act2 7#b7 to b9d ! ,ag5cy & ent] into contracts2 7#c7 direct+ ! e/abli%m5t & ma9t5ance ( divisions or o!r (fices )9 ! ,ag5cy1 9 ord] to c>ry out ! responsibilities "u ?is ,act & ,f$]al privacy law1 & to satisfy ! requirem5ts ( applicable law2 7#d7 to coord9ate & ov]see ! op]ation ( all adm9i/rative1 en=cem5t1 & rese>* activities ( ! ,ag5cy2 7#e7 to adopt & use a seal2 7#f7 to det]m9e ! "* ( & necessity = ! obligations by ! ,ag5cy2 7#g7 ! appo9tm5t & sup]vision ( p]sonnel employ$ by ! ,ag5cy2 7#h7 ! di/ribution ( bus9ess among p]sonnel appo9t$ & sup]vis$ by ! ,ag5cy2 7#i7 ! use & exp5diture ( funds2 7#aj7 implem5t+ ?is ,act & ,f$]al privacy laws ?r\gh rules1 ord]s1 guidance1 int]pretations1 /atem5ts ( policy1 exam9ations1 & en=cem5t actions2 & 7#aa7 p]=m+ su* o!r functions z may be au?oriz$ or requir$ by law4 7b7 ,delegation ( au?ority ,! ,director may delegate to any duly au?oriz$ employee1 repres5tative1 or ag5t any p[] ve/$ 9 ! ,ag5cy by law4 7c7 ,(fice responsibilities ,not)/&+ subsections 7a7 & 7b71 section #c7;a71 & any o!r provision ( law1 ) respect to ! specific functional units & (fices describ$ 9 section #e7;b71 ! ,director-- 7#a7 %all ensure t su* functional units & (fices p]=m ! functions1 duties1 & coord9ation assign$ to !m "u ! applicable provision ( section #e2 & 7#b7 may n reorganize or r5ame su* units or (fices 9 a mann] n provid$ = "u ! applicable provisions ( section #e4 7d7 ,autonomy ( ag5cy ,no (fic] or ag5cy ( ! ,unit$ ,/ates %all h any au?ority to require ! ,director or any o!r (fic] ( ! ,ag5cy to submit legislative recomm5dations1 or te/imony or comm5ts on legislation1 to any (fic] or ag5cy ( ! ,unit$ ,/ates = approval1 comm5ts1 or review prior to ! submission ( su* recomm5dations1 te/imony1 or comm5ts to ! ,congress1 if su* recomm5dations1 te/imony1 or comm5ts to ! ,congress include a /atem5t indicat+ t ! views express$ !re9 are ^? ( ! ,director or su* (fic]1 & d n necess>ily reflect ! views ( ! ,presid5t4 #e4 ,adm9i/ration 7a7 ,p]sonnel 7#a7 ,appo9tm5t 7,a7 ,9 g5]al ,! ,director may fix ! numb] (1 & appo9t & direct1 all employees ( ! ,ag5cy1 9 accordance ) ! applicable provisions ( title #e1 ,unit$ ,/ates ,code4 7,b7 ,employees ( ! ag5cy ,! ,director may employ attorneys1 compliance exam9]s1 compliance sup]vision analy/s1 economi/s1 te*nologi/s1 data sci5ti/s1 design]s1 e?ici/s1 privacy exp]ts1 /ati/icians1 & o!r employees z may be deem$ necess>y to conduct ! bus9ess ( ! ,ag5cy4 ,unless o!rwise provid$ expressly by law1 any individual appo9t$ "u ?is section %all be an employee1 z def9$ 9 section #baje ( title #e1 ,unit$ ,/ates ,code1 & subject to ! provisions ( su* title & o!r laws g5]ally applicable to ! employees ( an ,executive ag5cy4 7,c7 ,waiv] au?ority 7i7 ,9 g5]al ,9 mak+ any appo9tm5t "u subp>agraph 7,a71 ! ,director may waive ! requirem5ts ( *apt] #cc ( title #e1 ,unit$ ,/ates ,code1 & ! regulations implem5t+ su* *apt]1 to ! ext5t necess>y to appo9t employees on t]ms & conditions t are consi/5t ) ^? set =? 9 section #aa7a7 ( ! ,f$]al ,res]ve ,act 7#ab ,u4,s4,c4 #bdh7a771 :ile provid+ =-- 7,i7 fair1 cr$ible1 & transp>5t me?ods ( e/abli%+ qualification requirem5ts =1 recruitm5t =1 & appo9tm5ts to positions2 7,,ii7 fair & op5 competition & equitable treatm5t 9 ! consid]ation & selection ( individuals to positions2 & 7,,iii7 fair1 cr$ible1 & transp>5t me?ods ( assign+1 reassign+1 detail+1 transf]r+1 & promot+ employees4 7ii7 ,vet]ans pref]5ces ,9 implem5t+ ?is subp>agraph1 ! ,director %all comply ) ! provisions ( section #bcjb7;b77#aa7 ( title #e1 ,unit$ ,/ates ,code1 reg>d+ vet]ans' pref]5ce requirem5ts1 9 a mann] consi/5t ) t 9 :i* su* provisions are appli$ "u *apt] #cc ( t title4 ,! au?ority "u ?is subp>agraph to waive ! requirem5ts ( t *apt] #cc %all expire #e ye>s aft] ! date ( enactm5t ( ?is ,act4 7,d7 ,duty to provide adequate /aff+ ,! ,director %all ensure t ! specific functional units & (fices e/abli%$ "u section #e1 z well z o!r units & (fices ) sup]visory1 rulemak+1 & en=cem5t duties1 are provid$ ) suffici5t /aff to c>ry out ! functions1 duties1 & coord9ation ( ^? units & (fices4 7,e7 ,limitation on political appo9tees 7i7 ,9 g5]al ,9 appo9t+ employees ( ! ,ag5cy :o are political appo9tees1 ! ,director %all ensure t ! numb] & duties ( su* political appo9tees are z simil> z possible to ^? ( o!r ,f$]al regulatory ag5cies4 7ii7 ,political appo9tees def9$ ,= purposes ( ?is subp>agraph1 ! t]m political appo9tee means an employee :o holds-- 7,i7 a position :i* has be5 except$ f ! competitive s]vice by reason ( its confid5tial1 policy-det]m9+1 policymak+1 or policy-advocat+ "*2 7,,ii7 a position 9 ! ,s5ior ,executive ,s]vice z a nonc>e] appo9tee 7z su* t]m is def9$ 9 section #cacb7;a7 ( title #e1 ,unit$ ,/ates ,code72 or 7,,iii7 a position "u ! ,executive ,s*$ule 7sub*apt] ,,ii ( *apt] #ec ( title #e1 ,unit$ ,/ates ,code74 7#b7 ,comp5sation ,not)/&+ any o!rwise applicable provision ( title #e1 ,unit$ ,/ates ,code1 conc]n+ comp5sation1 includ+ ! provisions ( *apt] #ea & *apt] #ec1 ! foll[+ provisions %all apply ) respect to employees ( ! ,ag5cy3 7,a7 ,! rates ( basic pay = all employees ( ! ,ag5cy may be set & adju/$ by ! ,director4 7,b7 ,! ,director %all at all times provide comp5sation 7includ+ b5efits7 to ea* class ( employees t1 at a m9imum1 are comp>able to ! comp5sation & b5efits !n be+ provid$ by ! ,bo>d ( ,gov]nors ( ! ,f$]al ,res]ve ,sy/em or ! ,bureau ( ,consum] ,f9ancial ,protection = ! correspond+ class ( employees4 7,c7 ,all su* employees %all be comp5sat$ 7includ+ b5efits7 on t]ms & conditions t are consi/5t ) ! t]ms & conditions set =? 9 section #aa7l7 ( ! ,f$]al ,res]ve ,act 7#ab ,u4,s4,c4 #bdh7l774 7#c7 ,labor-managem5t relations ,*apt] #ga ( title #e1 ,unit$ ,/ates ,code1 %all apply to ! ,ag5cy & ! employees ( ! ,ag5cy4 7b7 ,specific functional units 7#a7 ,(fice ( civil rights ,! ,director %all e/abli% an (fice ^: p[]s & duties %all include-- 7,a7 provid+ ov]sight & en=cem5t ( ?is ,act1 rules & ord]s promulgat$ "u ?is ,act1 & ,f$]al privacy laws to ensure t ! collection1 process+1 & %>+ ( p]sonal data is fair1 equitable1 & non-discrim9atory 9 treatm5t & effect2 7,b7 develop+1 e/abli%+1 & promot+ data process+ practices t affirmatively fur!r equal opportunity to & exp& access to h\s+1 employm5t1 cr$it1 insurance1 education1 heal?c>e1 & o!r aspects ( int]/ate comm]ce2 7,c7 coord9at+ ! ,ag5cy's civil rights ef=ts ) o!r ,f$]al ag5cies & ,/ate regulators1 z appropriate1 to promote consi/5t1 effici5t1 & effective en=cem5t ( ,f$]al civil rights laws2 7,d7 work+ ) civil rights advocates1 privacy organizations1 & data aggregators on ! promotion ( compliance ) ! civil rights provisions "u ?is ,act1 rules & ord]s promulgat$ "u ?is ,act1 & ,f$]al privacy laws2 7,e7 liais+ ) communities & consum]s impact$ by practices regulat$ by ?is ,act & ! ,ag5cy1 to ensure t _! ne$s & views are appropriately tak5 into acc\nt2 7,f7 provid+ annual reports to ,congress on ! ef=ts ( ! ,ag5cy to fulfill its civil rights m&ate2 & 7,g7 su* additional p[]s & duties z ! ,director may det]m9e are appropriate4 7#b7 ,rese>* ,! ,director %all e/abli% a unit ^: functions %all include rese>*+1 analyz+1 assess+1 & report+ on-- 7,a7 ! collection & process+ ( p]sonal data1 includ+ automat$ decision sy/ems2 7,b7 ! collection & process+ ( p]sonal data by gov]nm5t ag5cies1 includ+ contracts betwe5 gov]nm5t ag5cies & data aggregators2 & 7,c7 unfair1 deceptive1 or discrim9atory outcomes t result or are likely to result f ! use ( automat$ decision sy/ems1 includ+ disp>ate treatm5t or disp>ate impact on ! basis ( protect$ class or proxies = protect$ class4 7#c7 ,collect+ & track+ compla9ts 7,a7 ,9 g5]al 7i7 ,e/abli%m5t ( unit ,! ,director %all e/abli% a unit1 ! functions ( :i* %all include id5tify+ & facilitat+ ! developm5t ( be/ practices = consum]s to file a compla9t1 & e/abli%+ a s+le toll-free telephone numb]1 a publicly available website1 & a publicly available database1 or utiliz+ an exi/+ publicly available database1 to facilitate ! c5traliz$ collection (1 monitor+ (1 & response to compla9ts reg>d+ ! collection1 process+1 & %>+ ( p]sonal data4 7ii7 ,website requirem5ts ,! ,director %all ensure t-- 7,i7 ! l&+ page ( ! ma9 website ( ! ,ag5cy conta9s a cle> & conspicu\s hyp]l9k to ! compla9t database describ$ 9 clause 7i7 & %all ensure t su* database is us]-fri5dly & 9 pla9 writ+1 z t t]m is def9$ 9 section #c ( ! ,pla9 ,writ+ ,act ( #bjaj 7#e ,u4,s4,c4 #cja note72 & 7,,ii7 t all in=mation on ! website or ! database t expla9s h[ a compla9t ) ! ,ag5cy1 z well z reports ( ! ,ag5cy ) respect to in=mation conta9$ 9 t database1 %all be provid$ 9 ea* ( ! #e mo/ commonly spok5 languages1 o!r ?an ,engli%1 9 ! ,unit$ ,/ates1 z det]m9$ by ! ,bureau ( ! ,c5sus on an ongo+ basis1 & 9 =mats accessible to individuals ) he>+ or vision impairm5ts4 7,b7 ,public availability ( in=mation 7i7 ,9 g5]al ,! ,director %all-- 7,i7 make all compla9ts available to ! public on a website ( ! ,ag5cy2 7,,ii7 place a cle> & conspicu\s hyp]l9k on ! l&+ page ( ! ma9 website ( ! ,ag5cy to ! website describ$ "u subclause 7,i72 & 7,,iii7 ensure t su* website-- 7aa7 is se>*able & sortable by an data aggregator2 & 7bb7 is us]-fri5dly & writt5 9 pla9 language4 7ii7 ,removal ( p]sonal data ,9 mak+ ! in=mation describ$ "u clause 7i7 available to ! public1 ! ,director %all remove all p]sonal data4 7c7 ,ag5cy ombudsman 7#a7 ,e/abli%m5t requir$ ,! ,director %all appo9t an ombudsman4 7#b7 ,duties ( ombudsman ,! ombudsman appo9t$ 9 accordance ) p>agraph 7#a7 %all-- 7,a7 act z a liaison betwe5 ! ,ag5cy & any affect$ p]son ) respect to any problem t su* p]son may h 9 deal+ ) ! ,ag5cy1 result+ f ! regulatory activities ( ! ,ag5cy2 & 7,b7 assure t safegu>ds exi/ to enc\rage compla9ants to come =w>d & pres]ve confid5tiality4 #f4 ,coord9ation ,! ,ag5cy %all coord9ate ) ! ,consum] ,f9ancial ,protection ,bureau1 ! ,f$]al ,communications ,commission1 ! ,f$]al ,trade ,commission1 ! ,dep>tm5t ( ,comm]ce1 ! ,dep>tm5t ( ,heal? & ,human ,s]vices1 ! ,dep>tm5t ( ,h\s+ & ,urban ,developm5t1 ! ,dep>tm5t ( ,education1 ! ,equal ,employm5t ,opportunity ,commission1 ! ,national ,security ,ag5cy1 ! ,national ,in/itute ( ,/&>ds & ,te*nology1 ! ,:ite ,h\se ,(fice ( ,sci5ce & ,te*nology ,policy1 ! ,cyb]security & ,infra/ructure ,security ,ag5cy1 & o!r ,f$]al ag5cies & ,/ate regulators1 z appropriate1 to promote consi/5t regulatory treatm5t ( p]sonal data4 #g4 ,appe>ances be=e & reports to congress 7a7 ,appe>ances be=e congress ,! ,director ( ! ,ag5cy %all appe> be=e ,congress at semi-annual he>+s reg>d+ ! reports requir$ "u subsection 7b74 7b7 ,reports requir$ ,! ,ag5cy %all1 concurr5t ) ea* semi-annual he>+ ref]r$ to 9 subsection 7a71 prep>e & submit to ! ,presid5t & ,congress1 a report1 beg9n+ ) ! session foll[+ ! designat$ transf] date1 & %all publi% su* report on ! website ( ! ,ag5cy4 7c7 ,cont5ts ,! reports requir$ by subsection 7b7 %all include-- 7#a7 a discussion ( ! significant problems fac$ by p]sons 9 ex]cis+ _! rights "u ?is ,act & ,f$]al privacy laws2 7#b7 a ju/ification ( ! budget reque/ ( ! previ\s ye>2 7#c7 a li/ ( ! significant rules & ord]s adopt$ by ! ,ag5cy1 z well z o!r significant initiatives conduct$ by ! ,ag5cy1 dur+ ! prec$+ ye> & ! plan ( ! ,ag5cy = rules1 ord]s1 or o!r initiatives to be und]tak5 dur+ ! upcom+ p]iod2 7#d7 an analysis ( compla9ts ab\t practices relat+ to ! collection1 process+1 or %>+ ( p]sonal data t ! ,ag5cy has receiv$ & collect$ 9 its c5tral database on compla9ts dur+ ! prec$+ ye>2 7#e7 a li/1 ) a brief /atem5t ( ! issues1 ( ! public sup]visory & en=cem5t actions to :i* ! ,ag5cy 0 a p>ty dur+ ! prec$+ ye>2 7#f7 ! actions tak5 reg>d+ rules1 ord]s1 & sup]visory actions ) respect to data aggregators2 7#g7 an assessm5t ( significant actions by ,/ate attorneys g5]al or ,/ate regulators relat+ to ?is ,act or o!r ,f$]al privacy laws2 7#h7 an analysis ( ! ef=ts ( ! ,ag5cy to fulfill ! civil rights m&ate ( ! ,ag5cy2 & 7#i7 an analysis ( ! ef=ts ( ! ,ag5cy to increase work=ce & contract+ div]sity4 #h4 ,fund+2 p5alties & f9es 7a7 ,fund+ 7#a7 ,assessm5ts1 fees1 *>ges 7,a7 ,g5]al au?ority ,! ,director may collect an assessm5t1 fee1 or o!r *>ge f a data aggregator t has annual gross rev5ues t exce$ #be1jjj1jjj or annually collects1 uses1 or %>es1 alone or 9 comb9ation1 ! p]sonal data ( #ej1jjj or m individuals1 h\seholds1 or devices4 7,b7 ,det]m9ation ( am\nt ,9 e/abli%+ ! am\nt ( any assessm5t1 fee1 or *>ge collect$ f a data aggregator "u ?is section1 ! ,director may take into acc\nt any factor t ! ,director det]m9es is appropriate4 7#b7 ,au?ority ( director ,! ,director %all h sole au?ority to det]m9e ! mann] 9 :i* ! obligations ( ! ,ag5cy %all be incurr$ & its disbursem5ts & exp5ses all[$ & paid1 9 accordance ) ?is section1 except z provid$ 9 *apt] #ga ( title #e1 ,unit$ ,/ates ,code 7) respect to comp5sation74 7b7 ,data protection ag5cy fund 7#a7 ,sep>ate fund 9 f$]al res]ve e/abli%$ ,!re is e/abli%$ 9 ! ,f$]al ,res]ve a sep>ate fund1 to be kn[n z ! ,data ,protection ,ag5cy ,fund 7ref]r$ to 9 ?is section z ! ,ag5cy ,fund74 ,! ,ag5cy ,fund %all be ma9ta9$ & e/abli%$ at a ,f$]al res]ve bank1 9 accordance ) su* requirem5ts z ! ,bo>d ( ,gov]nors may impose4 7#b7 ,fund receipts ,all am\nts transf]r$ to ! ,ag5cy "u subsection 7a7 %all be deposit$ into ! ,ag5cy ,fund4 7#c7 ,inve/m5t au?ority 7,a7 ,am\nts 9 ag5cy fund may be inve/$ ,! ,ag5cy may reque/ ! ,bo>d ( ,gov]nors to direct ! inve/m5t ( ! portion ( ! ,ag5cy ,fund t is n1 9 ! judgm5t ( ! ,ag5cy1 requir$ to meet ! curr5t ne$s ( ! ,ag5cy4 7,b7 ,eligible inve/m5ts ,inve/m5ts au?oriz$ by ?is p>agraph %all be made 9 obligations ( ! ,unit$ ,/ates or obligations t are gu>ante$ z to pr9cipal & int]e/ by ! ,unit$ ,/ates1 ) maturities suitable to ! ne$s ( ! ,ag5cy ,fund1 z det]m9$ by ! ,ag5cy4 7,c7 ,int]e/ & proce$s cr$it$ ,! int]e/ on1 & ! proce$s f ! sale or r$emption (1 any obligations held 9 ! ,ag5cy ,fund %all be cr$it$ to ! ,ag5cy ,fund4 7c7 ,use ( funds 7#a7 ,9 g5]al ,funds obta9$ by1 transf]r$ to1 or cr$it$ to ! ,ag5cy ,fund %all be imm$iately available to ! ,ag5cy & "u ! control ( ! ,director1 & %all rema9 available until exp5d$1 to pay ! exp5ses ( ! ,ag5cy 9 c>ry+ out its duties & responsibilities4 ,! comp5sation ( ! ,director & o!r employees ( ! ,ag5cy & all o!r exp5ses !re( may be paid f1 obta9$ by1 transf]r$ to1 or cr$it$ to ! ,ag5cy ,fund "u ?is section4 7#b7 ,funds t are n gov]nm5t funds ,funds obta9$ by or transf]r$ to ! ,ag5cy ,fund %all n be con/ru$ to be ,gov]nm5t funds or appropriat$ monies4 7#c7 ,am\nts n subject to apportionm5t ,not)/&+ any o!r provision ( law1 am\nts 9 ! ,ag5cy ,fund & 9 ! ,civil ,p5alty ,fund e/abli%$ "u subsection 7d7 %all n be subject to apportionm5t = purposes ( *apt] #ae ( title #ca1 ,unit$ ,/ates ,code1 or "u any o!r au?ority4 7d7 ,p5alties & f9es 7#a7 ,e/abli%m5t ( victims relief fund ,!re is e/abli%$ 9 ! ,f$]al ,res]ve a sep>ate fund1 to be kn[n z ! ,data ,protection ,civil ,p5alty ,fund 7ref]r$ to 9 ?is section z ! ,civil ,p5alty ,fund74 ,! ,civil ,p5alty ,fund %all be ma9ta9$ & e/abli%$ at a ,f$]al res]ve bank1 9 accordance ) su* requirem5ts z ! ,bo>d ( ,gov]nors may impose4 ,if ! ,ag5cy obta9s a civil p5alty aga9/ any p]son 9 any judicial or adm9i/rative action "u ,f$]al laws1 ! ,ag5cy %all deposit into ! ,civil ,p5alty ,fund1 ! am\nt ( ! p5alty collect$4 7#b7 ,paym5t to victims ,am\nts 9 ! ,civil ,p5alty ,fund %all be available to ! ,ag5cy1 )\t fiscal ye> limitation1 = paym5ts to ! victims ( activities = :i* civil p5alties h be5 impos$ "u ?is ,act & = o!r violations ( o!r ,f$]al privacy laws4 ,if individual victims