New Federal Bill Aims to Protect Privacy of Sensitive Personal Information

On March 10, 2021, Rep. Suzan DelBene (D-WA) introduced the Information Transparency & Personal Data Control Act which would seek to protect privacy of sensitive personal information.

The Act would require the Federal Trade Commission to put forward regulations to require online platforms to put in place opt-in protocols along with plain English privacy policy descriptions. The opt-in model will allow consumers to pick and choose who has access to their sensitive personal information. The bill defines “sensitive personal information” to encompasses genetic data, financial account information, geolocations, and information about religious beliefs and sexual orientation, among other categories.

The Act would require companies that collect, store, process, sell, share, or otherwise use sensitive personal information to obtain privacy audits by a neutral third party and submit those results to the FTC every two years.

The Act would make the FTC the primary enforcer of consumer privacy. If the FTC does not act within 60 days of being notified of a violation, the enforcement authority opens to include state attorneys’ general.

The Act would allow the FTC to fine companies which are in violation of federal privacy regulations on their first offense.  Currently, the FTC does not have such authority and companies can only be fined for their second violation of the FTC-enforced rule.  The bill will also provide the FTC with additional personnel and monetary resources to deal with the its expanded privacy portfolio.

We will continue to monitor the Information Transparency & Personal Data Control Act and other proposed federal privacy bills as they move through the legislative process.

Ask Clarip today how we can help you solve your biggest data privacy compliance pain points. Schedule a demo of the Clarip’s Privacy Compliance software or call 1-888-252-5653 today!