Sec. 101. Right of access
243 words·~1 min read·
/bill/118/hr/2701/ih/section-101A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity shall make available a reasonable mechanism by which an individual may access— the categories of personal information and contents of communications of such individual that is maintained by such covered entity, including, in the case of personal information that such covered entity did not collect from such individual, how and from whom such covered entity obtained such personal information; a list of the third parties, subsidiaries, and corporate affiliates, to which such covered entity has disclosed and from which such covered entity has, at any time on or after the effective date of this Act, obtained the personal information of such individual; a concise and clear description of the business or commercial purposes of such covered entity— for collecting, processing, or maintaining the personal information of such individual; and for disclosing to a third party the personal information of such individual; and a list of automated decision-making processes that an individual has a right to request human review of under section 105 with a concise and clear description of the implications and intended effects of each such process.
A covered entity that makes available information required in subsection
(a)shall be considered in compliance with such requirements if the covered entity provides an individual with instructions on how to access a public posting of such information, including in a privacy policy, if the instructions are easy and do not require payment. Subsection (a)(3) does not apply to a small business.