c be id5tifi$ ?r\gh reasonable ef=t1 & ! di/ributions are suffici5tly l>ge to make individual di/ributions economically viable1 p5alties %\ld be di/ribut$ directly to individual victims4 ,to ! ext5t t individuals _c be locat$ or su* r$ress1 paym5ts or comp5sation1 or o!r monet>y relief are o!rwise n practicable or economically viable1 ! ,ag5cy may-- 7,a7 use su* funds = ! purpose ( consum] or bus9ess education relat+ to data protection or = ! purpose ( engag+ 9 te*nological rese>* t ! ,ag5cy consid]s necess>y to en=ce ?is ,act & ,f$]al privacy laws2 & 7,b7 utilize a cy-pres approa* to di/ribute funds 9 ord] to advance data protection & privacy 9 ! ,unit$ ,/ates4 ,! ,ag5cy may id5tify recipi5ts1 includ+ *>itable & civil society organizations1 ^: int]e/s reasonable approximate ^? ( ! victims ( ! activities = :i* civil p5alties h be5 impos$ & di/ribute funds f ! ,civil ,p5alty ,fund to ^? recipi5ts4 #i4 ,purpose1 objectives1 & functions 7a7 ,purpose ,! ,ag5cy %all seek to protect individuals' privacy1 prev5t & rem$iate privacy h>ms1 prev5t1 rem$iate1 & r$uce discrim9ation on ! basis ( protect$ class ?r\gh ! process+ ( p]sonal in=mation1 includ+ bo? diff]5tial treatm5t on ! basis ( a protect$ class & disp>ate impact on a protect$ class1 & limit ! collection1 process+1 & %>+ ( p]sonal data2 & is au?oriz$ to ex]cise its au?orities "u ?is ,act = su* purposes4 7b7 ,objectives ,! ,ag5cy is au?oriz$ to ex]cise its au?orities "u ?is ,act to-- 7#a7 protect individuals f violations ( ?is ,act1 o!r ,f$]al privacy laws1 or rules & ord]s issu$ "u ?is ,act2 7#b7 promote & affirmatively fur!r equal opportunity 9 all aspects ( economic life z x relates to ! fair & non-discrim9atory process+ ( p]sonal in=mation2 7#c7 ov]see ! use ( high-risk data practices2 7#d7 promote ! m9imization ( collection ( p]sonal data = comm]cial purposes2 7#e7 prev5t & rem$iate privacy h>ms2 & 7#f7 ensure t ,f$]al privacy law is en=c$ consi/5tly & 9 ord] to protect individuals' privacy4 7c7 ,functions ,! prim>y functions ( ! ,ag5cy are-- 7#a7 provid+ lead]%ip & coord9ation to ! ef=ts ( all ,f$]al dep>tm5ts & ag5cies to en=ce all ,f$]al /atutes1 ,executive ord]s1 regulations & policies :i* involve privacy or data protection2 7#b7 maximiz+ ef=t1 promot+ effici5cy1 & elim9at+ conflict1 competition1 duplication1 & inconsi/5cy among ! op]ations1 functions1 & jurisdictions ( ,f$]al dep>tm5ts & ag5cies responsible = privacy or data protection1 & data protection rights & /&>ds2 7#c7 provid+ active lead]%ip1 guidance1 education1 & appropriate assi/ance to private sector bus9esses1 organizations1 gr\ps1 in/itutions1 & individuals reg>d+ privacy & data protection rights & /&>ds2 7#d7 requir+ & ov]see+ ex-ante high-risk data practice risk assessm5ts & ex-po/ high-risk data practice impact evaluations to advance fair & j data practices2 7#e7 protect+ individuals & gr\ps ( individuals f privacy h>ms2 7#f7 exam9+ ! social1 e?ical1 economic1 & civil rights impacts ( data collection & process+ practices & propos+ rem$ies2 7#g7 protect+ civil rights1 combat+ unlawful discrim9ation1 & affirmatively fur!r+ equal opportunity z !y relate to ! process+ ( p]sonal in=mation2 7#h7 ensur+ t high-risk data privacy practices are fair1 j1 non-deceptive1 & d n discrim9ate aga9/ a protect$ class2 7#i7 collect+1 rese>*+1 & respond+ to compla9ts2 7#aj7 develop+ model privacy & data protection /&>ds1 guidel9es1 & policies = use by ! private sector2 & 7#aa7 en=c+ o!r privacy /atutes & rules z au?oriz$ by ,congress4 #aj4 ,rulemak+ au?ority 7a7 ,9 g5]al ,! ,ag5cy is au?oriz$ to ex]cise its au?orities "u ?is ,act to adm9i/]1 en=ce1 & o!rwise implem5t ! provisions ( ?is ,act & ,f$]al privacy law4 7b7 ,rulemak+1 ord]s1 & guidance 7#a7 ,g5]al au?ority ,! ,director may prescribe rules & issue ord]s & guidance1 z may be necess>y or appropriate to enable ! ,ag5cy to adm9i/] & c>ry out ! purposes & objectives ( ?is ,act & o!r ,f$]al privacy laws1 & to prev5t evasions ( ?is ,act & o!r ,f$]al privacy laws4 7#b7 ,regulations ,! ,ag5cy %all issue su* regulations1 aft] notice & comm5t 9 accordance ) section #eec ( title #e1 ,unit$ ,/ates ,code1 z may be necess>y to c>ry out ?is ,act4 ,! ,ag5cy %all prescribe rules applicable to a data aggregator or s]vice provid] id5tify+-- 7,a7 high-risk data practices 9 connection ) ! collection1 process+1 or %>+ ( p]sonal data1 :i* may include requirem5ts = ! purpose ( audit+1 prev5t+1 or re/rict+ su* acts or practices2 7,b7 acts or practices 9 connection ) ! collection1 process+1 or %>+ ( p]sonal data t causes or are likely to cause privacy h>m to individuals or gr\ps ( individuals1 :i* may include requirem5ts = ! purpose ( prev5t+ or re/rict+ su* acts or practices2 7,c7 unlawful1 unfair1 deceptive1 abusive1 or discrim9atory acts or practices 9 connection ) ! collection1 process+1 or %>+ ( p]sonal data1 :i* may include requirem5ts = ! purpose ( prev5t+ or re/rict+ su* acts or practices1 = ! purpose ( prev5t+ disp>ate impacts on ! basis ( protect$ class1 or = ! purpose ( affirmatively fur!r+ equal opportunity2 7,d7 rights t data aggregators mu/ provide to individuals1 includ+ ! "r to access & correct1 limit ! process+ (1 & reque/ deletion ( ! individual's p]sonal data2 & 7,e7 obligations on data aggregators1 includ+ transp>5cy ab\t bus9ess practices1 data collection limitations1 process+ & disclosure limitations1 purpose specification & legal basis = process+ requirem5ts1 acc\ntability requirem5ts1 confid5tiality & security requirem5ts1 & data accuracy requirem5ts4 7#c7 ,no limitation ,rules prescrib$ "u ?is section %all n limit ! au?ority ( ! ,ag5cy to adm9i/]1 en=ce1 & o!rwise implem5t ! provisions ( ?is ,act & ,f$]al privacy law4 7#d7 ,/&>ds = rulemak+ ,9 prescrib+ a rule "u ?is ,act or ,f$]al privacy laws-- 7,a7 ! ,ag5cy %all consid] ! impact ( propos$ rules on an individual or gr\ps ( individuals2 7,b7 ! ,ag5cy may provide t a rule %all only apply to a subcategory ( data aggregators1 z def9$ by ! ,ag5cy2 & 7,c7 ! ,ag5cy %all consult ) civil society gr\ps & memb]s ( ! public4 7#e7 ,rule ( con/ruction ,no?+ 9 ?is p>agraph may be con/ru$ to require ! ,ag5cy to engage 9 co/-b5efit analysis or submit a rulemak+ = review to ! ,presid5t or ! ,(fice ( ,managem5t & ,budget4 7#f7 ,/&>d = review ,if ?is ,act is sil5t or ambigu\s1 & ! ,ag5cy has foll[$ ! proc$ures 9 section #eec or #eed ( title #e1 ,unit$ ,/ates ,code1 z applicable1 a review+ c\rt %all def] to ! ,ag5cy's reasonable or p]missible int]pretation ( ?is ,act4 7c7 ,monitor+ ,9 ord] to support its rulemak+ & o!r functions1 ! ,ag5cy %all monitor = risks to individuals or gr\ps ( individuals 9 ! collection1 process+1 or %>+ ( p]sonal data4 #aa4 ,sup]vision ( data aggregators 7a7 ,9 g5]al ,a l>ge data aggregator is a data aggregator t satisfies "o or m ( ! foll[+ ?re%olds3 7#a7 ,! data aggregator has annual gross rev5ues t exce$ #be1jjj1jjj4 7#b7 ,! data aggregator annually collects1 uses1 or %>es1 alone or 9 comb9ation1 ! p]sonal data ( #ej1jjj or m individuals1 h\seholds1 or devices4 7b7 ,sup]vision ,! ,ag5cy may require reports & conduct exam9ations on a p]iodic basis ( l>ge data aggregators describ$ 9 subsection 7a7 = purposes (-- 7#a7 assess+ compliance ) ! requirem5ts ( ?is ,act1 rules & ord]s issu$ by ! ,ag5cy1 or o!r ,f$]al privacy laws2 7#b7 obta9+ in=mation ab\t ! activities subject to su* laws & ! associat$ compliance sy/ems or proc$ures ( su* entities2 7#c7 detect+ & assess+ associat$ risks to individuals & gr\ps ( individuals2 & 7#d7 requir+ & ov]see+ high-risk data practice risk impact assessm5ts & high-risk data practice impact evaluations to advance fair & j data practices4 7c7 ,publicly accessible li/ ,! ,ag5cy %all ma9ta9 a publicly accessible li/ ( data aggregators t collect1 process1 or %>e p]sonal data ( m ?an #aj1jjj