,,ii  #aai? ,,congress  #b;d ,session   
,s4 #efgc  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,septemb] #cj1         
#bjbf,mr4 ,m]kley 7= himself1 ,mr4      
,lujn1 & ,ms4 ,w>r57 introduc$ ! foll[+ 
bill2 :i* 0 read twice & ref]r$ to !    
,committee on ,comm]ce1 ,sci5ce1 &      
,transportation  ,a ,,bill  ,to re/rict 
c> manufactur]s & o!r companies f sell+ 
consum] c>-relat$ data1 to increase     
transp>5cy reg>d+ data practices1 & =   
o!r purposes4  #a4 ,%ort title ,?is ,act
 may be cit$ z ! ,c> ,privacy ,rights   
,act ( #bjbf4  #b4 ,def9itions ,9 ?is   
,act3 7#a7 ,affirmative express cons5t  
,! t]m affirmative express cons5t means 
an affirmative act by a consum] t-- 7,a7
 cle>ly communicates ! au?orization ( ! 
consum] = an act or practice2  7,b7 is  
provid$ 9 response to a notice t meets !
 requirem5ts ( section #d7;a77#a77;,a72 
&  7,c7 is n-- 7i7 acceptance ( g5]al or
 broad t]ms ( s]vice or a simil>        
docum5t2  7ii7 accompli%$ by hov]+ ov]1 
mut+1 paus+1 or clos+ a giv5 piece (    

cont5t2  7iii7 acceptance ( an agreem5t 
obta9$ ?r\gh ! use ( false1 fraudul5t1  
or mat]ially mislead+ means2 or  7iv7 9 
response to a notice t only provides !  
*oice to accept or agree to ! act or    
practice4  7#b7 ,application ,! t]m     
application means a s(tw>e program t    
runs on ! op]at+ sy/em ( a device4  7#c7
 ,collect ,! t]m collect means1 )       
respect to consum] c>-relat$ data1 to   
buy1 r5t1 ga!r1 obta91 receive1 access1 
or o!rwise acquire su* data by any      
means4  7#d7 ,commission ,! t]m         
,commission means ! ,f$]al ,trade       
,commission4  7#e7 ,consum] ,! t]m      
consum] means an individual :o is a     
citiz5 or resid5t (1 or locat$ 91 !     
,unit$ ,/ates4  7#f7 ,consum] c> ,! t]m 
consum] c> means a motor vehicle1 z     
def9$ 9 section #cjajb ( title #di1     
,unit$ ,/ates ,code1 t is own$1 leas$1  
or op]at$ by a consum]1 b exclud+ any   
motor vehicle own$1 leas$1 or op]at$ 9 a
 comm]cial or employm5t context4  7#g7  
,consum] c>-relat$ data ,! t]m consum]  

c>-relat$ data means any in=mation1     
includ+ d]iv$ data & unique id5tifi]s1  
t-- 7,a7 is l9k$ or reasonably l9kable1 
alone or 9 comb9ation ) o!r in=mation1  
to an individual or a device2 &  7,b7   
is-- 7i7 collect$ or d]iv$ f & describes
 ! curr5t or hi/oric op]ation1          
condition1 /atus1 or precise geolocation
 ( a consum] c> or its occupants2  7ii7 
electronic data g5]at$ or process$      
onbo>d a consum] c>1 su* z data g5]at$  
by s5sors1 receiv]s1 comput] process+   
units1 or o!r vehicle compon5ts1 includ+
 diagno/ic1 repair1 & ma9t5ance data2 or
  7iii7 /or$1 or capable ( be+ /or$1 9 a
 consum] c> g5]at$ by ! us] ( su*       
consum] c>4  7#h7 ,cov]$ entity ,! t]m  
cov]$ entity means any p]son t collects1
 processes1 or transf]s ! consum]       
c>-relat$ data ( an individual1 includ+ 
a c> manufactur]1 insurance company1 or 
a company t collects su* data ?r\gh an  
application4  7#i7 ,de-id5tifi$ data ,! 
t]m de-id5tifi$ data means consum]      
c>-relat$ data t-- 7,a7 has be5 process$

