Bill > HR2701

This bill establishes the Online Privacy Act of 2023, which provides individual rights relating to privacy of personal information, sets privacy and security requirements for covered entities that collect, process, maintain, or disclose personal information, and creates a new Digital Privacy Agency to enforce these rights and requirements. Key provisions of the bill include: - Granting individuals new rights like the right of access, correction, deletion, portability, human review of automated decisions, individual autonomy, and impermanence of their personal information. - Requiring covered entities to minimize the collection, processing, maintenance, and disclosure of personal information, obtain consent before certain activities, and implement reasonable information security measures. - Prohibiting covered entities from disclosing personal information to entities not subject to U.S. jurisdiction or not compliant with the Act, discriminating in opportunities based on protected class status, using "dark patterns", and re-identifying de-identified personal information. - Establishing the Digital Privacy Agency as an independent agency to implement and enforce the Act, with rulemaking, investigative, and enforcement powers. - Authorizing private rights of action, state enforcement, and civil penalties for violations of up to $42,000 per affected individual. - Preserving existing federal privacy laws while allowing the Act to provide greater protections. The bill aims to strengthen individual privacy rights and place new obligations on companies that collect and use personal information.