Sec. 210. Unified opt-out mechanisms
275 words·~1 min read·
/bill/117/hr/8152/rh/section-210·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
For the rights established under subsection
(b)of section 204, subsection
(c)of section 204 (except as provided for under section 101(b)(16)), and section 206(b)(3)(C), following public notice and opportunity to comment and not later than 18 months after the date of enactment of this Act, the Commission shall establish or recognize one or more acceptable privacy protective, centralized mechanisms, including global privacy signals such as browser or device privacy settings, other tools offered by covered entities or service providers, and registries of identifiers, for individuals to exercise all such rights through a single interface for a covered entity or service provider to utilize to allow an individual to make such opt out designations with respect to covered data related to such individual. Any such centralized opt-out mechanism shall— require covered entities or service providers acting on behalf of covered entities to inform individuals about the centralized opt-out choice; not be required to be the default setting, but may be the default setting provided that in all cases the mechanism clearly represents the individual’s affirmative, freely given, and unambiguous choice to opt out; be consumer-friendly, clearly described, and easy-to-use by a reasonable individual; permit the covered entity or service provider acting on behalf of a covered entity to have an authentication process the covered entity or service provider acting on behalf of a covered entity may use to determine if the mechanism represents a legitimate request to opt out; be provided in any covered language in which the covered entity provides products or services subject to the opt-out; and be provided in a manner that is reasonably accessible to and usable by individuals with disabilities.