 s z to n be l9k$ or reasonably l9kable1
 alone or 9 comb9ation ) o!r in=mation1 
to an individual or a device2 &  7,b7 is
 9 possession ( a cov]$ entity1 & su*   
cov]$ entity-- 7i7 takes reasonable     
physical1 adm9i/rative1 & te*nical      
measures to ensure t su* data _c be     
associat$ ) an individual or be us$ to  
re-id5tify an individual or a device    
reasonably l9kable to an individual2    
7ii7 has publicly committ$ to n process 
any data describ$ 9 subp>agraph 7,a7 t  
is 9 its possession s z to make su* data
 l9k$ or reasonably l9kable1 alone or 9 
comb9ation ) o!r in=mation1 to an       
individual or a device2 &  7iii7        
contractually obligates any recipi5t (  
su* data to satisfy ! requirem5ts       
describ$ 9 clauses 7i7 & 7ii74  7#aj7   
,device ,! t]m device means any         
electronic equipm5t capable ( collect+1 
process+1 reta9+1 or transf]r+ consum]  
c>-relat$ data1 includ+ any su* device  
equipp$ on a consum] c>4  7#aa7 ,precise
 ,geolocation ,! t]m precise geolocation

 means in=mation t reveals ! pa/ or     
pres5t physical location ( an           
individual1 consum] c>1 or device )     
suffici5t precision to id5tify-- 7,a7   
/reet-level location in=mation ( su*    
individual1 consum] c>1 or device2 or   
7,b7 ! location ( su* individual1       
consum] c>1 or device )9 a range (      
#a1hej feet or less4  7#ab7 ,process ,! 
t]m process1 ) respect to consum]       
c>-relat$ data1 means any op]ation or   
set ( op]ations p]=m$1 :e!r by manual or
 automat$ means1 on su* data1 includ+ ! 
use1 /orage1 disclosure1 analysis1      
deletion1 or modification ( su* data4   
#c4 ,re/rict+ ! collection & process+ ( 
consum] c>-relat$ data ,a cov]$ entity  
may only collect or process consum]     
c>-relat$ data if su* collection or     
process+ is reasonably necess>y to--    
7#a7 provide or ma9ta9 a specific       
product or s]vice reque/$ by ! consum]1 
includ+ any r\t9e adm9i/rative1         
op]ational1 or acc\nt-s]vic+ activity1  
su* z bill+1 %ipp+1 deliv]y1 /orage1 or 

acc\nt+2  7#b7 provide a communication  
7n includ+ an adv]tisem5t7 to ! consum] 
t a reasonable consum] w\ld anticipate  
)9 ! context ( ! relation%ip betwe5 !   
cov]$ entity & ! consum]2  7#c7 comply )
 ,f$]al1 ,/ate1 or local law2  7#d7     
comply ) a civil1 crim9al1 or regulatory
 inquiry1 inve/igation1 subpo5a1 or     
summons by a ,f$]al1 ,/ate1 municipal1  
or o!r gov]nm5tal au?ority2  7#e7       
inve/igate1 e/abli%1 def5d1 or prep>e = 
a legal claim t has be5 fil$ aga9/ !    
cov]$ entity2  7#f7 p]=m "u a contract  
to :i* ! consum] is a p>ty1 includ+     
fulfill+ ! t]ms ( a writt5 w>ranty2     
7#g7 take imm$iate action to protect an 
int]e/ t is ess5tial = ! life or        
physical safety ( ! consum] or ano!r    
individual1 includ+ by effectuat+ a     
product recall2  7#h7 id5tify !ft1      
fraud1 h>assm5t1 a malici\s or deceptive
 activity1 or any illegal activity      
t>get$ at or involv+ ! cov]$ entity2    
7#i7 inve/igate1 report1 or prosecute an
 individual responsible = any action    

