2019-04-01 Introduced in House Information Transparency & Personal Data Control Act

This bill requires the Federal Trade Commission (FTC) to establish requirements for entities providing services to the public that collect, store, process, use, or otherwise control sensitive personal information. Information relating to an identifiable individual is generally considered sensitive personal information. However, information that is publicly available is not considered sensitive.

The FTC must require controllers of sensitive personal information to (1) provide consumers with a privacy and data use policy, (2) obtain affirmative consent to collect or use consumers' sensitive data, and (3) obtain an annual privacy audit that evaluates the sufficiency of the controller's data privacy and security controls.

]]>

text/xml EN Pursuant to Title 17 Section 105 of the United States Code, this file is not subject to copyright protection and is in the public domain. Congressional Research Service, Library of Congress This file contains bill summaries for federal legislation. A bill summary describes the most significant provisions of a piece of legislation and details the effects the legislative text may have on current law and federal programs. Bill summaries are authored by the Congressional Research Service (CRS) of the Library of Congress. As stated in Public Law 91-510 (2 USC 166 (d)(6)), one of the duties of CRS is "to prepare summaries and digests of bills and resolutions of a public general nature introduced in the Senate or House of Representatives". For more information, refer to the User Guide that accompanies this file.