I 
114TH CONGRESS 
1ST SESSION H. R. 1053 
To establish a regulatory framework for the comprehensive protection of 
personal data for individuals under the aegis of the Federal Trade 
Commission, to amend the Children’s Online Privacy Protection Act 
of 1998 to improve provisions relating to collection, use, and disclosure 
of personal information of children, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
FEBRUARY 24, 2015 
Mr. SIRES introduced the following bill; which was referred to the Committee 
on Energy and Commerce 
A BILL 
To establish a regulatory framework for the comprehensive 
protection of personal data for individuals under the 
aegis of the Federal Trade Commission, to amend the 
Children’s Online Privacy Protection Act of 1998 to im-
prove provisions relating to collection, use, and disclosure 
of personal information of children, and for other pur-
poses. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. TABLE OF CONTENTS. 
The table of contents for this Act is as follows: 
Sec. 1. Table of contents. 
VerDate Sep 11 2014 
02:23 Mar 03, 2015
Jkt 049200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6211
E:\BILLS\H1053.IH
H1053
emcdonald on DSK67QTVN1PROD with BILLS
TITLE I—COMMERCIAL PRIVACY 
Sec. 101. Short title. 
Sec. 102. Findings. 
Sec. 103. Definitions. 
Subtitle A—Right to Security and Accountability 
Sec. 111. Security. 
Sec. 112. Accountability. 
Sec. 113. Privacy by design. 
Subtitle B—Right to Notice and Individual Participation 
Sec. 121. Transparent notice of practices and purposes. 
Sec. 122. Individual participation. 
Subtitle C—Rights Relating to Data Minimization, Constraints on 
Distribution, and Data Integrity 
Sec. 131. Data minimization. 
Sec. 132. Constraints on distribution of information. 
Sec. 133. Data integrity. 
Subtitle D—Right to Notice of Breaches of Security 
Sec. 141. Definitions. 
Sec. 142. Notice to individuals. 
Sec. 143. Notice to law enforcement. 
Subtitle E—Enforcement 
Sec. 151. General application. 
Sec. 152. Enforcement by the Federal Trade Commission. 
Sec. 153. Enforcement by Attorney General. 
Sec. 154. Enforcement by States. 
Sec. 155. Civil penalties. 
Sec. 156. Effect on other laws. 
Sec. 157. No private right of action. 
Subtitle F—Co-Regulatory Safe Harbor Programs 
Sec. 161. Establishment of safe harbor programs. 
Sec. 162. Participation in safe harbor program. 
Subtitle G—Application With Other Federal Laws 
Sec. 171. Application with other Federal laws. 
Subtitle H—Development of Commercial Data Privacy Policy in the 
Department of Commerce 
Sec. 181. Direction to develop commercial data privacy policy. 
TITLE II—ONLINE PRIVACY OF CHILDREN 
Sec. 201. Short title. 
Sec. 202. Findings. 
Sec. 203. Definitions. 
VerDate Sep 11 2014 
02:23 Mar 03, 2015
Jkt 049200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6211
E:\BILLS\H1053.IH
H1053
emcdonald on DSK67QTVN1PROD with BILLS
Sec. 204. Online collection, use, and disclosure of personal information of chil-
dren. 
Sec. 205. Targeted marketing to children or minors. 
Sec. 206. Digital Marketing Bill of Rights for Teens and Fair Information 
Practices Principles. 
Sec. 207. Online collection of geolocation information of children and minors. 
Sec. 208. Removal of content. 
Sec. 209. Enforcement and applicability. 
Sec. 210. Rule for treatment of users of websites, services, and applications di-
rected to children or minors. 
Sec. 211. Effective dates. 
TITLE I—COMMERCIAL PRIVACY 
SEC. 101. SHORT TITLE. 
This title may be cited as the ‘‘Commercial Privacy 
Bill of Rights Act of 2015’’. 
SEC. 102. FINDINGS. 
The Congress finds the following: 
(1) Personal privacy is worthy of protection 
through appropriate legislation. 
(2) Trust in the treatment of personally identi-
fiable information collected on and off the Internet 
is essential for businesses to succeed. 
(3) Persons interacting with others engaged in 
interstate commerce have a significant interest in 
their personal information, as well as a right to con-
trol how that information is collected, used, stored, 
or transferred. 
(4) Persons engaged in interstate commerce 
and collecting personally identifiable information on 
individuals have a responsibility to treat that infor-
VerDate Sep 11 2014 
02:23 Mar 03, 2015
Jkt 049200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H1053.IH
H1053
emcdonald on DSK67QTVN1PROD with BILLS