Bill > S2290

This bill, the Data Broker List Act of 2021, establishes requirements for data brokers, businesses that collect and sell personal information of consumers without a direct relationship. The bill prohibits data brokers from acquiring or using personal information through fraudulent means, for stalking/harassment, fraud, or unlawful discrimination. It requires data brokers to implement comprehensive information security programs and register annually with the Federal Trade Commission, providing details on their data collection and opt-out policies. The FTC is tasked with enforcing the bill's provisions and conducting annual reviews to assess compliance.