p]sons or h\seholds1 & ! p]missible purposes = :i* ! data aggregators purport to collect p]sonal data4 7d7 ,m]g] review ,! ,ag5cy %all conduct a review & submit to ! ,f$]al ,trade ,commission & ,dep>tm5t ( ,ju/ice a report on ! privacy & data protection implications (-- 7#a7 any m]g] involv+ a data aggregator describ$ 9 subsection 7a72 or 7#b7 any m]g] t proposes ! transf] ( p]sonal data ( #ej1jjj or m individuals4 #ab4 ,prohibit$ acts ,x %all be unlawful =-- 7#a7 any data aggregator or s]vice provid] to commit any act or omission 9 violation ( ?is ,act1 ,f$]al privacy law1 or any rule or ord] issu$ by ! ,ag5cy "u ?is ,act2 7#b7 any data aggregator or s]vice provid] to commit any unlawful1 unfair1 deceptive1 abusive1 or discrim9atory acts or practices 9 connection ) ! collection1 process+1 or %>+ ( p]sonal data2 7#c7 any data aggregator or s]vice provid] to fail or refuse z requir$ by ?is ,act or ,f$]al privacy law1 or any rule or ord] issu$ by ! ,ag5cy !reund]-- 7,a7 to p]mit access to or copy+ ( records2 7,b7 to e/abli% or ma9ta9 records2 or 7,c7 to make reports or provide in=mation to ! ,ag5cy2 7#d7 any p]son to kn[+ly or recklessly provide sub/antial assi/ance to a data aggregator or s]vice provid] 9 violation ( ?is ,act or ,f$]al privacy law1 or any rule or ord] issu$ !reund]1 & not)/&+ any provision ( ?is ,act1 ! provid] ( su* sub/antial assi/ance %all be deem$ to be 9 violation ( ?is ,act or ,f$]al privacy law to ! same ext5t z ! p]son to :om sub/antial assi/ance is provid$2 or 7#e7 any p]son1 data aggregator1 or s]vice provid] to re-id5tify1 or attempt to re-id5tify1 an individual1 h\sehold1 or device f anonymiz$ data1 unless su* p]son1 data aggregator1 or s]vice provid] is conduct+ au?oriz$ te/+ to prove p]sonal data has be5 anonymiz$4 #ac4 ,en=cem5t p[]s 7a7 ,def9itions ,= purposes ( ?is section1 ! foll[+ def9itions %all apply3 7#a7 ,ag5cy inve/igation ,! t]m ,ag5cy inve/igation means any inquiry conduct$ by an ,ag5cy inve/igator = ! purpose ( asc]ta9+ :e!r any p]son is or has be5 engag$ 9 any conduct t is a violation1 z def9$ 9 ?is section4 7#b7 ,ag5cy inve/igator ,! t]m ,ag5cy inve/igator means any attorney or inve/igator employ$ by ! ,ag5cy :o is *>g$ ) ! duty ( en=c+ or c>ry+ into effect ?is ,act any o!r ,f$]al privacy law4 7#c7 ,cu/odian ,! t]m cu/odian means ! cu/odian or any deputy cu/odian designat$ by ! ,ag5cy4 7#d7 ,docum5t>y mat]ial ,! t]m docum5t>y mat]ial includes ! orig9al or any copy ( any book1 docum5t1 record1 report1 memor&um1 pap]1 communication1 tabulation1 *>t1 logs1 electronic files1 or o!r data or data compilations /or$ 9 any m$ium4 7#e7 ,violation ,! t]m violation means any act or omission t1 if prov$1 w\ld con/itute a violation ( any provision ( ?is ,act or any o!r ,f$]al privacy law4 7b7 ,inve/igations & adm9i/rative discov]y 7#a7 ,jo9t inve/igations 7,a7 ,9 g5]al ,! ,ag5cy or1 :]e appropriate1 an ,ag5cy inve/igator1 may engage 9 jo9t inve/igations & reque/s = in=mation1 z au?oriz$ "u ?is ,act4 7,b7 ,civil rights ,! au?ority "u subp>agraph 7,a7 includes matt]s relat+ to protection ( individuals' civil rights "u ?is ,act & jo9t inve/igations )1 & reque/s = in=mation f1 ! ,director ( ! ,bureau ( ,consum] ,f9ancial ,protection1 ! ,f$]al ,trade ,commission1 ! ,secret>y ( ,h\s+ & ,urban ,developm5t1 ! ,dep>tm5t ( ,education1 ! ,equal ,employm5t ,opportunity ,commission1 ! ,dep>tm5t ( ,heal? & ,human ,s]vices1 or ! ,attorney ,g5]al4 7#b7 ,subpo5as 7,a7 ,9 g5]al ,! ,ag5cy or an ,ag5cy inve/igator may issue subpo5as = ! att5dance & te/imony ( witnesses & ! production ( relevant pap]s1 books1 docum5ts1 or o!r mat]ial 9 connection ) he>+s "u ?is ,act4 7,b7 ,failure to obey ,9 ! case ( contumacy or refusal to obey a subpo5a issu$ pursuant to ?is subp>agraph & s]v$ ^u any p]son1 ! di/rict c\rt ( ! ,unit$ ,/ates = any di/rict 9 :i* su* p]son is f\nd1 resides1 or transacts bus9ess1 ^u application by ! ,ag5cy or an ,ag5cy inve/igator & aft] notice to su* p]son1 may issue an ord] requir+ su* p]son to appe> & give te/imony or to appe> & produce docum5ts or o!r mat]ial4 7,c7 ,contempt ,any failure to obey an ord] ( ! c\rt "u ?is subp>agraph may be puni%$ by ! c\rt z a contempt !re(4 7#c7 ,dem&s 7,a7 ,9 g5]al ,:5ev] ! ,ag5cy has reason to believe t any p]son may be 9 possession1 cu/ody1 or control ( any docum5t>y mat]ial or tangible ?+s1 or may h any in=mation1 relevant to a violation1 ! ,ag5cy may1 be=e ! in/itution ( any proce$+s "u ?is ,act1 issue 9 writ+1 & cause to be s]v$ ^u su* p]son1 a civil inve/igative dem& requir+ su* p]son to-- 7i7 produce su* docum5t>y mat]ial = inspection & copy+ or reproduction 9 ! =m or m$ium reque/$ by ! ,ag5cy2 7ii7 submit su* tangible ?+s2 7iii7 file writt5 reports or answ]s to que/ions2 7iv7 give oral te/imony conc]n+ docum5t>y mat]ial1 tangible ?+s1 or o!r in=mation2 or 7v7 furni% any comb9ation ( su* mat]ial1 answ]s1 or te/imony4 7,b7 ,requirem5ts ,ea* civil inve/igative dem& %all /ate ! nature ( ! conduct con/itut+ ! alleg$ violation :i* is "u inve/igation & ! provision ( law applicable to su* violation4 7,c7 ,production ( docum5ts ,ea* civil inve/igative dem& = ! production ( docum5t>y mat]ial %all-- 7i7 describe ea* class ( docum5t>y mat]ial to be produc$ "u ! dem& ) su* def9it5ess & c]ta9ty z to p]mit su* mat]ial to be fairly id5tifi$2 7ii7 prescribe a return date or dates :i* w provide a reasonable p]iod ( "t )9 :i* ! mat]ial s dem&$ may be assembl$ & made available = inspection & copy+ or reproduction2 & 7iii7 id5tify ! cu/odian to :om su* mat]ial %all be made available4 7,d7 ,production ( ?+s ,ea* civil inve/igative dem& = ! submission ( tangible ?+s %all-- 7i7 describe ea* class ( tangible ?+s to be submitt$ "u ! dem& ) su* def9it5ess & c]ta9ty z to p]mit su* ?+s to be fairly id5tifi$2 7ii7 prescribe a return date or dates :i* w provide a reasonable p]iod ( "t )9 :i* ! ?+s s dem&$ may be assembl$ & submitt$2 & 7iii7 id5tify ! cu/odian to :om su* ?+s %all be submitt$4 7,e7 ,dem& = writt5 reports or answ]s ,ea* civil inve/igative dem& = writt5 reports or answ]s to que/ions %all-- 7i7 prop\nd ) def9it5ess & c]ta9ty ! reports to be produc$ or ! que/ions to be answ]$2 7ii7 prescribe a date or dates at :i* "t writt5 reports or answ]s to que/ions %all be submitt$2 & 7iii7 id5tify ! cu/odian to :om su* reports or answ]s %all be submitt$4 7,f7 ,oral te/imony ,ea* civil inve/igative dem& = ! giv+ ( oral te/imony %all-- 7i7 prescribe a date1 "t1 & place at :i* oral te/imony %all be comm5c$2 & 7ii7 id5tify an ,ag5cy inve/igator :o %all conduct ! inve/igation & ! cu/odian to :om ! transcript ( su* inve/igation %all be submitt$4 7,g7 ,s]vice ,any civil inve/igative dem& issu$1 & any en=cem5t petition fil$1 "u ?is p>agraph may be s]v$-- 7i7 by any ,ag5cy inve/igator at any place )9 ! t]ritorial jurisdiction ( any c\rt ( ! ,unit$ ,/ates2 & 7ii7 ^u any p]son :o is n f\nd )9 ! t]ritorial jurisdiction ( any c\rt ( ! ,unit$ ,/ates-- 7,i7 9 su* mann] z ! ,f$]al ,rules ( ,civil ,proc$ure prescribe = s]vice 9 a =eign nation2 & 7,,ii7 to ! ext5t t ! c\rts ( ! ,unit$ ,/ates h au?ority to ass]t jurisdiction ov] su* p]son1 consi/5t ) due process1 ! ,unit$ ,/ates ,di/rict ,c\rt = ! ,di/rict ( ,columbia %all h ! same jurisdiction to take any action respect+ compliance ) ?is section by su* p]son t su* di/rict c\rt w\ld h if su* p]son 7 p]sonally )9 ! jurisdiction ( su* di/rict c\rt4 7,h7 ,me?od ( s]vice ,s]vice ( any civil inve/igative dem& or any en=cem5t petition fil$ "u ?is p>agraph may be made ^u a p]son1 includ+ any legal entity1 by-- 7i7 deliv]+ a duly execut$ copy ( su* dem& or petition to ! individual or to any p>tn]1 executive (fic]1 manag+ ag5t1 or g5]al ag5t ( su* p]son1 or to any ag5t ( su* p]son au?oriz$ by appo9tm5t or by law to receive s]vice ( process on behalf ( su* p]son2 7ii7 deliv]+ a duly execut$ copy ( su* dem& or petition to ! pr9cipal (fice or place ( bus9ess ( ! p]son to be s]v$2 or 7iii7 deposit+ a duly execut$ copy 9 ! ,unit$ ,/ates mails1 by regi/]$ or c]tifi$ mail1 return receipt reque/$1 duly address$ to su* p]son at ! pr9cipal (fice or place ( bus9ess ( su* p]son4 7,i7 ,pro( ( s]vice 7i7 ,9 g5]al ,a v]ifi$ return by ! individual s]v+ any civil inve/igative dem& or any en=cem5t petition fil$ "u ?is p>agraph sett+ =? ! mann] ( su* s]vice %all be pro( ( su* s]vice4 7ii7 ,return receipts ,9 ! case ( s]vice by regi/]$ or c]tifi$ mail1 su* return %all be accompani$ by ! return po/ (fice receipt ( deliv]y ( su* dem& or en=cem5t petition4 7,j7 ,production ( docum5t>y mat]ial ,! production ( docum5t>y mat]ial 9 response to a civil inve/igative dem& %all be made "u a sworn c]tificate1 9 su* =m z ! dem& designates1 by ! p]son1 if a natural p]son1 to :om ! dem& is direct$ or1 if n a natural p]son1 by any p]son hav+ k ( ! facts & circum/ances relat+ to su* production1 to ! effect t all ( ! docum5t>y mat]ial requir$ by ! dem& & 9 ! possession1 cu/ody1 or control ( ! p]son to :om ! dem& is direct$ has be5 produc$ & made available to ! cu/odian4 7,k7 ,submission ( tangible ?+s ,! submission ( tangible ?+s 9 response to a civil inve/igative dem& %all be made "u a sworn c]tificate1 9 su* =m z ! dem& designates1 by ! p]son to :om ! dem& is direct$ or1 if n a natural p]son1 by any p]son hav+ k ( ! facts & circum/ances relat+ to su* production1 to ! effect t all ( ! tangible ?+s requir$ by ! dem& & 9 ! possession1 cu/ody1 or control ( ! p]son to :om ! dem& is direct$ h be5 submitt$ to ! cu/odian4 7,l7 ,sep>ate answ]s ,ea* report+ requirem5t or "q 9 a civil inve/igative dem& %all be answ]$ sep>ately & fully 9 writ+ "u oa?1 unless x is object$ to1 9 :i* ev5t ! reasons = ! objection %all be /at$ 9 lieu ( an answ]1 & x %all be submitt$ "u a sworn c]tificate1 9 su* =m z ! dem& designates1 by ! p]son1 if a natural p]son1 to :om ! dem& is direct$ or1 if n a natural p]son1 by any p]son responsible = answ]+ ea* report+ requirem5t or "q1 to ! effect t all in=mation requir$ by ! dem& & 9 ! possession1 cu/ody1 control1 or k ( ! p]son to :om ! dem& is direct$ has be5 submitt$4 7,m7 ,te/imony 7i7 ,9 g5]al 7,i7 ,oa? & recordation ,! exam9ation ( any p]son pursuant to a dem& = oral te/imony s]v$ "u ?is p>agraph %all be tak5 be=e an (fic] au?oriz$ to adm9i/] oa?s & affirmations by ! laws ( ! ,unit$ ,/ates or ( ! place at :i* ! exam9ation is held4 ,! (fic] be=e :om oral te/imony is to be tak5 %all put ! witness on oa? or affirmation & %all p]sonally1 or by any individual act+ "u ! direction ( & 9 ! pres5ce ( ! (fic]1 record ! te/imony ( ! witness4 7,,ii7 ,transcription ,! te/imony %all be tak5 /5ographically & transcrib$4 7,,iii7 ,transmission to cu/odian ,aft] ! te/imony is fully transcrib$1 ! (fic] inve/igator be=e :om ! te/imony is tak5 %all promptly transmit a copy ( ! transcript ( ! te/imony to ! cu/odian4 7ii7 ,p>ties pres5t ,any ,ag5cy inve/igator be=e :om oral te/imony is to be tak5 %all exclude f ! place :]e ! te/imony is to be tak5 all o!r p]sons1 except ! p]son giv+ ! te/imony1 ! attorney = t p]son1 ! (fic] be=e :om ! te/imony is to be tak51 an inve/igator or repres5tative ( an ag5cy ) :i* ! ,ag5cy is engag$ 9 a jo9t inve/igation1 & any /5ograph] tak+ su* te/imony4 7iii7 ,location ,! oral te/imony ( any p]son tak5 pursuant to a civil inve/igative dem& %all be tak5 9 ! judicial di/rict ( ! ,unit$ ,/ates 9 :i* su* p]son resides1 is f\nd1 or transacts bus9ess1 or 9 su* o!r place z may be agre$ ^u by ! ,ag5cy inve/igator be=e :om ! oral te/imony ( su* p]son is to be tak5 & su* p]son4 7iv7 ,attorney repres5tation 7,i7 ,9 g5]al ,any p]son compell$ to appe> "u a civil inve/igative dem& = oral te/imony pursuant to ?is section may be accompani$1 repres5t$1 & advis$ by an attorney4 7,,ii7 ,au?ority ,! attorney may advise a p]son describ$ 9 subclause 7,i71 9 confid5ce1 ei!r ^u ! reque/ ( su* p]son or ^u ! initiative ( ! attorney1 ) respect to any "q ask$ ( su* p]son4 7,,iii7 ,objections ,a p]son describ$ 9 subclause 7,i71 or ! attorney = t p]son1 may object on ! record to any "q1 9 :ole or 9 "p1 & su* p]son %all briefly /ate = ! record ! reason = ! objection4 ,an objection may prop]ly be made1 receiv$1 & ent]$ ^u ! record :5 x is claim$ t su* p]son is entitl$ to refuse to answ] ! "q on gr\nds ( any con/itutional or o!r legal "r or privilege1 includ+ ! privilege aga9/ self-incrim9ation1 b su* p]son %all n o!rwise object to or refuse to answ] any "q1 & su* p]son or attorney %all n o!rwise int]rupt ! oral exam9ation4 7,,iv7 ,refusal to answ] ,if a p]son describ$ 9 subclause 7,i7 refuses to answ] any "q-- 7aa7 ! ,ag5cy may petition ! di/rict c\rt ( ! ,unit$ ,/ates pursuant to ?is section = an ord] compell+ su* p]son to answ] su* "q2 & 7bb7 if ! refusal is on gr\nds ( ! privilege aga9/ self-incrim9ation1 ! te/imony ( su* p]son may be compell$ 9 accordance ) ! provisions ( section #fjjd ( title #ah1 ,unit$ ,/ates ,code4 7v7 ,transcripts ,= purposes ( ?is p>agraph-- 7,i7 aft] ! te/imony ( any witness is fully transcrib$1 ! ,ag5cy inve/igator %all af=d ! witness 7:o may be accompani$ by an attorney7 a reasonable opportunity to exam9e ! transcript2 7,,ii7 ! transcript %all be read to or by ! witness1 unless su* exam9ation & read+ are waiv$ by ! witness2 7,,iii7 any *anges 9 =m or sub/ance :i* ! witness desires to make %all be ent]$ & id5tifi$ ^u ! transcript by ! ,ag5cy inve/igator1 ) a /atem5t ( ! reasons giv5 by ! witness = mak+ su* *anges2 7,,iv7 ! transcript %all be sign$ by ! witness1 unless ! witness 9 writ+ waives ! sign+1 is ill1 _c be f\nd1 or refuses to sign2 & 7,v7 if ! transcript is n sign$ by ! witness dur+ ! #cj-;day p]iod foll[+ ! date on :i* ! witness is fir/ af=d$ a reasonable opportunity to exam9e ! transcript1 ! ,ag5cy inve/igator %all sign ! transcript & /ate on ! record ! fact ( ! waiv]1 illness1 abs5ce ( ! witness1 or ! refusal to sign1 toge!r ) any reasons giv5 = ! failure to sign4 7vi7 ,c]tification by inve/igator ,! ,ag5cy inve/igator %all c]tify on ! transcript t ! witness 0 duly sworn by him or h] & t ! transcript is a true record ( ! te/imony giv5 by ! witness1 & ! ,ag5cy inve/igator %all promptly deliv] ! transcript or s5d x by regi/]$ or c]tifi$ mail to ! cu/odian4 7vii7 ,copy ( transcript ,! ,ag5cy inve/igator %all furni% a copy ( ! transcript 7^u paym5t ( reasonable *>ges = ! transcript7 to ! witness only1 except t ! ,ag5cy may = good cause limit su* witness to inspection ( ! (ficial transcript ( 8 te/imony4 7viii7 ,witness fees ,any witness appe>+ = ! tak+ ( oral te/imony pursuant to a civil inve/igative dem& %all be entitl$ to ! same fees & mileage :i* are paid to witnesses 9 ! di/rict c\rts ( ! ,unit$ ,/ates4 7#d7 ,confid5tial treatm5t ( dem& mat]ial 7,a7 ,9 g5]al ,docum5t>y mat]ials & tangible ?