,i  #aah? ,,congress  #a/ ,session  ,h4 
,r4 #cjde  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,may #b1 #bjbc ,mr4   
,cl\d introduc$ ! foll[+ bill2 :i* 0    
ref]r$ to ! ,committee on ,en]gy &      
,comm]ce  ,a ,,bill  ,to affirm us]     
own]%ip ( _! data1 prohibit entities f  
requir+ ! transf] or monetization (     
private data 9 ex*ange = s]vices1       
prohibit ! collection ( ?ird-p>ty       
contact in=mation )\t writt5 cons5t1 & =
 o!r purposes4  #a4 ,%ort title ,?is    
,act may be cit$ z ! ,y ,own ! ,data    
,act or ,,yoda4  #b4 ,f9d+s ,congress   
f9ds ! foll[+3  7#a7 ,gov]nm5ts exi/ to 
protect individual rights to life1      
lib]ty1 & prop]ty4  7#b7 ,! protection (
 civil lib]ties1 includ+ ! rights to    
private prop]ty & privacy f unw>rant$   
se>*es & seizures1 is "o ( ! hallm>ks ( 
a free society4  7#c7 ,x is appropriate 
= ,congress to enact laws to protect    
individuals f data collection by ?ird   
p>ties4  7#d7 ,data is ! prop]ty ( !    
us]1 z ! us] creates ! data4  7#e7 ,a   

us] ma9ta9s own]%ip ( ! data ( su* us]1 
ev5 :5 su* data is sold or leas$ ) !    
cons5t ( su* us]4  7#f7 ,te*nology %\ld 
emp[] ! individual & ! productivity ( ! 
individual4  7#g7 ,individuals %\ld h   
reasonable access to & use ( popul>ly   
available consum] te*nologies )\t       
abdicat+ ! rights ( su* individuals to  
privacy & anonymity4  #c4 ,prohibition  
on %>+ us] contacts )\t writt5 cons5t & 
cl>ify+ us] access to data  7a7         
,prohibition on access to us] contacts  
,x %all be unlawful = a cov]$ entity to 
ask a us] to %>e ! contacts or in=mation
 ab\t ! contacts ( ! us] unless ! us] & 
! contacts ( ! us] cons5t to su* use 9  
writ+4  7b7 ,access to1 & correction1   
deletion1 & portability (1 cov]$ data   
7#a7 ,9 g5]al ,subject to p>agraphs 7#b7
 & 7#c71 a cov]$ entity %all provide a  
us]1 imm$iately or z quickly z possible 
& 9 no case lat] ?an #ij days aft]      
receiv+ a v]ifi$ reque/ f ! us]1 ) !    
ability to reasonably-- 7,a7 access--   
7i7 if applicable1 a li/ ( ea* ?ird p>ty

 & s]vice provid] to :om ! cov]$ entity 
has transf]r$ or %>$ ! cov]$ data ( !   
us]2  7ii7 ! cov]$ data ( ! us]1 or an  
accurate repres5tation ( ! cov]$ data ( 
! us]1 includ+ data aggregation t is a  
readable summ>y1 t is held or has be5   
process$ by ! cov]$ entity or any s]vice
 provid] ( ! cov]$ entity2 &  7iii7 if a
 cov]$ entity transf]s cov]$ data1 a    
description ( ! cov]$ data t 0 transf]r$
 & ! purpose = :i* ! ?ird p>ty reque/$ !
 data2  7,b7 reque/ t ! cov]$ entity--  
7i7 correct mat]ial inaccuracies or     
mat]ially incomplete in=mation ) respect
 to ! cov]$ data ( ! us] t is ma9ta9$ by
 ! cov]$ entity2  7ii7 delete or        
de-id5tify cov]$ data ( ! us] t is or   
has be5 ma9ta9$ by ! cov]$ entity2      
7iii7 notify any s]vice provid] or ?ird 
p>ty to :i* ! cov]$ entity transf]r$ su*
 cov]$ data ( ! correct$ in=mation2 &   
7iv7 provide contact in=mation to ! us] 
( any s]vice provid] or ?ird p>ty t !   
cov]$ data ( ! us] 0 transf]r$ to s t ! 
us] may make reque/s describ$ 9 ?is     

