,,ii  #aah? ,,congress  #a/ ,session    
,s4 #baba  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,june #bb1 #bjbc,mr4   
,cassidy 7= himself & ,mr4 ,oss(f7      
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to e/abli% a c5traliz$ sy/em  
to all[ individuals to reque/ !         
simultane\s deletion ( _! p]sonal       
in=mation across all data brok]s1 & =   
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,data ,elim9ation &    
,limit+ ,ext5sive ,track+ & ,ex*ange    
,act or ! ,,delete ,act4  #b4 ,data     
deletion requirem5ts  7a7 ,data brok]   
annual regi/ration  7#a7 ,9 g5]al  7,a7 
,regulations ,n lat] ?an #a ye> aft] !  
date ( enactm5t ( ?is section1 !        
,commission %all promulgate regulations 
to require any data brok] to-- 7i7 n    
lat] ?an #ah mon?s aft] ! date (        
enactm5t ( ?is section1 & annually      
!reaft]1 regi/] ) ! ,commission2 &  7ii7
 subject to subp>agraph 7,b71 provide ! 

foll[+ in=mation ) su* regi/ration3 7,i7
 ,! "n & prim>y physical1 email1 & uni=m
 res\rce locator 7,,url7 addresses ( !  
data brok]4  7,,ii7 ,if ! data brok]    
p]mits an individual to opt out ( ! data
 brok]'s collection or use ( p]sonal    
in=mation1 c]ta9 sales ( su* in=mation1 
or its databases-- 7aa7 ! me?od =       
reque/+ an opt-out2  7bb7 any           
limitations on ! type ( data collection1
 uses1 or sales = :i* an individual may 
opt-out2 &  7cc7 :e!r ! data brok]      
p]mits an individual to au?orize a ?ird 
p>ty to p]=m ! opt-out on ! individual's
 behalf4  7,,iii7 ,a response to a      
/&>diz$ =m 7z issu$ by ! ,commission7   
specify+ ! types ( in=mation ! data     
brok] collects or obta9s & ! s\rces f   
:i* ! data brok] obta9s data4  7,,iv7 ,a
 /atem5t z to :e!r ! data brok]         
implem5ts a cr$5tial+ process &1 if s1 a
 description ( t process4  7,v7 ,any    
additional in=mation or explanation !   
data brok] *ooses to provide conc]n+ its
 data collection practices4  7,,vi7 ,any

 o!r in=mation det]m9$ appropriate by ! 
,commission4  7,b7 ,con/ruction ,no?+ 9 
?is p>agraph %all be con/ru$ z requir+ a
 data brok] to disclose any in=mation t 
is a trade secret or confid5tial        
in=mation describ$ 9 section            
#eeb7;b77#d7 ( title #e1 ,unit$ ,/ates  
,code4  7#b7 ,public availability  7,a7 
,9 g5]al ,! ,commission %all make !     
in=mation describ$ 9 p>agraph 7#a77;,a7 
publicly available 9 a d[nloadable &    
ma*9e-readable =mat1 except 9 ! ev5t t !
 ,commission-- 7i7 det]m9es t ! risk (  
mak+ su* in=mation available is n 9 !   
int]e/ ( public safety or welf>e2 &     
7ii7 provides a ju/ification = su*      
det]m9ation4  7,b7 ,disclaim] ,!        
,commission %all include on ! website ( 
! ,commission a disclaim] t-- 7i7 !     
,commission _c confirm ! accuracy ( !   
responses provid$ by ! data brok]s 9 !  
regi/ration describ$ 9 p>agraph         
7#a77;,a72 &  7ii7 individuals may      
contact su* data brok]s at _! own risk4 
7b7 ,c5traliz$ data deletion sy/em  7#a7

