Information Protection and Security Act

The Information Protection and Security Act (S. 500) would require the Federal Trade Commission (FTC) to establish strict regulations for "information brokers"—companies that collect and sell personal data. Under this bill, these companies would be legally required to ensure the accuracy and confidentiality of the data they hold while implementing safeguards to prevent identity theft and unauthorized access.

For everyday citizens, this legislation would provide the right to see what information these brokers have collected about them, identify who has purchased that data, and demand the correction of any errors. Additionally, the bill would empower individuals and state attorneys general to sue companies that violate these security standards, providing a path for legal recourse and financial damages if a person is harmed by a data breach or the misuse of their personal information.