Bill > S2025

This bill, titled the Data Broker Accountability and Transparency Act, aims to regulate "data brokers," which are defined as commercial entities that collect, maintain, and sell or provide access to personal information of individuals who are not their customers or employees. The bill prohibits data brokers from obtaining personal information through false pretenses, such as using forged documents or making misleading statements. A key provision requires data brokers to establish reasonable procedures to ensure the accuracy of the personal information they collect, with an exception for information collected solely for fraud prevention or identity verification purposes. Furthermore, data brokers must provide individuals with a way to review their personal information at least once a year, free of charge, and to dispute any inaccuracies. They must also clearly inform consumers on their website how to review their information and how to opt out of having their information used for marketing purposes. The Federal Trade Commission (FTC) is tasked with creating regulations to implement and enforce these requirements, including measures for auditing data access and establishing a centralized website for consumer information. Violations of these regulations will be treated as unfair or deceptive practices under the Federal Trade Commission Act, and both the FTC and State Attorneys General will have enforcement powers, including the ability to seek civil penalties. The bill also clarifies that it does not supersede or limit other federal laws, including the Fair Credit Reporting Act.