 ,e/abli%m5t  7,a7 ,9 g5]al ,n lat] ?an 
#a ye> aft] ! date ( enactm5t ( ?is     
section1 ! ,commission %all promulgate  
regulations to e/abli% a c5traliz$ sy/em
 t-- 7i7 implem5ts & ma9ta9s reasonable 
security proc$ures & practices 7includ+ 
adm9i/rative1 physical1 & te*nical      
safegu>ds7 appropriate to ! nature ( !  
in=mation & ! purposes = :i* ! p]sonal  
in=mation w be us$1 to protect          
individuals' p]sonal in=mation f        
unau?oriz$ use1 disclosure1 access1     
de/ruction1 or modification2  7ii7 all[s
 an individual1 ?r\gh a s+le submission1
 to reque/ t e data brok] :o is regi/]$ 
"u subsection 7a7 & :o ma9ta9s any      
p]si/5t id5tifi]s 7z describ$ 9         
subp>agraph 7,b77iii77-- 7,i7 delete any
 p]sonal in=mation relat$ to su*        
individual held by su* data brok] or    
affiliat$ legal entity ( ! data brok]2 &
  7,,ii7 unless o!rwise specifi$ by !   
individual1 discont9ue any pres5t or    
future collection ( p]sonal in=mation   
relat$ to su* individual2 &  7iii7 all[s

 a regi/]$ data brok]1 prior to !       
collection ( any p]sonal in=mation t is 
ti$ to a p]si/5t id5tifi] = :i* a       
regi/ry exi/s1 to submit a qu]y to !    
c5traliz$ sy/em to confirm t ! p]si/5t  
id5tifi] is n subject to a deletion     
reque/ describ$ 9 clause 7ii74  7,b7    
,requirem5ts ,! c5traliz$ sy/em e/abli%$
 9 subp>agraph 7,a7 %all meet ! foll[+  
requirem5ts3 7i7 ,! c5traliz$ sy/em %all
 all[ an individual to reque/ ! deletion
 ( all p]sonal in=mation relat$ to su*  
individual & ! discont9uation ( any     
collection ( su* p]sonal in=mation      
relat$ to su* individual ?r\gh a s+le   
deletion reque/4  7ii7 ,! c5traliz$     
sy/em %all provide a /&>diz$ =m to all[ 
an individual to make su* reque/4  7iii7
 ,su* /&>diz$ =m %all include !         
individual's email1 phone numb]1        
physical address1 & any o!r p]si/5t     
id5tifi] det]m9$ by ! ,commission to aid
 9 ! deletion reque/4  7iv7 ,! c5traliz$
 sy/em %all automatically salt & ha% all
 submitt$ in=mation & all[ ! ,commission

 to ma9ta9 indep5d5t ha%$ regi/ries (   
ea* type ( in=mation obta9$ ?r\gh su*   
=m4  7v7 ,! c5traliz$ sy/em %all only   
p]mit data brok]s :o are regi/]$ ) !    
,commission to submit ha%$ qu]ies to !  
indep5d5t ha%$ regi/ries describ$ 9     
clause 7iv74  7vi7 ,) respect to !      
indep5d5t ha%$ regi/ries describ$ 9     
clause 7iv71 ! salt %all be diff]5t =   
ea* su* regi/ry & %all be made available
 to all regi/]$ data brok]s = ! purposes
 ( submitt+ ha%$ qu]ies1 z describ$ 9   
clause 7v74  7vii7 ,! c5traliz$ sy/em   
%all all[ an individual to make su*     
reque/ us+ an int]net website op]at$ by 
! ,commission4  7viii7 ,! c5traliz$     
sy/em %all n *>ge ! individual to make  
su* reque/4  7,c7 ,transition  7i7 ,9   
g5]al ,n lat] ?an #h mon?s aft] !       
effective date ( ! regulations          
promulgat$ "u subp>agraph 7,a71 ea* data
 brok] %all-- 7,i7 n less ?an once e #ca
 days1 access ! ha%$ regi/ries ma9ta9$  
by ! ,commission z describ$ 9           
subp>agraph 7,b77iv72 &  7,,ii7 process 