subp>agraph2 &  7,c7 to ! ext5t t is    
te*nically feasible1 provide cov]$ data 
( ! us] t is or has be5 g5]at$ &        
submitt$ to ! cov]$ entity by ! us] &   
ma9ta9$ by ! cov]$ entity 9 a portable1 
/ructur$1 & ma*9e-readable =mat t is n  
subject to lic5s+ re/rictions4  7#b7    
,frequ5cy & co/ ( access ,a cov]$ entity
 %all--  7,a7 provide a us] ) !         
opportunity to ex]cise ! rights describ$
 9 p>agraph 7#a7 n less ?an twice 9 any 
#ab-mon? p]iod2 &  7,b7 fulfill !       
responsibilities describ$ 9 p>agraph    
7#a7 free ( *>ge4  7#c7 ,prohibition on 
retaliation ,a cov]$ entity %all provide
 ! same quality ( goods or s]vices1 at !
 same price or rate1 reg>dless ( :e!r a 
us] took an action describ$ "u p>agraph 
7#a74  7#d7 ,ret5tion ( data ,a cov]$   
entity t collects data on a us]'s br[s+ 
hi/ory or biometric data & in=mation    
%all delete ! data )9 #fj days aft] !   
date on :i* ! data 0 collect$4  7c7     
,data m9imization & contextuality  7#a7 
,collection & use ( in=mation ,a        

comm]cial data op]ator %all limit !     
collection & %>+ ( in=mation by !       
op]ator ) ?ird p>ties to :at is         
reasonably necess>y to provide a s]vice 
or conduct an activity t a consum] has  
reque/$ or is reasonably necess>y =     
fraud prev5tion4  7#b7 ,ret5tion (      
in=mation ,a comm]cial data op]ator t   
collects ! p]sonal in=mation ( a consum]
 %all limit ! use & ret5tion ( t        
in=mation to :at is reasonably necess>y 
to provide a s]vice or conduct an       
activity t a consum] has reque/$ or a   
relat$ op]ational purpose4 ,any data    
collect$ or reta9$ by a comm]cial data  
op]ator solely = security or fraud      
prev5tion may n be us$ = op]ational     
purposes4  7#c7 ,monetization           
,monetization ( p]sonal in=mation %all n
 be consid]$ reasonably necess>y to     
provide a s]vice or conduct an activity 
t a consum] has reque/$ or reasonably   
necess>y = security or fraud prev5tion4 
7d7 ,consum] *oice & control  7#a7      
,comm]cial data op]ator ,a comm]cial    

data op]ator %all provide a prom95tly & 
conspicu\sly display$ icon a us] may    
click to opt out ( data collection on e 
unique website1 mobile application1 or  
comput] application4  7#b7 ,cov]$       
entities ,)9 #b ye>s aft] ! date ( !    
enactm5t ( ?is ,act1 a cov]$ entity %all
 take reasonable /eps1 tak+ acc\nt (    
available te*nology1 to provide us]s !  
ability to directly delete ! cov]$ data 
collect$ by ! cov]$ entity4  7e7        
,default sett+s ,a cov]$ entity may     
require1 ?r\gh t]ms ( s]vice or o!rwise1
 t a us] mu/ cons5t to ! transf] ( cov]$
 data 9 ord] to use ! s]vice ( ! cov]$  
entity4  7f7 ,policies reg>d+ data f    
m9ors ,a cov]$ entity may n collect1    
reta91 or transf] ! cov]$ data ( a us]  
to a ?ird p>ty )\t affirmative cons5t f 
! p>5t or gu>dian ( ! us] if ! us] is   
bel[ ! age ( #ah ye>s old1 :]e          
te*nically feasible4  7g7 ,prohibition  
on track+ cookies )\t us] cons5t ,a     
comm]cial data op]ator--  7#a7 unless   
au?oriz$ by ! us]1 may n track cookies1 

includ+ on mobile applications2 &  7#b7 
%all provide ! same s]vices to us]s :o d
 n au?orize track+ cookies4  7h7        
,transp>5cy  7#a7 ,privacy notice ,a    
cov]$ entity %all provide us]s ) a cle>1
 compreh5sible1 accurate1 & cont9u\sly  
available privacy notice t-- 7,a7       
describes 9 detail ! in=mation collect$ 
by ! op]ator1 h[ t in=mation w\ld be    
us$1 & :e!r ! in=mation w\ld be sold or 
%>$ ) any ?ird p>ty2 &  7,b7 is #a1jjj  
words or less4  7#b7 ,report on use (   
in=mation requir$ ,if a us] all[s a     
comm]cial data op]ator to sell ! cov]$  
data ( ! us]1 ! comm]cial data op]ator  
%all provide ! us] ) an annual report   
reg>d+ ! types ( ?ird p>ties ) :om data 
has be5 %>$4 ,! report %all include a   
description ( :at in=mation has be5 %>$1
 = :at purpose in=mation is %>$1 & a li/
 ( ea* ?ird p>ty t receives data4  7i7  
,data security & brea* notification ,a  
cov]$ entity %all notify ea* us] 9 a    
timely mann] ( any data brea* ) respect 
to ! in=mation ( ! us] & provide any    

