Sec. 5. Data brokers
350 words·~2 min read·
/bill/119/hr/8413/ih/section-5·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A data broker shall post on a publicly available website or mobile application a conspicuous notice that— states that the entity maintaining the website or application is a data broker; is clear, not misleading, and readily accessible by the public; and informs a consumer how to exercise any consumer right described under section 2. Not later than 12 months after the date of the enactment of this Act, and annually thereafter, a data broker shall register with the Commission by filing a registration statement and paying a reasonable registration fee set by the Commission that includes the following information:
The legal name of the data broker. A contact person and the primary physical address, email address, telephone number, and website address for the data broker. A description of each category of personal data sold by the data broker. A statement of whether the data broker implements a purchaser credentialing process. A description of any incident of unauthorized access to personal data that the data broker has reported to a Federal or State governmental entity pursuant to an applicable law, rule, or regulation during the year before the year in which the registration is filed, and if known, the total number of consumers affected by each previously reported incident of such unauthorized access.
A link to the privacy policy published in accordance with section 3(g). A link to a website published by the data broker that informs a consumer how to exercise any consumer right described under section 2. Not later than 18 months after the date of the enactment of this Act, the Commission shall establish and maintain on a publicly available website of the Commission a searchable, central registry of data brokers registered under subsection
(b)that includes the following: A search feature that allows a person searching the registry to identify a data broker. For each data broker, a link to the privacy policy published in accordance with section 3(g). For each data broker, a link to a website published by the data broker that informs a consumer how to exercise any consumer right described under section 2.