+s receiv$ z a result ( a civil inve/igative dem& %all be subject to requirem5ts & proc$ures reg>d+ confid5tiality1 9 accordance ) rules e/abli%$ by ! ,ag5cy4 7,b7 ,disclosure to congress ,no rule e/abli%$ by ! ,ag5cy reg>d+ ! confid5tiality ( mat]ials submitt$ to1 or o!rwise obta9$ by1 ! ,ag5cy %all be int5d$ to prev5t disclosure to ei!r ,h\se ( ,congress or to an appropriate committee ( ! ,congress1 except t ! ,ag5cy is p]mitt$ to adopt rules all[+ prior notice to any p>ty t owns or o!rwise provid$ ! mat]ial to ! ,ag5cy & _h designat$ su* mat]ial z confid5tial4 7#e7 ,petition = en=cem5t 7,a7 ,9 g5]al ,:5ev] any p]son fails to comply ) any civil inve/igative dem& duly s]v$ ^u su* p]son "u ?is section1 or :5ev] satisfactory copy+ or reproduction ( mat]ial reque/$ pursuant to ! dem& _c be accompli%$ & su* p]son refuses to surr5d] su* mat]ial1 ! ,ag5cy1 ?r\gh su* (fic]s or attorneys z x may designate1 may file1 9 ! di/rict c\rt ( ! ,unit$ ,/ates = any judicial di/rict 9 :i* su* p]son resides1 is f\nd1 or transacts bus9ess1 & s]ve ^u su* p]son1 a petition = an ord] ( su* c\rt = ! en=cem5t ( ?is p>agraph4 7,b7 ,s]vice ( process ,all process ( any c\rt to :i* application may be made z provid$ 9 ?is subp>agraph may be s]v$ 9 any judicial di/rict4 7#f7 ,petition = ord] modify+ or sett+ aside dem& 7,a7 ,9 g5]al ,n lat] ?an #bj days aft] ! s]vice ( any civil inve/igative dem& ^u any p]son "u subp>agraph 7,b71 or at any "t be=e ! return date specifi$ 9 ! dem&1 :i*ev] p]iod is %ort]1 or )9 su* p]iod exce$+ #bj days aft] s]vice or 9 excess ( su* return date z may be prescrib$ 9 writ+1 subsequ5t to s]vice1 by any ,ag5cy inve/igator nam$ 9 ! dem&1 su* p]son may file ) ! ,ag5cy a petition = an ord] by ! ,ag5cy modify+ or sett+ aside ! dem&4 7,b7 ,compliance dur+ p5d5cy ,! "t p]mitt$ = compliance ) ! dem& 9 :ole or 9 "p1 z det]m9$ prop] & ord]$ by ! ,ag5cy1 %all n run dur+ ! p5d5cy ( a petition "u clause 7i7 at ! ,ag5cy1 except t su* p]son %all comply ) any portions ( ! dem& n s\ght to be modifi$ or set aside4 7,c7 ,specific gr\nds ,a petition "u subp>agraph 7,a7 %all specify ea* gr\nd ^u :i* ! petition] relies 9 seek+ relief1 & may be bas$ ^u any failure ( ! dem& to comply ) ! provisions ( ?is section1 or ^u any con/itutional or o!r legal "r or privilege ( su* p]son4 7#g7 ,cu/odial control ,at any "t dur+ :i* any cu/odian is 9 cu/ody or control ( any docum5t>y mat]ial1 tangible ?+s1 reports1 answ]s to que/ions1 or transcripts ( oral te/imony giv5 by any p]son 9 compliance ) any civil inve/igative dem&1 su* p]son may file1 9 ! di/rict c\rt ( ! ,unit$ ,/ates = ! judicial di/rict )9 :i* ! (fice ( su* cu/odian is situat$1 & s]ve ^u su* cu/odian1 a petition = an ord] ( su* c\rt requir+ ! p]=mance by su* cu/odian ( any duty impos$ ^u him by ?is section or rule promulgat$ by ! ,ag5cy4 7#h7 ,jurisdiction ( c\rt 7,a7 ,9 g5]al ,:5ev] any petition is fil$ 9 any di/rict c\rt ( ! ,unit$ ,/ates "u ?is p>agraph1 su* c\rt %all h jurisdiction to he> & det]m9e ! matt] s pres5t$1 & to ent] su* ord] or ord]s z may be requir$ to c>ry out ! provisions ( ?is section4 7,b7 ,appeal ,any f9al ord] ent]$ z describ$ 9 subp>agraph 7,a7 %all be subject to appeal pursuant to section #abia ( title #bh1 ,unit$ ,/ates ,code4 7c7 ,he>+s & adjudicatory proce$+s 7#a7 ,9 g5]al ,! ,ag5cy is au?oriz$ to conduct he>+s & adjudication proce$+s ) respect to any p]son 9 ! mann] prescrib$ by *apt] #e ( title #e1 ,unit$ ,/ates ,code 9 ord] to ensure or en=ce compliance )-- 7,a7 ! provisions ( ?is ,act & o!r ,f$]al privacy laws1 includ+ any rules prescrib$ by ! ,ag5cy "u ?is ,act & o!r ,f$]al privacy laws2 & 7,b7 any o!r ,f$]al privacy law t ! ,ag5cy is au?oriz$ to en=ce1 & any rules or ord] prescrib$ !reund]1 unless su* ,f$]al privacy law specifically limits ! ,ag5cy f conduct+ a he>+ or adjudication proce$+ & only to ! ext5t ( su* limitation4 7#b7 ,special rules = cease-&-desi/ proce$+s 7,a7 ,ord]s au?oriz$ 7i7 ,9 g5]al ,if1 9 ! op9ion ( ! ,ag5cy1 any data aggregator is engag+ or has engag$ 9 an activity t violates a law1 rule1 or any condition impos$ 9 writ+ on ! p]son by ! ,ag5cy1 ! ,ag5cy may issue & s]ve ^u ! data aggregator or s]vice provid] a notice ( *>ges 9 respect !re(4 7ii7 ,cont5t ( notice ,! notice "u clause 7i7 %all conta9 a /atem5t ( ! facts con/itut+ ! alleg$ violation or violations1 & %all fix a "t & place at :i* a he>+ w be held to det]m9e :e!r an ord] to cease & desi/ %\ld issue aga9/ ! data aggregator or s]vice provid]1 su* he>+ to be held n e>li] ?an #cj days nor lat] ?an #fj days aft] ! date ( s]vice ( su* notice1 unless an e>li] or a lat] date is set by ! ,ag5cy1 at ! reque/ ( any p>ty s s]v$4 7iii7 ,cons5t ,unless ! p>ty or p>ties s]v$ "u clause 7ii7 appe> at ! he>+ p]sonally or by a duly au?oriz$ repres5tative1 su* p]son %all be deem$ to h cons5t$ to ! issuance ( ! cease-&-desi/ ord]4 7iv7 ,proc$ure ,9 ! ev5t ( cons5t "u clause 7ii71 or if1 ^u ! record made at any su* he>+1 ! ,ag5cy f9ds t any violation specifi$ 9 ! notice ( *>ges has be5 e/abli%$1 ! ,ag5cy may issue & s]ve ^u ! data aggregator or s]vice provid] an ord] to cease & desi/ f ! violation or practice4 ,su* ord] may1 by provisions :i* may be m&atory or o!rwise1 require ! data aggregator or s]vice provid] to cease & desi/ f ! subject activity1 & to take affirmative action to correct ! conditions result+ f any su* violation4 7,b7 ,effectiv5ess ( ord] ,a cease-&-desi/ ord] %all become effective at ! expiration ( #cj days aft] ! date ( s]vice ( an ord] "u subp>agraph 7,a7 ^u ! data aggregator or s]vice provid] conc]n$ 7except 9 ! case ( a cease-&-desi/ ord] issu$ ^u cons5t1 :i* %all become effective at ! "t specifi$ !re971 & %all rema9 effective & en=ceable z provid$ !re91 except to su* ext5t z ! ord] is /ay$1 modifi$1 t]m9at$1 or set aside by action ( ! ,ag5cy or a review+ c\rt4 7,c7 ,decision & appeal ,any he>+ provid$ = 9 ?is subsection %all be held 9 ! ,f$]al judicial di/rict or 9 ! t]ritory 9 :i* ! resid5ce or pr9cipal (fice or place ( bus9ess ( ! p]son is locat$ unless ! p]son cons5ts to ano!r place1 & %all be conduct$ 9 accordance ) ! provisions ( *apt] #e ( title #e ( ! ,unit$ ,/ates ,code4 ,aft] su* he>+1 & )9 #ij days aft] ! ,ag5cy has notifi$ ! p>ties t ! case has be5 submitt$ to ! ,ag5cy = f9al decision1 ! ,ag5cy %all r5d] its decision 7:i* %all include f9d+s ( fact ^u :i* its decision is pr$icat$7 & %all issue & s]ve ^u ea* p>ty to ! proce$+ an ord] or ord]s consi/5t ) ! provisions ( ?is section4 ,judicial review ( any su* ord] %all be exclusively z provid$ 9 ?is subsection4 ,unless a petition = review is timely fil$ 9 a c\rt ( appeals ( ! ,unit$ ,/ates1 z provid$ 9 subp>agraph 7,d71 & !reaft] until ! record 9 ! proce$+ has be5 fil$ z provid$ 9 subp>agraph 7,d71 ! ,ag5cy may at any "t1 ^u su* notice & 9 su* mann] z ! ,ag5cy %all det]m9e prop]1 modify1 t]m9ate1 or set aside any su* ord]4 ,^u fil+ ( ! record z provid$1 ! ,ag5cy may modify1 t]m9ate1 or set aside any su* ord] ) p]mission ( ! c\rt4 7,d7 ,appeal to c\rt ( appeals ,any p>ty to any proce$+ "u ?is subsection may obta9 a review ( any ord] s]v$ pursuant to ?is subp>agraph 7o!r ?an an ord] issu$ ) ! cons5t ( ! p]son conc]n$7 by ! fil+ 9 ! c\rt ( appeals ( ! ,unit$ ,/ates = ! circuit 9 :i* ! pr9cipal (fice ( ! cov]$ p]son is locat$1 or 9 ! ,unit$ ,/ates ,c\rt ( ,appeals = ! ,di/rict ( ,columbia ,circuit1 )9 #cj days aft] ! date ( s]vice ( su* ord]1 a writt5 petition pray+ t ! ord] ( ! ,ag5cy be modifi$1 t]m9at$1 or set aside4 ,a copy ( su* petition %all be =?) transmitt$ by ! cl]k ( ! c\rt to ! ,ag5cy1 & !reupon ! ,ag5cy %all file 9 ! c\rt ! record 9 ! proce$+1 z provid$ 9 section #baab ( title #bh ( ! ,unit$ ,/ates ,code4 ,^u ! fil+ ( su* petition1 su* c\rt %all h jurisdiction1 :i* ^u ! fil+ ( ! record %all except z provid$ 9 ! la/ s5t5ce ( subp>agraph 7,c7 be exclusive1 to affirm1 modify1 t]m9ate1 or set aside1 9 :ole or 9 "p1 ! ord] ( ! ,ag5cy4 ,review ( su* proce$+s %all be _h z provid$ 9 *apt] #g ( title #e ( ! ,unit$ ,/ates ,code4 ,! judgm5t & decree ( ! c\rt %all be f9al1 except t ! same %all be subject to review by ! ,supreme ,c\rt ( ! ,unit$ ,/ates1 ^u c]tior>i1 z provid$ 9 section #abed ( title #bh ( ! ,unit$ ,/ates ,code4 7,e7 ,no /ay ,! comm5cem5t ( proce$+s = judicial review "u clause 7iv7 %all n1 unless specifically ord]$ by ! c\rt1 op]ate z a /ay ( any ord] issu$ by ! ,ag5cy4 7#c7 ,special rules = tempor>y cease-&-desi/ proce$+s 7,a7 ,9 g5]al ,:5ev] ! ,ag5cy det]m9es t ! violation specifi$ 9 ! notice ( *>ges s]v$ ^u a data aggregator1 includ+ a s]vice provid]1 pursuant to p>agraph 7#b71 or ! cont9uation !re(1 is likely to cause ! p]son to be insolv5t or o!rwise prejudice ! int]e/s ( individuals be=e ! completion ( ! proce$+s conduct$ pursuant to p>agraph 