rem$y to comp5sate ! us] = ! brea* ( _! 
in=mation1 includ+ a cr$it protection   
s]vice1 fraud al]t1 & cr$it monitor+    
?r\gh cr$it report+ ag5cies4  7j7       
,en=cem5t  7#a7 ,en=cem5t by ! ,f$]al   
,trade ,commission  7,a7 ,unfair or     
deceptive acts or practices ,a violation
 ( ?is section %all be treat$ z a       
violation ( a regulation "u section     
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b77 reg>d+ unfair or     
deceptive acts or practices4  7,b7 ,p[]s
 ( ,commission ,! ,commission %all en=ce
 ?is section 9 ! same mann]1 by ! same  
means1 & ) ! same jurisdiction1 p[]s1 & 
duties z ?\gh all applicable t]ms &     
provisions ( ! ,f$]al ,trade ,commission
 ,act 7#ae ,u4,s4,c4 #da et seq47 7     
incorporat$ into & made a "p ( ?is ,act4
 ,any p]son :o violates ?is section %all
 be subject to ! p5alties & entitl$ to !
 privileges & immunities provid$ 9 !    
,f$]al ,trade ,commission ,act4  7#b7   
,effect on o!r laws ,no?+ 9 ?is section 

%all be con/ru$ 9 any way to limit !    
au?ority ( ! ,commission "u any o!r     
provision ( law or to limit !           
application ( any ,f$]al or ,/ate law4  
7#c7 ,en=cem5t by ,/ate attorneys g5]al 
7,a7 ,9 g5]al ,if ! *ief law en=cem5t   
(fic] ( a ,/ate1 or an (ficial or ag5cy 
designat$ by a ,/ate1 has reason to     
believe t any p]son has violat$ or is   
violat+ ?is section1 ! attorney g5]al1  
(ficial1 or ag5cy ( ! ,/ate1 9 addition 
to any au?ority x may h to br+ an action
 9 ,/ate c\rt "u its consum] protection 
law1 may br+ a civil action 9 any       
appropriate ,unit$ ,/ates di/rict c\rt  
or 9 any o!r c\rt ( compet5t            
jurisdiction1 includ+ a ,/ate c\rt1 to--
 7i7 enjo9 fur!r su* violation by su*   
p]son2  7ii7 en=ce compliance ) ?is     
section2  7iii7 obta9 civil p5alties2 & 
7iv7 obta9 damages1 re/itution1 or o!r  
comp5sation on behalf ( resid5ts ( !    
,/ate4  7,b7 ,notice & int]v5tion by !  
,f$]al ,trade ,commission ,! attorney   
g5]al ( a ,/ate %all provide prior      

writt5 notice ( any action "u           
subp>agraph 7,a7 to ! ,commission &     
provide ! ,commission ) a copy ( !      
compla9t 9 ! action1 except 9 any case 9
 :i* su* prior notice is n feasible1 9  
:i* case ! attorney g5]al %all s]ve su* 
notice imm$iately ^u in/itut+ su*       
action4 ,! ,commission %all h ! "r--    
7i7 to int]v5e 9 ! action2  7ii7 ^u s   
int]v5+1 to be he>d on all matt]s aris+ 
!re92 &  7iii7 to file petitions =      
appeal4  7,c7 ,limitation on ,/ate      
action :ile ,f$]al action is p5d+ ,if ! 
,commission has in/itut$ a civil action 
= violation ( ?is section1 no ,/ate     
attorney g5]al1 or (ficial or ag5cy ( a 
,/ate1 may br+ an action "u ?is p>agraph
 dur+ ! p5d5cy ( t action aga9/ any     
def5dant nam$ 9 ! compla9t ( !          
,commission = any violation ( ?is       
section alleg$ 9 ! compla9t4  7#d7      
,private "r ( action  7,a7 ,9 g5]al ,any
 individual alleg+ a violation ( ?is    
section or a regulation promulgat$ "u   
?is section may br+ a civil action 9 any