any deletion reque/ associat$ ) a mat*  
betwe5 su* ha%$ regi/ries & ! records ( 
! data brok]4  7ii7 ,,ftc guidance ,n   
lat] ?an #f mon?s aft] ! effective date 
( ! regulations promulgat$ "u           
subp>agraph 7,a71 ! ,commission %all    
publi% guidance on ! process & /&>ds to 
:i* a data brok] mu/ adh]e 9 c>ry+ out  
clause 7i74  7#b7 ,deletion  7,a7       
,in=mation deletion  7i7 ,9 g5]al       
,subject to clause 7ii71 n lat] ?an #ca 
days aft] access+ ! ha%$ regi/ries      
describ$ 9 p>agraph 7#a77;,b77iv71 a    
data brok] & any associat$ legal entity 
%all delete all p]sonal in=mation 9 its 
possession relat$ to ! individual mak+ !
 reque/ & discont9ue ! collection (     
p]sonal in=mation relat$ to su*         
individual4 ,imm$iately foll[+ !        
deletion1 ! data brok] %all s5d an      
affirmative repres5tation to !          
,commission ) ! numb] ( records delet$  
pursuant to ea* mat* ) a value 9 ! ha%$ 
regi/ries4  7ii7 ,exclusions ,9 c>ry+   
out clause 7i71 a data brok] may reta91 

:]e requir$1 ! foll[+ in=mation3 7,i7   
,any p]sonal in=mation t is process$ or 
ma9ta9$ solely z "p ( human subjects    
rese>* conduct$ 9 compliance ) any legal
 requirem5ts = ! protection ( human     
subjects4  7,,ii7 ,any p]sonal in=mation
 necess>y to comply ) a w>rant1 subpo5a1
 c\rt ord]1 rule1 or o!r applicable law4
  7,,iii7 ,any in=mation necess>y = an  
activity describ$ 9 subsection          
7f77#c77;,b71 provid$ t ! reta9$        
in=mation is us$ solely = any su*       
activity4  7iii7 ,use ( in=mation ,any  
p]sonal in=mation exclud$ "u clause 7ii7
 may only be us$ = ! purpose describ$ 9 
! applicable subclause ( clause 7ii71 & 
may n be us$ = any o!r purpose1 includ+ 
m>ket+ purposes4  7,b7 ,annual report   
,ea* data brok] regi/]$ "u subsection   
7a7 %all submit to ! ,commission1 on an 
annual basis1 a report on ! completion  
rate ) respect to ! completion (        
deletion reque/s "u subp>agraph 7,a74   
7,c7 ,audit  7i7 ,9 g5]al ,n lat] ?an #c
 ye>s aft] ! date ( enactm5t ( ?is      

section1 & e #c ye>s !reaft]1 ea* data  
brok] regi/]$ "u subsection 7a7 %all    
und]go an indep5d5t ?ird p>ty audit to  
det]m9e compliance ) ?is subsection4    
7ii7 ,audit report ,n lat] ?an #f mon?s 
aft] ! completion ( any audit "u clause 
7i71 ea* su* data brok] %all submit to !
 ,commission any report produc$ z a     
result ( ! audit1 along ) any relat$    
mat]ials4  7iii7 ,ma9ta9 records ,ea*   
su* data brok] %all ma9ta9 ! mat]ials   
describ$ 9 clause 7ii7 = a p]iod ( n    
less ?an #f ye>s4  7#c7 ,annual fee     
7,a7 ,9 g5]al ,subject to subp>agraph   
7,b71 ea* data brok] regi/]$ "u         
subsection 7a7 & :o ma9ta9s any p]si/5t 
id5tifi]s 7z describ$ 9 p>agraph        
7#a77;,b77iii77 %all pay to !           
,commission1 on an annual basis1 a      
subscription fee det]m9$ by !           
,commission to access ! database4  7,b7 
,limit ,! am\nt ( ! subscription fee "u 
subp>agraph 7,a7 may n exce$ #a p]c5t ( 
! expect$ annual co/ ( op]at+ !         
c5traliz$ sy/em & ha%$ regi/ries        

describ$ 9 p>agraph 7#a71 z det]m9$ by !
 ,commission4  7,c7 ,availability ,any  
am\nts collect$ by ! ,commission        
pursuant to ?is p>agraph %all be        
available )\t fur!r appropriation to !  
,commission = ! exclusive purpose (     
en=c+ & adm9i/]+ ?is ,act1 includ+ !    
implem5tation & ma9t5ance ( su*         
c5traliz$ sy/em & ha%$ regi/ries & !    
promotion ( public aw>5ess ( ! c5traliz$
 sy/em4  7c7 ,en=cem5t by ! commission  
7#a7 ,unfair or deceptive acts or       
practices ,a violation ( subsection 7a7 
or 7b7 or a regulation promulgat$ "u ?is
 ,act %all be treat$ z a violation ( a  
rule def9+ an unfair or deceptive act or
 practice "u section #ah7;a77#a77;,b7 ( 
! ,f$]al ,trade ,commission ,act 7#ae   
,u4,s4,c4 #eg;a7a77#a77;,b774  7#b7     
,p[]s ( ! commission  7,a7 ,9 g5]al ,!  
,commission %all en=ce ?is section 9 !  
same mann]1 by ! same means1 & ) ! same 
jurisdiction1 p[]s1 & duties z ?\gh all 
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7#ae ,u4,s4,c4  