describ$ 9 p>agraph 7#h72  7#aj7 pres]ve
 ! integrity or security ( sy/ems ( !   
cov]$ entity2  7#aa7 engage 9 public or 
pe]-review$ sci5tific or /ati/ical      
rese>* 9 ! public int]e/ t adh]es to all
 relevant laws & regulations gov]n+ su* 
rese>*1 & is approv$1 monitor$1 & gov]n$
 by an in/itutional review bo>d or      
simil> indep5d5t ov]sight entity t      
det]m9es t-- 7,a7 ! expect$ b5efits ( ! 
rese>* outweigh ! privacy risks2 &  7,b7
 ! cov]$ entity has implem5t$ reasonable
 safegu>ds to mitigate privacy risks    
associat$ ) su* rese>*1 includ+ any     
risks associat$ ) ! id5tification ( a   
consum]2  7#ab7 assi/ ano!r cov]$ entity
 ) any ( ! obligations "u ?is ,act2     
7#ac7 ensure ! security & integrity (   
consum] c>-relat$ data2  7#ad7 make su* 
data de-id5tifi$ data2 or  7#ae7 if su* 
data has be5 process$ to make su* data  
de-id5tifi$ data-- 7,a7 conduct int]nal 
rese>* to develop1 improve1 or repair a 
product1 s]vice1 or te*nology ( ! cov]$ 
entity1 includ+ ?r\gh diagno/ics1       

debugg+1 & repairs2  7,b7 id5tify &     
repair te*nical errors t impair exi/+ or
 int5d$ functionality ( a product1      
s]vice1 or te*nology ( ! cov]$ entity2  
or  7,c7 p]=m solely int]nal op]ations t
 are reasonably align$ ) ! expectations 
( ! consum] or reasonably anticipat$    
bas$ on ! consum]'s exi/+ relation%ip ) 
! cov]$ entity4  #d4 ,re/rict+ ! %>+ or 
sell+ ( c]ta9 data  7a7 ,9 g5]al        
,subject to ! succe$+ subsections ( ?is 
section1 x %all be unlawful = a cov]$   
entity to %>e or sell any consum]       
c>-relat$ data unless-- 7#a7 ! cov]$    
entity provides ! consum]-- 7,a7 a      
notice t-- 7i7 /ates t ! cov]$ entity   
int5ds to %>e or sell su* data2  7ii7 is
 provid$ 9 a cle> & conspicu\s /&alone  
disclosure t describes ea* in/ance !    
cov]$ entity plans to %>e or sell su*   
data2  7iii7 = ea* specific category (  
su* data1 /ates if ! cov]$ entity is %>+
 or sell+ su* data 9 ord] to provide a  
s]vice reque/$ by ! consum]2  7iv7 is   
writt5 9 easy-to-und]/& language2  7v7  

is provid$ 9 a mann] t w\ld be          
reasonably anticipat$ by ! consum] giv5 
! relation%ip betwe5 ! consum] & ! cov]$
 entity2 &  7vi7 is accessible to       
individuals ) disabilities2 &  7,b7 an  
opportunity to explicitly grant         
affirmative express cons5t to all[ !    
cov]$ entity to %>e or sell su* data2 & 
7#b7 ! consum] explicitly grants su*    
affirmative express cons5t4  7b7        
,revocation ( cons5t ,if a consum]      
grants affirmative express cons5t to    
all[ a cov]$ entity to %>e or sell      
consum] c>-relat$ data pursuant to      
subsection 7a77#b71 ! cov]$ entity %all 
all[ su* consum] to easily revoke su*   
cons5t directly ?r\gh ! website or      
application ( ! cov]$ entity4  7c7      
,retaliation prohibit$  7#a7 ,9 g5]al ,a
 cov]$ entity may n d5y a consum] access
 to a good or s]vice or discrim9ate or  
retaliate aga9/ a consum] = )hold+      
affirmative express cons5t "u subsection
 7a77#b7 or revok+ cons5t "u subsection 
7b74  7#b7 ,retaliation ,) respect to a 