 ,f$]al or ,/ate c\rt ( compet5t        
jurisdiction aga9/ a cov]$ entity t has 
global annual gross rev5ues ( at lea/   
#ej1jjj1jjj4  7,b7 ,relief ,9 a civil   
action br\ght "u subp>agraph 7,a7 9 :i* 
! pla9tiff prevails1 ! c\rt may aw>d--  
7i7 #ajj to #gej p] violation2  7ii7    
reasonable attorney's fees & litigation 
co/s2 &  7iii7 any o!r relief1 includ+  
equitable or decl>atory relief1 t ! c\rt
 det]m9es appropriate4  7k7 ,def9itions 
,9 ?is section3  7#a7 ,comm]cial data   
op]ator ,! t]m comm]cial data op]ator   
means an entity act+ 9 its capacity z a 
consum] onl9e s]vices provid] or data   
brok] t-- 7,a7 g5]ates a mat]ial am\nt (
 rev5ue f ! use1 collection1 process+1  
sale1 or %>+ ( data g5]at$ by a us]2 &  
7,b7 has m ?an #ajj1jjj1jjj unique      
mon?ly visitors or us]s 9 ! ,unit$      
,/ates = a majority ( mon?s dur+ !      
previ\s #a-ye> p]iod4  7#b7 ,commission 
,! t]m ,commission means ! ,f$]al ,trade
 ,commission4  7#c7 ,cons5t ,! t]m      
cons5t means an affirmative act by an   

individual t cle>ly communicates ! in=m$
 au?orization ( ! individual = an act or
 practice4  7#d7 ,core function ,! t]m  
core function does n mean t>get$        
adv]tis+ or m>ket+4  7#e7 ,cov]$ data ,!
 t]m cov]$ data means individually1     
id5tifiable in=mation ab\t a us]        
collect$ onl9e1 includ+ any ( ! foll[+3 
7,a7 ,location in=mation t w\ld id5tify 
! physical address ( an individual4     
7,b7 ,telephone numb]4  7,c7 ,email     
address4  7,d7 ,social security numb] or
 o!r unique1 gov]nm5t-issu$ id5tifi]s4  
7,e7 ,nonpublic p]sonal in=mation 7z    
def9$ 9 section #eji ( !                
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhji774  7,f7 ,cont5t ( a p]sonal wire
 communication1 oral communication1 or  
electronic communication su* z email or 
direct messag+ ) respect to any entity t
 is n ! int5d$ recipi5t ( !             
communication4  7,g7 ,call detail       
records4  7,h7 ,web br[s+ hi/ory1       
application usage hi/ory1 & ! functional
 equival5t ( ei!r t is n aggregat$ data4

  7,i7 ,biometric data & in=mation1 su* 
z facial & voice recognition data4  7#f7
 ,cov]$ entity ,! t]m cov]$ entity means
 a comm]cial data brok] or l>ge onl9e   
op]ator t collects cov]$ data f a us]   
?r\gh an onl9e plat=m4  7#g7 ,data brok]
 ,! t]m data brok] means a cov]$ entity 
^: pr9cipal s\rce ( rev5ue is d]iv$ f   
process+ or transf]r+ ! cov]$ data (    
individuals ) :om ! entity does n h a   
direct relation%ip on behalf ( a ?ird   
p>ty = use by ! ?ird p>ty4  7#h7        
,de-id5tify ,! t]m de-id5tify means to  
sep>ate in=mation f ! us] or ,,ip       
address ! in=mation is associat$ )4     
7#i7 ,delete ,! t]m delete means to     
remove or de/roy in=mation s t !        
in=mation is n ma9ta9$ 9 human or       
ma*9e-readable =m & _c be retriev$ or   
us$ 9 su* =m 9 ! normal c\rse ( bus9ess4
  7#aj7 ,l>ge onl9e op]ator ,! t]m l>ge 
onl9e op]ator means any p]son t-- 7,a7  
provides an onl9e s]vice2 &  7,b7 has m 
?an #ajj1jjj1jjj au!nticat$ us]s ( an   
onl9e s]vice 9 any #cj-;day p]iod4      

7#aa7 ,monetization ,! t]m monetization 
means ! process ( collect+1 us+1 & /or+ 
data solely = economic b5efit4  7#ab7   
,us] ,! t]m us] means an individual     
resid+ 9 ! ,unit$ ,/ates :o uses a      
website t collects data & in=mation f ! 
us]4