#da et seq47 7 incorporat$ into & made a
 "p ( ?is ,act4  7,b7 ,privileges &     
immunities ,any p]son :o violates       
subsection 7a7 or 7b7 or a regulation   
promulgat$ "u ?is ,act %all be subject  
to ! p5alties & entitl$ to ! privileges 
& immunities provid$ 9 ! ,f$]al ,trade  
,commission ,act 7#ae ,u4,s4,c4 #da et  
seq474  7,c7 ,au?ority pres]v$ ,no?+ 9  
?is section %all be con/ru$ to limit !  
au?ority ( ! ,commission "u any o!r     
provision ( law4  7,d7 ,rulemak+ ,!     
,commission %all promulgate 9 accordance
 ) section #eec ( title #e1 ,unit$      
,/ates ,code1 su* rules z may be        
necess>y to c>ry out ?is section4  7d7  
,/udy & report  7#a7 ,/udy ,!           
,commission %all conduct a /udy on !    
implem5tation & en=cem5t ( ?is section4 
,su* /udy %all include-- 7,a7 an        
analysis ( ! effectiv5ess ( ! c5traliz$ 
sy/em e/abli%$ 9 subsection             
7b77#a77;,a72  7,b7 ! numb] deletion    
reque/s submitt$ annually us+ su*       
c5traliz$ sy/em2  7,c7 an analysis ( !  

progress ( coord9at+ ! op]ation &       
en=cem5t ( su* reque/s ) simil> sy/ems  
e/abli%$ & ma9ta9$ by ! v>i\s ,/ates2 & 
7,d7 any o!r area det]m9$ appropriate by
 ! ,commission4  7#b7 ,report ,n lat]   
?an #c ye>s aft] ! date ( enactm5t ( ?is
 section1 & annually !reaft] = ea* ( !  
next #d ye>s1 ! ,commission %all submit 
to ! ,committee on ,comm]ce1 ,sci5ce1 & 
,transportation ( ! ,s5ate & !          
,committee on ,en]gy & ,comm]ce ( !     
,h\se ( ,repres5tatives a report        
conta9+-- 7,a7 ! results ( ! /udy       
conduct$ "u p>agraph 7#a72  7,b7 a      
summ>y ( any en=cem5t actions tak5      
pursuant to ?is ,act2 &  7,c7           
recomm5dations = su* legislation &      
adm9i/rative action z ! ,commission     
det]m9es appropriate4  7e7 ,preemption  
7#a7 ,9 g5]al ,! provisions ( ?is ,act  
%all preempt any ,/ate privacy law only 
to ! ext5t t su* ,/ate law is inconsi/5t
 ) ! provisions ( ?is ,act4  7#b7       
,great] protection "u /ate law ,=       
purposes ( p>agraph 7#a71 a ,/ate       

privacy law is n inconsi/5t ) !         
provisions ( ?is ,act if ! protection   
su* law af=ds any p]son is great] ?an ! 
protection provid$ "u ?is ,act1 z       
det]m9$ by ! ,commission4  7f7          
,def9itions ,9 ?is section3 7#a7        
,commission ,! t]m ,commission means !  
,f$]al ,trade ,commission4  7#b7        
,cr$5tial+ process ,! t]m cr$5tial+     
process means ! practice ( tak+         
reasonable /eps to confirm-- 7,a7 !     
id5tity ( ! entity ) :om ! data brok]   
has a direct relation%ip2  7,b7 t any   
data disclos$ to ! entity by su* data   
brok] w be us$ = ! describ$ purpose (   
su* disclosure2 &  7,c7 t su* data w n  
be us$ = unlawful purposes4  7#c7 ,data 
brok]  7,a7 ,9 g5]al ,! t]m data brok]  
means an entity t kn[+ly collects or    
obta9s ! p]sonal in=mation ( an         
individual ) :om ! entity does n h a    
direct relation%ip & !n-- 7i7 uses !    
p]sonal in=mation to p]=m a s]vice = a  
?ird p>ty2 or  7ii7 sells1 lic5ses1     
trades1 provides = consid]ation1 or is  

