This bill would aim to increase privacy protections for users of social media and other online platforms by strengthening consumers’ options for seeking recourse when data breaches occur and ensuring companies comply with privacy policies that protect consumers.
Terms of service agreements would have to be written in plain language and users would have the ability to see what information about them has already been collected and shared. Users would be provided with greater access to and control over their data, and would have the right to opt-out and keep their information private by disabling data tracking and collection.
Online platforms would be required to have a privacy program in place that’d be audited at least once every two years. They would be required to notify users of a data breach within 72 hours of it occurring.
The Federal Trade Commission (FTC) would be empowered to take civil action against violations of privacy protections as unfair and deceptive trade practices (including against common carriers and non-profits). State attorneys general could also take action after notifying the FTC to give federal authorities a chance to intervene as states couldn’t pursue civil actions against a defendant that’s subject to an FTC action.
This requirements of this legislation would take effect 180 days after enactment, and would not apply retroactively.