consum] )hold+ affirmative express      
cons5t "u subsection 7a77#b7 or revok+  
cons5t "u subsection 7b71 a cov]$ entity
 %all be consid]$ 9 violation ( p>agraph
 7#a7 if su* cov]$ entity *>ges a       
diff]5t price or rate = a good or s]vice
 or provides a diff]5t level ( quality (
 a good or s]vice to su* consum] comp>$ 
to ! price1 rate1 or quality ! cov]$    
entity typically *>ges or provides to   
o!r consum]s unless x is reasonably     
necess>y = ! cov]$ entity to sale or %>e
 ! consum]'s consum] c>-relat$ data 9   
ord] to provide ! good or s]vice or !   
value ( su* data is reasonably relat$ to
 ! diff]5ce 9 price or quality ( ! good 
or s]vice4  7d7 ,exception ,subsection  
7a7 %all n apply to any consum]         
c>-relat$ data a cov]$ entity %>es ) !  
,national ,highway ,traffic ,safety     
,adm9i/ration4  7e7 ,precise geolocation
 data ,x %all be unlawful = a cov]$     
entity to %>e or sell any data relat+ to
 a precise geolocation4  #e4 ,consum]   
rights  7a7 ,privacy policy  7#a7 ,9    

g5]al ,a cov]$ entity %all provide a    
privacy policy meet+ ! requirem5ts      
describ$ 9 p>agraph 7#b7 to ea* consum] 
^: consum] c>-relat$ data ! cov]$ entity
 collects1 processes1 or transf]s4  7#b7
 ,privacy policy requirem5ts ,a privacy 
policy describ$ 9 p>agraph 7#a7 %all    
conta9-- 7,a7 a detail$ & accurate      
repres5tation ( ! policies ( ! cov]$    
entity reg>d+ ! collection1 process+1 & 
transf]r+ ( consum] c>-relat$ data2 &   
7,b7 a prom95t description ( h[ a       
consum] c ex]cise ! rights describ$ 9   
?is ,act4  7b7 ,disclosures ,^u reque/ f
 a consum]1 a cov]$ entity %all provide 
su* consum]-- 7#a7 confirmation reg>d+  
:e!r a cov]$ entity is collect+ or      
process+ ! consum] c>-relat$ data ( !   
consum]2  7#b7 access to su* data2 &    
7#c7 if a consum] has provid$           
affirmative express cons5t to all[ a    
cov]$ entity to %>e or sell su* data    
pursuant to section #d7;a77#b71 a li/ ( 
any ?ird p>ty1 o!r ?an an individual to 
:i* ! cov]$ entity has transf]r$ su*    

data4  #f4 ,report+ ( consum] data      
privacy practices  7a7 ,9 g5]al ,n lat] 
?an #abj days aft] ! date ( enactm5t (  
?is ,act & annually !reaft]1 ea* cov]$  
entity %all submit a report to !        
,commission reg>d+ _! consum] data      
privacy practices1 includ+ any consum]  
c>-relat$ data t is collect$1 ! purpose 
( su* collection1 :at entities are be+  
%>$ or sold su* data1 & an ov]view ( !  
data %>+ practices ( any su* entity4    
7b7 ,,ftc report ,n lat] ?an #ahj days  
aft] ! submission ( ea* report "u       
subsection 7a71 ! ,commission %all      
submit to ,congress & publi% on !       
website ( ! ,commission a report conta9+
 a summ>y ( ! in=mation describ$ 9 ea*  
su* report4  #g4 ,guidance or rulemak+  
reg>d+ c> manufactur]s address+ dome/ic 
viol5ce issues relat$ to _! applications
 ,n lat] ?an #ahj days aft] ! date (    
enactm5t ( ?is ,act1 ! ,commission1 9   
consultation ) ! ,f$]al ,communications 
,commission & ! ,national ,highway      
,traffic ,safety ,adm9i/ration1 %all    

