Eshoo & Lofgren Introduce the Online Privacy Act

Press Release

Today, Congresswomen Anna G. Eshoo (CA-18) and Zoe Lofgren (CA-19) introduced the Online Privacy Act of 2019, H.R. 4978, sweeping legislation that creates user rights, places obligations on companies to protect users' data, establishes a new federal agency to enforce privacy protections, and strengthens enforcement of privacy law violations.

"Every American is vulnerable to privacy violations with few tools to defend themselves," said Rep. Eshoo. "Too often, our private information online is stolen, abused, used for profit, or grossly mishandled. We're proud to introduce the Online Privacy Act to restore and protect the American people's right to privacy. Our legislation ensures that every American has control over their own data, companies are held accountable, and the government provides tough but fair oversight."

"Our country urgently needs a legal framework to protect consumers from the ever-growing data-collection and data-sharing industries that make billions annually off Americans' personal information," said Rep. Lofgren. "Privacy for online consumers has been nonexistent -- and we need to give users control of their personal data by making legitimate changes to business practices. The Online Privacy Act creates a robust framework that balances the actual needs of businesses with fair privacy rights and expectations for users."

The Online Privacy Act protects individuals, encourages innovation, and restores trust in technology companies by:

Creating User Rights -- The bill grants every American the right to access, correct, or delete their data. It also creates new rights, like the right to impermanence, which lets users decide how long companies can keep their data.
Placing Clear Obligations on Companies -- The bill minimizes the amount of data companies collect, process, disclose, and maintain, and bars companies from using data in discriminatory ways. Additionally, companies must receive consent from users in plain, simple language.
Establishing a Digital Privacy Agency (DPA) -- The bill establishes an independent agency led by a Director that's appointed by the President and confirmed by the Senate for a five-year term. The DPA will enforce privacy protections and investigate abuses.
Strengthening Enforcement -- The bill empowers state attorneys general to enforce violations of the bill and allows individuals to appoint nonprofits to represent them in private class action lawsuits.

Source