United States of America: (Re-)introduction of the Consumer Data Privacy and Security Act

The Consumer Data Privacy and Security Act is (re-)introduced to the U.S. Senate as Bill 1494. The bill aims to raise the protection of consumers' personal data and to create standards for U.S. businesses that collect, process and use personally identifiable data. The bill defines criteria for the gathering of personal data, such as preventing corporations from collecting such data without the individual's consent, unless it is reasonably necessary for certain allowed reasons. Businesses must make their privacy policies public, establish data security systems to protect personal information, and provide individuals reasonable access to and control over their data. Particularly, the bill introduces the rights to access, delete and rectify data and to data portability.