issue guidance or promulgate regulations
 reg>d+ h[ c> manufactur]s c address    
dome/ic viol5ce issues relat$ to any    
application ( a c> manufactur] t has !  
capability to det]m9e ! precise         
geolocation ( an individual1 consum] c>1
 or device4  #h4 ,en=cem5t  7a7         
,en=cem5t by ! ,commission  7#a7 ,unfair
 or deceptive acts or practices ,a      
violation ( ?is ,act or a regulation    
promulgat$ "u ?is ,act %all be treat$ z 
a violation ( a rule def9+ an unfair or 
deceptive act or practice "u section    
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b774  7#b7 ,p[]s ( !     
,commission  7,a7 ,9 g5]al ,!           
,commission %all en=ce ?is ,act 9 ! same
 mann]1 by ! same means1 & ) ! same     
jurisdiction1 p[]s1 & duties z ?\gh all 
applicable t]ms & provisions ( ! ,f$]al 
,trade ,commission ,act 7#ae ,u4,s4,c4  
#da et seq47 7 incorporat$ into & made a
 "p ( ?is ,act4  7,b7 ,privileges &     
immunities ,any p]son :o violates ?is   

,act or a regulation promulgat$ "u ?is  
,act %all be subject to ! p5alties &    
entitl$ to ! privileges & immunities    
provid$ 9 ! ,f$]al ,trade ,commission   
,act 7#ae ,u4,s4,c4 #da et seq474  7,c7 
,au?ority pres]v$ ,no?+ 9 ?is subsection
 %all be con/ru$ to limit ! au?ority ( !
 ,commission "u any o!r provision ( law4
  7,d7 ,rulemak+ ,! ,commission %all    
promulgate 9 accordance ) section #eec (
 title #e1 ,unit$ ,/ates ,code1 su*     
rules z may be necess>y to c>ry out ?is 
,act4  7b7 ,en=cem5t by ,/ates  7#a7 ,9 
g5]al ,9 any case 9 :i* ! attorney g5]al
 ( a ,/ate has reason to believe t an   
int]e/ ( ! resid5ts ( ! ,/ate has be5 or
 is ?reat5$ or adv]sely affect$ by an   
act or practice 9 violation ( ?is ,act  
or a regulation promulgat$ "u ?is ,act1 
! attorney g5]al ( ! ,/ate may1 z p>5s  
patriae1 br+ a civil action on behalf ( 
! resid5ts ( ! ,/ate 9 an appropriate   
di/rict c\rt ( ! ,unit$ ,/ates or an    
appropriate ,/ate c\rt to-- 7,a7 enjo9  
su* act or practice2  7,b7 en=ce        

compliance ) ?is ,act or ! regulations  
promulgat$ "u ?is ,act2  7,c7 obta9     
civil p5alties2  7,d7 obta9 damages1    
re/itution1 or o!r comp5sation on behalf
 ( ! resid5ts ( ! ,/ate2  7,e7 obta9    
reasonable attorney's fees & o!r        
litigation co/s reasonably incurr$2 or  
7,f7 obta9 su* o!r relief z ! c\rt may  
consid] to be appropriate4  7#b7 ,rights
 ( ! ,commission  7,a7 ,notice to !     
,commission  7i7 ,9 g5]al ,except z     
provid$ 9 clause 7iii71 ! attorney g5]al
 ( a ,/ate %all notify ! ,commission 9  
writ+ t ! attorney g5]al int5ds to br+ a
 civil action "u p>agraph 7#a7 be=e     
initiat+ ! civil action4  7ii7 ,cont5ts 
,! notification requir$ by clause 7i7 ) 
respect to a civil action %all include a
 copy ( ! compla9t to be fil$ to        
initiate ! civil action4  7iii7         
,exception ,if x is n feasible = !      
attorney g5]al ( a ,/ate to provide !   
notification requir$ by clause 7i7 be=e 
initiat+ a civil action "u p>agraph     
7#a71 ! attorney g5]al %all notify !    