7#b71 ! ,ag5cy may issue a tempor>y ord] requir+ ! data aggregator or s]vice provid] to cease & desi/ f any su* violation or practice & to take affirmative action to prev5t or rem$y su* insolv5cy or o!r condition p5d+ completion ( su* proce$+s4 ,su* ord] may include any requirem5t au?oriz$ "u ?is ,act4 ,su* ord] %all become effective ^u s]vice ^u ! data aggregator or s]vic] provid] &1 unless set aside1 limit$1 or susp5d$ by a c\rt 9 proce$+s au?oriz$ by clause 7ii71 %all rema9 effective & en=ceable p5d+ ! completion ( ! adm9i/rative proce$+s pursuant to su* notice & until su* "t z ! ,ag5cy %all dismiss ! *>ges specifi$ 9 su* notice1 or if a cease-&-desi/ ord] is issu$ aga9/ ! p]son1 until ! effective date ( su* ord]4 7,b7 ,appeal ,n lat] ?an #aj days aft] ! data aggregator or s]vice provid] conc]n$ has be5 s]v$ ) a tempor>y cease-&-desi/ ord]1 ! data aggregator or s]vice provid] may apply to ! ,unit$ ,/ates di/rict c\rt = ! judicial di/rict 9 :i* ! resid5ce or pr9cipal (fice or place ( bus9ess ( su* data aggregator or s]vic] provid] is locat$1 or ! ,unit$ ,/ates ,di/rict ,c\rt = ! ,di/rict ( ,columbia1 = an injunction sett+ aside1 limit+1 or susp5d+ ! en=cem5t1 op]ation1 or effectiv5ess ( su* ord] p5d+ ! completion ( ! adm9i/rative proce$+s pursuant to ! notice ( *>ges s]v$ ^u ! data aggregator or s]vic] provid] "u subp>agraph 7,b71 & su* c\rt %all h jurisdiction to issue su* injunction4 7,c7 ,incomplete or inaccurate records 7i7 ,tempor>y ord] ,if a notice ( *>ges s]v$ "u p>agraph 7#b7 specifies1 on ! basis ( p>ticul> facts & circum/ances1 t ! books & records ( a data aggregator or s]vice provid] are s incomplete or inaccurate t ! ,ag5cy is unable to det]m9e ! f9ancial condition ( t data aggregator or s]vice provid] or ! details or purpose ( any transaction or transactions t may h a mat]ial effect on ! f9ancial condition ( t p]son1 ! ,ag5cy may issue a tempor>y ord] requir+-- 7,i7 ! cessation ( any activity or practice :i* gave rise1 :e!r 9 :ole or 9 "p1 to ! incomplete or inaccurate /ate ( ! books or records2 or 7,,ii7 affirmative action to re/ore su* books or records to a complete & accurate /ate1 until ! completion ( ! proce$+s "u p>agraph 7#b77;,a74 7ii7 ,effective p]iod ,any tempor>y ord] issu$ "u clause 7i7-- 7,i7 %all become effective ^u s]vice2 & 7,,ii7 unless set aside1 limit$1 or susp5d$ by a c\rt 9 proce$+s "u subp>agraph 7,b71 %all rema9 9 effect & en=ceable until ! e>li] (-- 7aa7 ! completion ( ! proce$+ initiat$ "u p>agraph 7#b7 9 connection ) ! notice ( *>ges2 or 7bb7 ! date ! ,ag5cy det]m9es1 by exam9ation or o!rwise1 t ! books & records ( ! cov]$ p]son or s]vice provid] are accurate & reflect ! f9ancial condition !re(4 7#d7 ,special rules = en=cem5t ( ord]s 7,a7 ,9 g5]al ,! ,ag5cy may 9 its discretion apply to ! ,unit$ ,/ates di/rict c\rt )9 ! jurisdiction ( :i* ! pr9cipal (fice or place ( bus9ess ( ! p]son is locat$1 = ! en=cem5t ( any effective & out/&+ notice or ord] issu$ "u ?is section1 & su* c\rt %all h jurisdiction & p[] to ord] & require compliance h]e)4 7,b7 ,exception ,except z o!rwise provid$ 9 ?is subp>agraph1 no c\rt %all h jurisdiction to affect by injunction or o!rwise ! issuance or en=cem5t ( any notice or ord] or to review1 modify1 susp5d1 t]m9ate1 or set aside any su* notice or ord]4 7#e7 ,rules ,! ,ag5cy %all prescribe rules e/abli%+ su* proc$ures z may be necess>y to c>ry out ?is p>agraph4 7d7 ,litigation au?ority 7#a7 ,9 g5]al ,if any p]son violates ?is ,act1 a rule or ord] issu$ "u ?is ,act1 or a ,f$]al privacy law1 ! ,ag5cy may comm5ce a civil action aga9/ su* p]son to impose a civil p5alty or to seek all appropriate legal & equitable relief includ+ a p]man5t or tempor>y injunction z p]mitt$ by law4 7#b7 ,repres5tation ,! ,ag5cy may act 9 its own "n & ?r\gh its own attorneys 9 en=c+ any provision ( ?is ,act1 rules !reund]1 or any o!r law or regulation1 or 9 any action1 suit1 or proce$+ to :i* ! ,ag5cy is a p>ty4 7#c7 ,compromise ( actions ,! ,ag5cy may compromise or settle any action if su* compromise is approv$ by ! c\rt4 7#d7 ,notice to ! attorney g5]al 7,a7 ,9 g5]al ,:5 comm5c+ a civil action "u ?is ,act or any ,f$]al privacy law1 or any rule !reund]1 ! ,ag5cy %all notify ! ,attorney ,g5]al4 7,b7 ,notice & coord9ation 7i7 ,notice ( o!r actions ,9 addition to any notice requir$ "u subp>agraph 7,a71 ! ,ag5cy %all notify ! ,attorney ,g5]al conc]n+ any action1 suit1 or proce$+ to :i* ! ,ag5cy is a p>ty1 except an action1 suit1 or proce$+ t involves a violation ( ?is ,act or a ,f$]al privacy law4 7ii7 ,coord9ation ,9 ord] to avoid conflicts & promote consi/5cy reg>d+ litigation ( matt]s "u ,f$]al law1 ! ,attorney ,g5]al & ! ,ag5cy %all consult reg>d+ ! coord9ation ( inve/igations & proce$+s1 includ+ by negotiat+ an agreem5t = coord9ation by n lat] ?an #ahj days aft] ! designat$ transf] date4 ,! agreem5t "u ?is subclause %all include provisions to ensure t p>allel inve/igations & proce$+s involv+ ! ,f$]al privacy laws are conduct$ 9 a mann] t avoids conflicts & does n imp$e ! ability ( ! ,attorney ,g5]al to prosecute violations ( ,f$]al crim9al laws4 7iii7 ,rule ( con/ruction ,no?+ 9 ?is p>agraph %all be con/ru$ to limit ! au?ority ( ! ,ag5cy "u ?is title1 includ+ ! au?ority to int]pret ,f$]al privacy law 4 7#e7 ,appe>ance be=e ! supreme c\rt ,! ,ag5cy may repres5t itself 9 its own "n be=e ! ,supreme ,c\rt ( ! ,unit$ ,/ates1 if ! ,ag5cy makes a writt5 reque/ to ! ,attorney ,g5]al )9 ! #aj-;day p]iod t beg9s on ! date ( entry ( ! judgm5t t w\ld p]mit any p>ty to file a petition = writ ( c]tior>i1 & ! ,attorney ,g5]al concurs ) su* reque/ or fails to take action )9 #fj days ( ! reque/ ( ! ,ag5cy4 7#f7 ,=um ,any civil action br\ght "u a ,f$]al privacy law may be br\ght 9 a ,unit$ ,/ates di/rict c\rt or 9 any c\rt ( compet5t jurisdiction ( a ,/ate 9 a di/rict 9 :i* ! def5dant is locat$ or resides or is do+ bus9ess1 & su* c\rt %all h jurisdiction to enjo9 su* p]son & to require compliance ) any ,f$]al privacy law4 7#g7 ,"t = br++ action ,except z o!rwise p]mitt$ by law or equity1 no action may be br\ght "u ?is ,act or o!r ,f$]al privacy law m ?an #e ye>s aft] ! date ( discov]y ( ! violation to :i* an action relates4 7e7 ,relief available 7#a7 ,adm9i/rative proce$+s or c\rt actions 7,a7 ,jurisdiction ,! c\rt 7or ! ,ag5cy1 z ! case may be7 9 an action or adjudication proce$+ br\ght "u ?is ,act or a ,f$]al privacy law1 %all h jurisdiction to grant any appropriate legal or equitable relief ) respect to a violation ( ?is ,act or ,f$]al privacy law1 includ+ a violation ( a rule or ord] prescrib$ "u ?is ,act or ,f$]al privacy law4 7,b7 ,relief ,relief "u ?is section may include1 )\t limitation-- 7i7 rescission or re=mation ( contracts2 7ii7 refund ( moneys or return ( real prop]ty2 7iii7 re/itution2 7iv7 disgorgem5t ( any rev5ue1 data1 or te*nologies1 includ+ automat$ decision sy/ems1 data sets1 or algori?ms1 attributable to a violation ( ?is ,act1 ,f$]al privacy law1 or any rule or ord] issu$ by ! ,ag5cy "u ?is ,act2 7v7 paym5t ( damages or o!r monet>y relief2 7vi7 public notification reg>d+ ! violation1 includ+ ! co/s ( notification2 7vii7 limits on ! activities or functions ( ! p]son2 & 7viii7 civil money p5alties1 z set =? m fully 9 p>agraph 7#c74 7,c7 ,no exempl>y or punitive damages ,no?