0
Online Privacy Act of 2023
12/15/2023, 3:57 PM
Summary of Bill HR 2701
Under the Online Privacy Act, companies would be required to obtain explicit consent from individuals before collecting their personal information. This includes data such as names, addresses, phone numbers, and browsing history. Companies would also be required to clearly disclose how this information will be used and provide individuals with the option to opt out of having their data collected.
Additionally, the bill would establish a new federal agency, the Online Privacy Protection Agency, to enforce these regulations and investigate complaints of privacy violations. This agency would have the authority to impose fines on companies that violate the Online Privacy Act. Overall, the Online Privacy Act of 2023 aims to give individuals more control over their personal information online and hold companies accountable for how they collect and use this data. It is currently being debated in Congress and may undergo changes before being voted on.
Congressional Summary of HR 2701
Online Privacy Act of 2023
This bill establishes online privacy rights for personal information, including the contents of personal communications. It also applies requirements for protecting those rights to certain data processors, service providers, and other entities that collect, process, or maintain personal information and transmit it online.
The entities covered by the bill must generally permit individuals to oversee and control their personal information, including by allowing them to
- access, download, and transmit their information;
- correct inaccurate or incomplete information;
- request the deletion of their information; and
- request human reviews of certain automated processes.
Further, the bill limits how covered entities may use, retain, and disclose personal information and otherwise requires actions to preserve information privacy. For example, covered entities must (1) notify and obtain consent from individuals before using, retaining, or disclosing their information in most instances; and (2) maintain privacy and information security policies. Additionally, covered entities may not process information for purposes related to employment, housing, and other opportunities in a discriminatory manner.
The bill establishes the Digital Privacy Agency to administer the provisions of the bill and transfers certain authorities, employees, and responsibilities related to information privacy from the Federal Communications Commission to the agency.
Violations of the bill's requirements may be enforced by the Digital Privacy Agency, states, and individuals. The bill sets out specific guidelines for investigating and adjudicating violations, with violations subject to civil penalties.
The bill also requires research and public education on information privacy.
