,,ii #aah? ,,congress #b;d ,session ,s4 #edfb ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,decemb] #aj1 #bjbd,ms4 ,w>r5 7= h]self1 ,mr4 ,s&]s1 ,mr4 ,:iteh\se1 & ,mr4 ,wyd57 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to prohibit data brok]s f sell+ & transf]r+ c]ta9 s5sitive data4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,heal? & ,location ,data ,protection ,act ( #bjbd4 #b4 ,unfair & deceptive acts & practices relat+ to heal? & location data 7a7 ,9 g5]al ,x %all be unlawful = a data brok] to sell1 resell1 lic5se1 trade1 transf]1 %>e1 or o!rwise provide or make available any ( ! foll[+ =ms ( data1 :e!r decl>$ or inf]r$1 ( an individual3 7#a7 ,location data4 7#b7 ,heal? data4 7#c7 ,o!r categories ( data id5tifi$ by ! ,commission t address or reveal a category ( data describ$ 9 p>agraphs 7#a7 & 7#b74 7b7 ,exceptions 7#a7 ,actions t are ,,hipaa-compliant 7,a7 ,9 g5]al ,no?+ 9 ?is ,act %all be con/ru$ to prohibit any action tak5 ) respect to ! heal? in=mation ( an individual by a data brok]1 act+ 9 its capacity z a bus9ess associate or cov]$ entity1 t is p]missible "u ! ,f$]al regulations conc]n+ /&>ds = privacy ( individually id5tifiable heal? in=mation promulgat$ "u section #bfd7;c7 ( ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7#db ,u4,s4,c4 #acbj;d-#b note74 7,b7 ,application ( t]ms ,9 p>agraph 7#a71 ! t]ms bus9ess associate1 cov]$ entity1 & heal? in=mation %all h ! mean+ giv5 ^? t]ms 9 ! ,f$]al regulations specifi$ 9 su* p>agraph4 7#b7 ,publication ( newswor?y in=mation ( legitimate public conc]n ,no?+ 9 ?is ,act %all be con/ru$ to prohibit ! publication ( newswor?y in=mation ( legitimate public conc]n4 7#c7 ,disclosure pursuant to valid au?orization ,no?+ 9 ?is ,act %all be con/ru$ to prohibit a disclosure ( ! data ( an individual = :i* ! individual provides valid au?orization4 ,= purposes ( ?is p>agraph1 ! t]m valid au?orization has ! mean+ giv5 su* t]m 9 section #afd4ejh ( title #de1 ,code ( ,f$]al ,regulations 7or a successor regulation71 subject to su* adaptations z ! ,commission %all deem necess>y to apply su* t]m to ! disclosure ( bo? location data & heal? data4 7c7 ,effective date ,! prohibition "u subsection 7a7 %all take effect on ! e>li] (-- 7#a7 ! date ! ,commission issues ! f9al rule "u subsection 7d72 or 7#b7 #ahj days aft] ! date ( enactm5t ( ?is ,act4 7d7 ,rulemak+ 7#a7 ,f9al rule ,pursuant to section #eec ( title #e1 ,unit$ ,/ates ,code1 ! ,commission %all promulgate regulations to c>ry out ! provisions ( ?is ,act4 ,! ,commission %all issue a f9al rule by n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act4 7#b7 ,additional guidance ,pursuant to section #eec ( title #e1 ,unit$ ,/ates ,code1 ! ,commission may promulgate fur!r regulations to c>ry out ! provisions ( ?is ,act1 includ+ fur!r guidance reg>d+ ! types ( data describ$ 9 subsection 7a74 #c4 ,en=cem5t 7a7 ,en=cem5t by ! ,f$]al ,trade ,commission 7#a7 ,unfair or deceptive acts or practices ,a violation ( section #b %all be treat$ z a violation ( a rule def9+ an unfair or a deceptive act or practice "u section #ah7;a77#a77;,b7 ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #eg;a7a77#a77;,b774 7#b7 ,p[]s ( ,commission 7,a7 ,9 g5]al ,except z provid$ 9 subp>agraphs 7,d7 & 7,e71 ! ,commission %all en=ce section #b 9 ! same mann]1 by ! same means1 & ) ! same jurisdiction1 p[]s1 & duties z ?\gh all applicable t]ms & provisions ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq47 7 incorporat$ into & made a "p ( ?is ,act4 7,b7 ,privileges & immunities ,any p]son :o violates section #b %all be subject to ! p5alties & entitl$ to ! privileges & immunities provid$ 9 ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #da et seq474 7,c7 ,au?ority pres]v$ ,no?