Commercial Privacy Bill of Rights Act

This bill’s backers hope to provide comprehensive protection of personally identifiable information for individuals. Their method – requiring transparency, giving individuals the ability to opt-out of collection, as well as creating limitations on what information is collected, how much and how long it can be kept. This bill focuses on providing individuals notice about the information being collected about them as well as action they can take. It would require companies to provide individuals with the clear ability to opt-out of unauthorized use of their information. For sensitive personally identifiable information, like medical conditions, the Act would force companies to get consent, have people opt-in. Individuals would also be able to access and correct the information or have its use and distribution stopped. In terms of data collected, companies could only collect the amount of information necessary to provide the requested service and then they must only keep the information as long as they need to in order to do the service.