S 2201 · 107th Congress 2001–2003, ended

Online Personal Privacy Act

Introduced Apr 18, 2002 Originated Senate Sponsor Ernest F. Hollings D-SC

Fact sheet

Latest action · Aug 1, 2002 Placed on Senate Legislative Calendar under General Orders. Calendar No. 551.

Progress

Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.

  1. IntroducedApr 18, 2002
  2. Passed SenateNot reached
  3. Passed HouseNot reached
  4. To the PresidentNot reached
  5. Became lawNot reached

Summary

Online Personal Privacy Act - Title I: Online Privacy Protection - Prohibits an Internet service provider, online service provider, or operator of a commercial website (provider) from collecting or disclosing personally identifiable information (name, address, and phone number) of a user without clear and conspicuous user notice. Requires a provider to: (1) obtain affirmative written or electronic consent to the collection and disclosure of sensitive personally identifiable information (health, race, political party, religious belief, sexual orientation, social security number, or financial information); (2) provide robust notice, in addition to clear and conspicuous notice, of the opportunity to opt-out of the collection or disclosure of personally identifiable information; and (3) notify all users of a change in policy for the collection, use, or disclosure of sensitive or nonsensitive personally identifiable user information. Requires each provider to designate a privacy compliance officer responsible for ensuring compliance with this title and other privacy policies.

(Sec. 104) Provides exceptions to the privacy requirements, including emergency disclosures : (1) that are critical to the life, safety, or health of the user or other individuals; (2) with respect to which obtaining prior consent is not feasible; and (3) that are no greater in scope than is necessary to accomplish the emergency purpose.

(Sec. 105) Requires a provider to: (1) allow reasonable user access to personally identifiable information collected and retained; and (2) establish and maintain procedures to protect the security, confidentiality, and integrity of such information.

Title II: Enforcement - Provides for enforcement of this Act through the Federal Trade Commission (FTC), citing violations as unfair or deceptive acts or practices.

(Sec. 203) Presumes compliance with requirements of this title if a provider: (1) is a participant in a self-regulatory program approved by the FTC; and (2) is deemed by such program to be in full compliance. Provides for FTC approval of such programs that provide the privacy protection required under title I. Requires the FTC, every two years, to reevaluate its approval of each program. Allows for appeal of an FTC decision not to approve a program.

(Sec. 204) Makes this Act inapplicable to a small business that: (1) has annual gross revenue under $1 million; (2) has fewer than 25 employees; (3) collects or uses personally identifiable information from fewer than 1,000 consumers per year for a purpose unrelated to a regular consumer transaction; (4) does not process such collected information; and (5) does not sell or disclose such information for consideration.

(Sec. 205) Authorizes enforcement actions by both private users and States on behalf of their residents. Allows FTC intervention in State actions.

(Sec. 207) Provides whistleblower protections for provider employees.

Title III: Application to Congress and Federal Agencies - Requires the Sergeant at Arms of the United States Senate to develop regulations governing Internet use by Senate officers and employees is accordance with this Act. Applies this Act to each Federal agency that is an Internet or online service provider or that operates a website, except when application would compromise law enforcement activities or investigative, security, or safety operations.

Title IV: Miscellaneous - Provides definitions for purposes of this Act.

(Sec. 403) Requires the FTC to: (1) initiate and complete a rulemaking for implementing this Act; and (2) report to specified congressional committees on its implementation and effectiveness.

(Sec. 405) Amends the National Institute of Standards and Technology Act to direct the National Institute of Standards and Technology to encourage and support the development of computer programs, protocols, or software capable of being installed on computers with Internet access that would automatically execute a program for the protection of personally-identifiable or other sensitive, privacy-related information.

Title V: Offline Privacy - Requires the FTC Chairman to submit to specified congressional committees recommendations and proposed regulations on similar protection standards for entities that collect personally identifiable information using methods or actions that are not covered in this Act.

Cosponsors 10

Members who signed on, in the order they did. Signatures ran from Apr 18, 2002 to Apr 23, 2002, with 9 there on the day it was introduced.

SeatCosponsorSigned on
D-FLBill NelsonOriginalApr 18, 2002
R-MTConrad R. BurnsOriginalApr 18, 2002
D-HIDaniel K. InouyeOriginalApr 18, 2002
D-MOJean CarnahanOriginalApr 18, 2002
D-LAJohn B. BreauxOriginalApr 18, 2002
D-WVJohn D. Rockefeller IVOriginalApr 18, 2002
D-MAJohn F. KerryOriginalApr 18, 2002
D-GAMax ClelandOriginalApr 18, 2002
R-AKTed StevensOriginalApr 18, 2002
D-NJRobert G. TorricelliApr 23, 2002

Actions 7

Everything that happened, newest first.

  1. Aug 1, 2002Committee on Commerce, Science, and Transportation. Reported by Senator Hollings with an amendment in the nature of a substitute. With written report No. 107-240. Minority views filed.
  2. Aug 1, 2002Placed on Senate Legislative Calendar under General Orders. Calendar No. 551.
  3. May 17, 2002Committee on Commerce, Science, and Transportation. Ordered to be reported with an amendment in the nature of a substitute favorably.
  4. Apr 25, 2002Committee on Commerce, Science, and Transportation. Hearings held. Hearings printed: S.Hrg. 107-1150.
  5. Apr 18, 2002Introduced in Senate
Show all 7 actions

Subjects

Assigned by the Library of Congress. Policy area: Science, Technology, Communications.

Support LegiList

This page is free, carries no paywall, and is built and maintained by one person. If the record here is useful to you, a few dollars keeps it going.

$1 $5 $10

Processed by Stripe in a separate window. LegiList never sees card details.

Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.