+ 9 ?is ,act %all be con/ru$ to limit ! au?ority ( ! ,f$]al ,trade ,commission "u any o!r provision ( law4 7,d7 ,nonpr(it organizations ,not)/&+ section #d ( ! ,f$]al ,trade ,commission ,act 7#ae ,u4,s4,c4 #dd7 or any jurisdictional limitation ( ! ,commission1 ! ,commission %all also en=ce ?is ,act1 9 ! same mann] provid$ 9 subp>agraphs 7,a7 & 7,b71 ) respect to organizations n organiz$ to c>ry on bus9ess = _! own pr(it or t ( _! memb]s4 7,e7 ,indep5d5t litigation au?ority ,9 any case 9 :i* ! ,commission has reason to believe t a data brok] is violat+ or has violat$ section #b1 ! ,commission may br+ a civil action 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to-- 7i7 enjo9 any fur!r su* violation by su* p]son2 7ii7 en=ce compliance ) ?is ,act1 includ+ ?r\gh deletion ( ! relevant in=mation2 7iii7 obta9 a p]man5t1 tempor>y1 or prelim9>y injunction2 7iv7 obta9 civil p5alties2 7v7 obta9 damages 7:e!r actual1 punitive1 or o!rwise71 re/itution1 disgorgem5t ( unju/ enri*m5t1 or o!r comp5sation on behalf ( aggriev$ p]sons2 or 7vi7 obta9 any o!r appropriate equitable relief4 7b7 ,en=cem5t by ,/ates 7#a7 ,9 g5]al ,9 any case 9 :i* ! attorney g5]al ( a ,/ate has reason to believe t an int]e/ ( ! resid5ts ( ! ,/ate has be5 or is ?reat5$ or adv]sely affect$ by ! engagem5t ( any data brok] subject to section #b 9 a practice t violates su* section1 ! attorney g5]al ( ! ,/ate may1 z p>5s patriae1 br+ a civil action on behalf ( ! resid5ts ( ! ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to-- 7,a7 enjo9 any fur!r su* violation by su* p]son2 7,b7 en=ce compliance ) ?is ,act1 includ+ ?r\gh deletion ( ! relevant in=mation2 7,c7 obta9 a p]man5t1 tempor>y1 or prelim9>y injunction2 7,d7 obta9 civil p5alties2 7,e7 obta9 damages 7:e!r actual1 punitive1 or o!rwise71 re/itution1 disgorgem5t ( unju/ enri*m5t1 or o!r comp5sation on behalf ( aggriev$ p]sons2 or 7,f7 obta9 any o!r appropriate equitable relief4 7#b7 ,notice ,be=e fil+ an action "u p>agraph 7#a71 ! attorney g5]al1 (ficial1 or ag5cy ( ! ,/ate involv$ %all provide to ! ,commission a writt5 notice ( su* action & a copy ( ! compla9t = su* action4 ,if ! attorney g5]al1 (ficial1 or ag5cy det]m9es t x is n feasible to provide ! notice describ$ 9 ?is p>agraph be=e ! fil+ ( ! action1 ! attorney g5]al1 (ficial1 or ag5cy %all provide writt5 notice ( ! action & a copy ( ! compla9t to ! ,commission imm$iately ^u ! fil+ ( ! action4 7#c7 ,limitation on ,/ate action :ile ,f$]al action is p5d+ ,if ! ,commission has in/itut$ a civil action = a violation ( section #b1 no ,/ate attorney g5]al1 or (ficial or ag5cy ( a ,/ate1 may br+ an action "u ?is p>agraph dur+ ! p5d5cy ( t action aga9/ any def5dant nam$ 9 ! compla9t ( ! ,commission = any violation ( section #b alleg$ 9 ! compla9t4 7#d7 ,relation%ip ) ,/ate-law claims ,if ! attorney g5]al ( a ,/ate has au?ority to br+ an action "u ,/ate law direct$ at acts or practices t also violate section #b1 ! attorney g5]al may ass]t ! ,/ate-law claim & a claim "u section #b 9 ! same civil action4 7#e7 ,inve/igatory p[]s ,no?