,commission imm$iately ^u in/itut+ !    
civil action4  7,b7 ,int]v5tion by !    
,commission ,! ,commission may-- 7i7    
int]v5e 9 any civil action br\ght by !  
attorney g5]al ( a ,/ate "u p>agraph    
7#a72 &  7ii7 ^u int]v5+-- 7,i7 remove !
 civil action to ! appropriate di/rict  
c\rt ( ! ,unit$ ,/ates1 if ! action 0 n 
orig9ally br\ght 9 su* c\rt2  7,,ii7 be 
he>d on all matt]s aris+ 9 ! civil      
action2 &  7,,iii7 file petitions =     
appeal ( a decision 9 ! civil action4   
7,c7 ,inve/igatory p[]s ,no?+ 9 ?is     
subsection may be con/ru$ to prev5t !   
attorney g5]al ( a ,/ate f ex]cis+ !    
p[]s conf]r$ on ! attorney g5]al by !   
laws ( ! ,/ate to conduct inve/igations1
 to adm9i/] oa?s or affirmations1 or to 
compel ! att5dance ( witnesses or !     
production ( docum5t>y or o!r evid5ce4  
7#c7 ,action by ! ,commission ,if !     
,commission in/itutes a civil action )  
respect to a violation ( ?is ,act or a  
regulation promulgat$ "u ?is ,act1 !    
attorney g5]al ( a ,/ate may n1 dur+ !  

p5d5cy ( su* action1 br+ a civil action 
"u p>agraph 7#a7 aga9/ any def5dant nam$
 9 ! compla9t ( ! ,commission = !       
violation ) respect to :i* ! ,commission
 in/itut$ su* action4  7#d7 ,actions by 
o!r ,/ate (ficials  7,a7 ,9 g5]al ,9    
addition to civil actions br\ght by     
attorneys g5]al "u p>agraph 7#a71 any   
o!r (fic] ( a ,/ate :o is au?oriz$ by ! 
,/ate to d s may br+ a civil action "u  
su* p>agraph1 subject to ! same         
requirem5ts & limitations t apply "u ?is
 subsection to civil actions br\ght by  
attorneys g5]al4  7,b7 ,sav+s provision 
,no?+ 9 ?is subsection may be con/ru$ to
 prohibit an attorney g5]al or au?oriz$ 
(ficial ( a ,/ate f initiat+ or cont9u+ 
any proce$+ 9 a c\rt ( ! ,/ate = a      
violation ( any civil or crim9al law ( !
 ,/ate4  7#e7 ,v5ue2 s]vice ( process   
7,a7 ,v5ue ,any action br\ght "u        
p>agraph 7#a7 may be br\ght 9 any ,f$]al
 di/rict c\rt ( ! ,unit$ ,/ates t meets 
applicable requirem5ts relat+ to v5ue "u
 section #acia ( title #bh1 ,unit$      

,/ates ,code4  7,b7 ,s]vice ( process ,9
 an action br\ght "u p>agraph 7#a71     
process may be s]v$ 9 any di/rict 9 :i* 
! def5dant-- 7i7 is an inhabitant2 or   
7ii7 may be f\nd4  7c7 ,private "r (    
action  7#a7 ,9 g5]al ,a consum] ^:     
consum] c>-relat$ data has be5 process$1
 collect$1 %>$1 or sold 9 violation (   
?is ,act may br+ a civil action 9 a c\rt
 ( compet5t jurisdiction aga9/ ! cov]$  
entity alleg$ 9 su* violation4  7#b7    
,relief ,9 a civil action br\ght "u     
p>agraph 7#a7 9 :i* ! pla9tiff prevails1
 ! c\rt may aw>d-- 7,a7 damages 9 an    
am\nt ( n less ?an #e1jjj p] violation1 
z adju/$ annually to reflect any        
increase 9 ! ,consum] ,price ,index1 or 
actual damages1 :i*ev] is great]2  7,b7 
punitive damages2  7,c7 decl>atory or   
equitable relief2 &  7,d7 reasonable    
attorney's fees & litigation co/s4