(B) PRIVILEGES
AND
IMMUNITIES.—Any 
person who violates subsection (a) or (b) or a 
regulation promulgated under this Act shall be 
subject to the penalties and entitled to the 
privileges and immunities provided in the Fed-
eral Trade Commission Act (15 U.S.C. 41 et 
seq.). 
(C) AUTHORITY PRESERVED.—Nothing in 
this section shall be construed to limit the au-
thority of the Commission under any other pro-
vision of law. 
(D) RULEMAKING.—The Commission shall 
promulgate in accordance with section 553 of 
title 5, United States Code, such rules as may 
be necessary to carry out this section. 
(d) STUDY AND REPORT.— 
(1) STUDY.—The Commission shall conduct a 
study on the implementation and enforcement of this 
section. Such study shall include— 
(A) an analysis of the effectiveness of the 
centralized system established in subsection 
(b)(1)(A); 
(B) the number deletion requests sub-
mitted annually using such centralized system; 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00015
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS
(C) an analysis of the progress of coordi-
nating the operation and enforcement of such 
requests with similar systems established and 
maintained by the various States; and 
(D) any other area determined appropriate 
by the Commission. 
(2) REPORT.—Not later than 3 years after the 
date of enactment of this section, and annually 
thereafter for each of the next 4 years, the Commis-
sion shall submit to the Committee on Commerce, 
Science, and Transportation of the Senate and the 
Committee on Energy and Commerce of the House 
of Representatives a report containing— 
(A) the results of the study conducted 
under paragraph (1); 
(B) a summary of any enforcement actions 
taken pursuant to this Act; and 
(C) recommendations for such legislation 
and administrative action as the Commission 
determines appropriate. 
(e) DEFINITIONS.—In this section: 
(1) COMMISSION.—The term ‘‘Commission’’ 
means the Federal Trade Commission. 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00016
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS
(2) 
CREDENTIALING
PROCESS.—The 
term 
‘‘credentialing process’’ means the practice of taking 
reasonable steps to confirm— 
(A) the identity of the entity with whom 
the data broker has a direct relationship; 
(B) that any data disclosed to the entity 
by such data broker will be used for the de-
scribed purpose of such disclosure; and 
(C) that such data will not be used for un-
lawful purposes. 
(3) DATA BROKER.— 
(A) 
IN
GENERAL.—The 
term 
‘‘data 
broker’’ means an entity that knowingly collects 
or obtains the personal information of an indi-
vidual with whom the entity does not have a di-
rect relationship and then— 
(i) uses the personal information to 
perform a service for a third party; or 
(ii) sells, licenses, trades, provides for 
consideration, or is otherwise compensated 
for disclosing personal information to a 
third party. 
(B) EXCLUSION.—The term ‘‘data broker’’ 
does not include an entity who solely uses, sells, 
licenses, trades, provides for consideration, or is 
VerDate Sep 11 2014 
03:11 Feb 24, 2022
Jkt 029200
PO 00000
Frm 00017
Fmt 6652
Sfmt 6201
E:\BILLS\H6752.IH
H6752
pbinns on DSKJLVW7X2PROD with BILLS