+ 9 ?is subp>agraph %all be con/ru$ z au?oriz+ ! imposition ( exempl>y or punitive damages 9 an action br\ght by ! ,ag5cy4 7#b7 ,recov]y ( co/s ,9 any action br\ght by ! ,ag5cy1 a ,/ate attorney g5]al1 or any ,/ate regulator to en=ce ?is ,act or any ,f$]al privacy law1 ! ,ag5cy1 ! ,/ate attorney g5]al1 or ! ,/ate regulator may recov] its co/s 9 connection ) prosecut+ su* action if ! ,ag5cy1 ! ,/ate attorney g5]al1 or ! ,/ate regulator is ! prevail+ p>ty 9 ! action4 7#c7 ,civil money p5alty 9 c\rt & adm9i/rative actions 7,a7 ,9 g5]al ,any p]son t violates1 ?r\gh any act or omission1 any provision ( ?is ,act or any ,f$]al privacy law %all =feit & pay a civil p5alty pursuant to ?is subp>agraph4 7,b7 ,p5alty am\nts 7i7 ,fir/ ti] ,= any violation ( a law1 rule1 or f9al ord] or condition impos$ 9 writ+ by ! ,ag5cy1 a civil p5alty may n exce$-- 7,i7 #e1jjj = ea* day dur+ :i* su* violation or failure to pay cont9ues2 or 7,,ii7 #ae1jjj = ea* day dur+ :i* su* violation or failure to pay cont9ues if su* violation involves ! p]sonal data ( individuals "u ! age ( #ac4 7ii7 ,second ti] ,not)/&+ clause 7i71 = any p]son t recklessly engages 9 a violation ( ?is ,act or any ,f$]al privacy law1 a civil p5alty may n exce$-- 7,i7 #be1jjj = ea* day dur+ :i* su* violation or failure to pay cont9ues2 or 7,,ii7 #ge1jjj = ea* day dur+ :i* su* violation or failure to pay cont9ues if su* violation involves ! p]sonal data ( individuals "u ! age ( #ac4 7iii7 ,?ird ti] ,not)/&+ clauses 7i7 & 7ii71 = any p]son t kn[+ly violates ?is ,act or any ,f$]al privacy law1 a civil p5alty may n exce$-- 7,i7 #a1jjj1jjj = ea* day dur+ :i* su* violation cont9ues2 or 7,,ii7 #c1jjj1jjj = ea* day dur+ :i* su* violation or failure to pay cont9ues if su* violation involves ! p]sonal data ( individuals "u ! age ( #ac4 7,c7 ,p5alties = re-id5tify+ data ,any p]son t re-id5tifies1 or attempts to re-id5tify1 anonymiz$ data %all be assess$ a ?ird ti] civil p5alty "u subp>agraph 7,b71 unless conduct+ au?oriz$ te/+ to prove p]sonal data has be5 anonymiz$4 7,d7 ,mitigat+ factors ,9 det]m9+ ! am\nt ( any p5alty assess$ "u subp>agraph 7,b71 ! ,ag5cy or ! c\rt %all take into acc\nt ! appropriat5ess ( ! p5alty ) respect to-- 7i7 ! size ( f9ancial res\rces & good fai? ( ! p]son *>g$2 7ii7 ! gravity ( ! violation or failure to pay2 7iii7 ! sev]ity ( ! risks or h>ms to individuals2 7iv7 ! hi/ory ( previ\s violations2 & 7v7 su* o!r matt]s z ju/ice may require4 7,e7 ,au?ority to modify or remit p5alty ,! ,ag5cy may compromise1 modify1 or remit any p5alty :i* may be assess$ or _h already be5 assess$ "u subp>agraph 7,b74 ,! am\nt ( su* p5alty1 :5 f9ally det]m9$1 %all be exclusive ( any sums ow$ by ! p]son to ! ,unit$ ,/ates 9 connection ) ! co/s ( ! proce$+1 & may be d$uct$ f any sums ow$ by ! ,unit$ ,/ates to ! p]son *>g$4 7,f7 ,notice & he>+ ,no civil p5alty may be assess$ "u ?is subsection ) respect to a violation ( ?is ,act or any ,f$]al privacy law1 unless-- 7i7 ! ,ag5cy gives notice & an opportunity = a he>+ to ! p]son accus$ ( ! violation2 or 7ii7 ! appropriate c\rt has ord]$ su* assessm5t & ent]$ judgm5t 9 favor ( ! ,ag5cy4 7f7 ,ref]rals = crim9al proce$+s ,if ! ,ag5cy obta9s evid5ce t any p]son1 dome/ic or =eign1 has engag$ 9 conduct t may con/itute a violation ( ,f$]al crim9al law1 ! ,ag5cy %all transmit su* evid5ce to ! ,attorney ,g5]al ( ! ,unit$ ,/ates1 :o may in/itute crim9al proce$+s "u appropriate law4 ,no?+ 9 ?is section affects any o!r au?ority ( ! ,ag5cy to disclose in=mation4 #ad4 ,transf]s ( functions 7a7 ,f$]al trade commission ,! au?ority ( ! ,f$]al ,trade ,commission "u a ,f$]al privacy law to prescribe rules1 issue guidel9es1 or conduct a /udy or issue a report m&at$ "u su* law %all be transf]r$ to ! ,ag5cy on ! transf] date4 ,no?+ 9 ?is ,act %all be con/ru$ to require a m&atory transf] ( any employee ( ! ,f$]al ,trade ,commission4 7b7 ,ag5cy au?ority 7#a7 ,9 g5]al ,! ,ag5cy %all h all p[]s & duties "u ! ,f$]al privacy laws to prescribe rules1 issue guidel9es1 or to conduct /udies or issue reports m&at$ by su* laws1 t 7 ve/$ 9 ! ,f$]al ,trade ,commission on ! day be=e ! transf] date4 7#b7 ,f$]al trade commission act ,! ,ag5cy may en=ce a rule prescrib$ "u ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 by ! ,f$]al ,trade ,commission ) respect to ! collection1 disclosure1 process+ & misuse ( p]sonal data4 7c7 ,au?ority ( ! f$]al trade commission ,no provision ( ?is ,act %all be con/ru$ z modify+1 limit+1 or o!rwise affect+ ! au?ority ( ! ,f$]al ,trade ,commission1 includ+ ! au?ority ) respect to l>ge data collectors describ$ 9 section #aa7;a77#a7 ( ?is ,act1 "u ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq471 or any o!r law1 o!r ?an ! au?ority "u a ,f$]al privacy law to prescribe rules1 issue (ficial guidel9es1 or conduct a /udy or issue a report m&at$ "u su* law4 7d7 ,au?ority ( ! bureau ( consum] f9ancial protection ,no provision ( ?is ,act %all be con/ru$ z modify+1 limit+1 or o!rwise affect+ ! au?ority ( ! ,bureau ( ,consum] ,f9ancial ,protection "u ! ,dodd-,frank ,wall ,/reet ,re=m & ,consum] ,protection ,act 7#ab ,u4,s4,c4 #ecja et seq47 or any o!r law4 #ae4 ,au?orization ( appropriations ,!re are au?oriz$ to be appropriat$ to ! ,ag5cy su* sums z may be necess>y to c>ry out ?is ,act4 #af4 ,relation to ,f$]al & ,/ate law 7a7 ,relation to /ate law 7#a7 ,rule ( con/ruction ,?is ,act may n be con/ru$ z annull+1 alt]+1 or affect+1 or exempt+ any p]son subject to ! provisions ( ?is title f comply+ )1 ! /atutes1 regulations1 ord]s1 or int]pretations 9 effect 9 any ,/ate1 except to ! ext5t t any su* provision ( law is inconsi/5t ) ! provisions ( ?is title1 & !n only to ! ext5t ( ! inconsi/5cy4 7#b7 ,great] protection "u /ate law ,= purposes ( ?is p>agraph1 a /atute1 regulation1 ord]1 or int]pretation 9 effect 9 any ,/ate is n inconsi/5t ) ! provisions ( ?is title if ! protection t su* /atute1 regulation1 ord]1 or int]pretation af=ds to individuals is great] ?an ! protection provid$ "u ?is ,act4 ,a det]m9ation reg>d+ :e!r a /atute1 regulation1 ord]1 or int]pretation 9 effect 9 any ,/ate is inconsi/5t ) ! provisions ( ?is title may be made by ! ,ag5cy on its own motion or 9 response to a nonfrivol\s petition initiat$ by any int]e/$ p]son4 7b7 ,relation to o!r provisions ( f$]al privacy laws t relate to /ate law ,no provision ( ?is ,act %all be con/ru$ z modify+1 limit+1 or sup]s$+ ! op]ation ( any provision ( a ,f$]al privacy law t relates to ! application ( a law 9 effect 9 any ,/ate ) respect to su* ,f$]al law4 7c7 ,pres]vation ( en=cem5t p[]s ( /ates ,! attorney g5]al 7or ! equival5t !re(7 ( any ,/ate may br+ a civil action 9 ! "n ( su* ,/ate 9 any di/rict c\rt ( ! ,unit$ ,/ates 9 t ,/ate or 9 ,/ate c\rt t is locat$ 9 t ,/ate & t has jurisdiction ov] ! def5dant1 to en=ce provisions ( ?is title or rules or ord]s issu$ "u ?is ,act1 & to secure rem$ies "u provisions ( ?is title or rem$ies o!rwise provid$ "u o!r law4 ,a ,/ate regulator may br+ a civil action or o!r appropriate proce$+ to en=ce ! provisions ( ?is title or rules or ord]s issu$ "u ?is ,act ) respect to any entity t is ,/ate-*>t]$1 incorporat$1 lic5s$1 or o!rwise au?oriz$ to d bus9ess "u ,/ate law 7except z provid$ 9 p>agraph 7#b771 & to secure rem$ies "u provisions ( ?is title or rem$ies o!rwise provid$ "u o!r provisions ( law ) respect to su* an entity4 7d7 ,pres]vation ( /ate au?ority 7#a7 ,/ate claims ,no provision ( ?is section %all be con/ru$ z alt]+1 limit+1 or affect+ ! au?ority ( a ,/ate attorney g5]al or any o!r regulatory or en=cem5t ag5cy or au?ority to br+ an action or o!r regulatory proce$+ aris+ solely "u ! law 9 effect 9 t ,/ate4 7#b7 ,/ate consum] protection1 privacy1 & data regulators ,no provision ( ?is title %all be con/ru$ z alt]+1 limit+1 or affect+ ! au?ority ( a ,/ate consum] protection1 data protection1 or privacy ag5cy 7or any ag5cy or (fice p]=m+ l functions7 "u ,/ate law to adopt rules1 initiate en=cem5t proce$+s1 or take any o!r action ) respect to a p]son regulat$ by su* commission or au?ority4 #ag4 ,inspector g5]al ,section #ab ( ! ,inspector ,g5]al ,act ( #aigh 7#e ,u4,s4,c4 ,app47 is am5d$-- 7#a7 9 p>agraph 7#a71 by ins]t+ ! ,director ( ! ,data ,protection ,ag5cy2 aft] ! ,presid5t ( ! ,export-,import ,bank22 & 7#b7 9 p>agraph 7#b71 by ins]t+ ! ,data ,protection ,ag5cy1 aft] ! ,export-,import ,bank14