Bill > S2378

This bill, the Commercial Privacy Bill of Rights Act of 2014, aims to establish a comprehensive framework for protecting individuals' personal data online and offline, primarily enforced by the Federal Trade Commission (FTC). It grants individuals rights such as transparency in how their data is collected and used, the ability to participate in decisions about their data, and rights related to data minimization, controlled distribution, and data integrity. The bill also mandates security measures for covered entities (companies that collect personal data) and requires them to have accountability for their privacy practices. Furthermore, it introduces a right to notice of data breaches, requiring companies to inform individuals and relevant authorities if their personal information is compromised. A significant portion of the bill also amends the Children's Online Privacy Protection Act of 1998 (COPPA) to strengthen protections for children and minors online, including specific rules against targeted marketing to them and enhanced requirements for consent and data handling. The bill also includes provisions for enforcement by state attorneys general and establishes co-regulatory "safe harbor" programs.