o!rwise comp5sat$ = disclos+ p]sonal    
in=mation to a ?ird p>ty4  7,b7         
,exclusion ,! t]m data brok] does n     
include an entity :o solely uses1 sells1
 lic5ses1 trades1 provides =            
consid]ation1 or is o!rwise comp5sat$ = 
disclos+ p]sonal in=mation = "o or m ( !
 foll[+ activities3 7i7 ,provid+ #daa   
directory assi/ance or directory        
in=mation s]vices1 includ+ "n1 address1 
& telephone numb]1 on behalf ( or z a   
function ( a telecommunications c>ri]4  
7ii7 ,provid+ an individual's publicly  
available in=mation if ! in=mation is   
be+ us$ by ! recipi5t z x relates to t  
individual's bus9ess or pr(ession4      
7iii7 ,provid+ p]sonal in=mation to a   
?ird p>ty at ! express direction ( !    
individual = a cle>ly disclos$ s+le-use 
purpose4  7iv7 ,provid+ or us+ p]sonal  
in=mation = assess+1 v]ify+1 or         
au!nticat+ an individual's id5tity1 or =
 inve/igat+ or prev5t+ actual or        
pot5tial fraud4  7v7 ,ga!r+1 prep>+1    
collect+1 photograph+1 record+1 writ+1  

edit+1 report+1 or publi%+ news or      
in=mation t conc]ns local1 national1 or 
int]national ev5ts or o!r matt]s (      
public int]e/ 7z det]m9$ by !           
,commission7 = dissem9ation to ! public4
  7vi7 ,act+ z a consum] report+ ag5cy  
7z def9$ 9 section #fjc7;f7 ( ! ,fair   
,cr$it ,report+ ,act 7#ae ,u4,s4,c4     
#afha;a7f7774  7,c7 ,exclusion f sale   
7i7 ,9 g5]al ,= purposes ( ?is p>agraph1
 ! t]m sells does n include a "o-"t or  
occasional sale ( assets ( an entity z  
"p ( a transf] ( control ( ^? assets t  
is n "p ( ! ord9>y conduct ( ! entity4  
7ii7 ,notice requir$ ,to meet !         
exclusion crit]ia describ$ 9 clause 7i71
 an entity mu/ provide notice to !      
,commission1 9 ! mann] det]m9$          
appropriate by ! ,commission1 ( any su* 
"o-"t or occasional sale ( assets4  7#d7
 ,delete ,! t]m delete means to remove  
or de/roy in=mation su* t ! in=mation is
 n ma9ta9$ 9 human- or ma*9e-readable =m
 & _c be retriev$ or utiliz$ 9 su* =m 9 
! normal c\rse ( bus9ess4  7#e7 ,direct 

relation%ip  7,a7 ,9 g5]al ,! t]m direct
 relation%ip means a relation%ip betwe5 
an individual & an entity :]e !         
individual-- 7i7 is a curr5t cu/om]2    
7ii7 has obta9$ a good or s]vice f !    
entity )9 ! prior #ah mon?s2 or  7iii7  
has made an inquiry ab\t ! products or  
s]vices ( ! entity )9 ! prior #ij days4 
7,b7 ,exclusion ,! t]m direct           
relation%ip does n include a            
relation%ip-- 7i7 betwe5 an individual &
 a data brok] :]e ! individual's only   
connection to ! data brok] is bas$ on ! 
individual's reque/-- 7,i7 = ! data     
brok] to delete ! p]sonal in=mation ( ! 
individual2 or  7,,ii7 to opt-out ( !   
data brok]'s collection or use ( p]sonal
 in=mation1 c]ta9 sales ( su* in=mation1
 or its databases2 or  7ii7 requir$ "u  
any ,/ate or ,f$]al law relat$ to ! use 
( p]sonal in=mation4  7#f7 ,ha% ,! t]m  
ha% means to input data to a            
cryptographic1 "o-way1 collision        
resi/ant function t maps a bit /r+ (    
arbitr>y l5g? to a fix$-l5g? bit /r+ to 

