Digital Data Protection: New Privacy Standards and Data Control
This act establishes new national standards for digital personal data protection. Citizens will gain greater control over their data, including the right to access, correct, and delete information, while companies will need to operate with more transparency and accountability. The goal is to enhance digital security and prevent misuse.
Key points
Increased Data Control: You have the right to know what data is collected about you, who processes it, and for what purpose. You can request access, correction, or deletion of your data.
Mandatory Privacy Notices: Companies must clearly and understandably inform about their data practices, including what they collect and to whom they disclose it.
Prohibition of Discrimination: Companies cannot use your data to discriminate based on protected characteristics such as race, gender, or age.
Affirmative Consent for Sensitive Data: Collecting or disclosing sensitive data (e.g., health, biometric, location) requires your explicit consent.
Enhanced Data Security: Companies must implement appropriate security measures to protect your data from unauthorized access.
Increased Enforcement Powers: The Federal Trade Commission (FTC) and state attorneys general will have greater authority to enforce these regulations, including imposing financial penalties.
Expired
Additional Information
Print number: 117_S_3065
Sponsor: Sen. Cortez Masto, Catherine [D-NV]
Process start date: 2021-10-26