+ 9 ?is subsection may be con/ru$ to prev5t ! attorney g5]al ( a ,/ate f ex]cis+ ! p[]s conf]r$ on ! attorney g5]al by ! laws ( ! ,/ate to conduct inve/igations1 to adm9i/] oa?s or affirmations1 or to compel ! att5dance ( witnesses or ! production ( docum5t>y or o!r evid5ce4 7c7 ,private en=cem5t ,any p]son ^: int]e/ has be5 or is ?reat5$ or adv]sely affect$ by ! engagem5t ( any data brok] subject to section #b 9 a practice t violates su* section may br+ a civil action 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to-- 7#a7 enjo9 any fur!r su* violation by su* p]son2 7#b7 en=ce compliance ) ?is ,act1 includ+ ?r\gh deletion ( ! relevant in=mation2 7#c7 obta9 a p]man5t1 tempor>y1 or prelim9>y injunction2 7#d7 obta9 damages 7:e!r actual1 punitive1 or o!rwise71 re/itution1 or o!r comp5sation2 7#e7 obta9 reasonable attorney's fees1 includ+ litigation exp5ses1 & co/s2 or 7#f7 obta9 any o!r appropriate equitable relief4 7d7 ,civil p5alties ,9 addition to any o!r p5alties z may be prescrib$ by law1 a violation ( ?is ,act %all c>ry a civil p5alty n to exce$ #ae p]c5t ( ! rev5ues e>n$ by ! p]son's ultimate p>5t entity dur+ ! prec$+ #ab-mon? p]iod4 7e7 ,exclusive jurisdiction 7#a7 ,di/rict c\rts ,= any action br\ght "u ?is ,act1 ! foll[+ di/rict c\rts %all h exclusive jurisdiction3 7,a7 ,= actions br\ght by ! ,commission1 ! ,unit$ ,/ates ,di/rict ,c\rt = ! ,di/rict ( ,columbia4 7,b7 ,= actions br\ght by a ,/ate attorney g5]al1 ! di/rict c\rt ( ! ,unit$ ,/ates = ! judicial di/rict 9 :i* ! capital ( ! ,/ate is locat$4 7,c7 ,= private actions br\ght by p]sons-- 7i7 ! ,unit$ ,/ates ,di/rict ,c\rt = ! ,di/rict ( ,columbia2 or 7ii7 ! di/rict c\rt ( ! ,unit$ ,/ates = ! judicial di/rict 9 :i* ! violation took place or 9 :i* any def5dant resides or does bus9ess4 7#b7 ,c\rt ( appeals ,! ,unit$ ,/ates ,c\rt ( ,appeals = ! ,di/rict ( ,columbia ,circuit %all h exclusive jurisdiction ( appeals f all decisions "u p>agraph 7#a74 7f7 ,/atute ( limitations ,a proce$+ = a violation ( ?is ,act may be comm5c$ n lat] ?an #f ye>s aft] ! date ^u :i* ! pla9tiff obta9s actual k ( ! facts giv+ rise to su* violation4 7g7 ,preemption ,! provisions ( ?is ,act preempt only ! provisions ( ,/ate or local law t require disclosure prohibit$ by ?is ,act4 #d4 ,def9itions ,9 ?is ,act3 7#a7 ,commission ,! t]m ,commission means ! ,f$]al ,trade ,commission4 7#b7 ,data 7,a7 ,9 g5]al ,n lat] ?an #ahj days aft] ! date ( enactm5t ( ?is ,act1 ! ,commission %all adopt rules 9 accordance ) section #eec ( title #e1 ,unit$ ,/ates ,code1 to def9e ! t]m data = ! purpose ( implem5t+ & en=c+ ?is ,act4 7,b7 ,requirem5t ,! t]m data %all include in=mation t is l9k$1 or reasonably l9kable1 to-- 7i7 specific individuals2 or 7ii7 specific gr\ps ( individuals :o %>e ! same place ( resid5ce or int]net protocol address4 7#c7 ,data brok] ,! t]m data brok] means a p]son t collects1 buys1 lic5ses1 or inf]s data ab\t individuals & !n sells1 lic5ses1 or trades t data4 7#d7 ,heal? data ,! t]m heal? data means data t reveal or describe-- 7,a7 ! se>* =1 attempt to obta91 or receipt ( any heal? s]vices2 7,b7 any pa/1 pres5t1 or future disability1 physical heal? condition1 m5tal heal? condition1 or heal? condition ( an individual1 includ+1 b n limit$ to1 pregnancy & misc>riage2 or 7,c7 any treatm5t or diagnosis ( a disability or condition describ$ 9 subp>agraph 7,b74 7#e7 ,location data ,! t]m location data means data capable ( det]m9+ ! pa/ or pres5t physical location ( an individual or an individual's device4 7#f7 ,/ate ,! t]m ,/ate means ea* ( ! sev]al ,/ates1 ! ,di/rict ( ,columbia1 ea* commonweal?1 t]ritory1 or possession ( ! ,unit$ ,/ates1 & ea* f$]ally recogniz$ ,indian ,tribe4 7#g7 ,ultimate p>5t entity ,! t]m ultimate p>5t entity has ! mean+ giv5 ! t]m 9 section #hja4a ( title #af1 ,code ( ,f$]al ,regulations 7or any successor regulation74 #e4 ,fund+ ,9 addition to am\nts o!rwise available1 !re is appropriat$ to ! ,commission = fiscal ye> #bjbe1 out ( any money 9 ! ,treasury n o!rwise appropriat$1 #a1jjj1jjj1jjj1 to rema9 available until ,septemb] #cj1 #bjcd1 = c>ry+ out ! "w ( ! ,commission4