produce a cryptographically secure      
value4  7#g7 ,ha%$ ,! t]m ha%$ means !  
type ( value produc$ by ha%+ data4  7#h7
 ,human subjects rese>* ,! t]m human    
subjects rese>* means rese>* t-- 7,a7 an
 inve/igator 7:e!r pr(essional or /ud5t7
 conducts on a liv+ individual2 &  7,b7 
ei!r-- 7i7 obta9s in=mation or          
biospecim5s ?r\gh int]v5tion or         
int]action ) ! individual1 & uses1      
/udies1 or analyzes ! in=mation or      
biospecim5s2 or  7ii7 obta9s1 uses1     
/udies1 analyzes1 or g5]ates p]sonal    
in=mation or id5tifiable biospecim5s4   
7#i7 ,p]sonal in=mation  7,a7 ,9 g5]al  
,! t]m p]sonal in=mation means any      
in=mation held by a data brok]1         
reg>dless ( h[ ! in=mation is collect$1 
inf]r$1 creat$1 or obta9$1 t is l9k$ or 
reasonably l9kable by ! data brok] to a 
p>ticul> individual or consum] device1  
includ+ ! foll[+ in=mation3 7i7         
,f9ancial in=mation1 includ+ any bank   
acc\nt numb]1 cr$it c>d numb]1 debit c>d
 numb]1 or insurance policy numb]4  7ii7

 ,a "n1 alias1 home or o!r physical     
address1 onl9e id5tifi]1 ,int]net       
,protocol address1 email address1 phone 
numb]1 acc\nt "n1 ,/ate id5tification   
c>d numb]1 driv]'s lic5se numb]1        
passport numb]1 or an id5tify+ numb] on 
a gov]nm5t-issu$ id5tification4  7iii7  
,geolocation in=mation4  7iv7 ,biometric
 in=mation4  7v7 ,! cont5ts (1 atta*m5ts
 to1 or p>ties to in=mation1 includ+ )  
respect to email1 text messages1 picture
 messages1 voicemails1 audio            
conv]sations1 or video conv]sations4    
7vi7 ,web br[s+ hi/ory1 includ+ any se>*
 qu]y4  7vii7 ,g5etic sequ5c+ in=mation4
  7viii7 ,a device id5tifi]1 onl9e      
id5tifi]1 p]si/5t id5tifi]1 or digital  
f+]pr9t+ in=mation4  7ix7 ,any inf]5ce  
drawn f any ( ! in=mation describ$ 9 ?is
 p>agraph t is us$ to create a pr(ile   
ab\t an individual t reflects su*       
individual's pref]5ces1 *>act]i/ics1    
psy*ological tr5ds1 pr$ispositions1     
behavior1 attitudes1 intellig5ce1       
abilities1 or aptitudes4  7x7 ,any o!r  

in=mation det]m9$ appropriate by !      
,commission4  7,b7 ,l9k$ or reasonably  
l9kable ,= purposes ( subp>agraph 7,a71 
in=mation is l9k$ or reasonably l9kable 
to a p>ticul> individual or consum]     
device if ! in=mation c be us$ on its   
own or 9 comb9ation ) o!r in=mation held
 by or readily accessible to a data     
brok] to id5tify a p>ticul> individual  
or consum] device4  7#aj7 ,process ,!   
t]m process means to p]=m or direct !   
p]=mance ( an op]ation on p]sonal       
in=mation1 includ+ ! collection1        
transmission1 use1 disclosure1 analysis1
 pr$iction1 or modification ( su*       
p]sonal in=mation1 :e!r or n by automat$
 means4  7#aa7 ,salt ,! t]m salt means  
to add a r&om /r+ ( data to ! input ( a 
ha% function4  7#ab7 ,uni=m res\rce     
locator2 url ,! t]m uni=m res\rce       
locator or ,,url means a %ort /r+       
conta9+ an address t ref]s to an object 
on ! web4