Two high-profile U.S. senators have introduced legislation designed to give consumers more control over what information about them is collected online, but privacy advocates said the bill will do little to curb wide-spread data-collection practices now in place.
Senators John Kerry, a Massachusetts Democrat, and John McCain, an Arizona Republican, introduced the Commercial Privacy Bill of Rights Act Tuesday. The bill would require Web-based businesses that collect consumer information to give clear notice about the data collection and allow consumers to opt out.
The bill would require Web-based businesses to collect only as much information as necessary to complete a transaction or deliver a service, and it would require collectors to take security measures to protect the data.
"John and I start with a bedrock belief that protecting Americans' personal, private information is vital to making the Information Age everything it should be," Kerry said in a statement. "Americans have a right to decide how their information is collected, used, and distributed and businesses deserve the certainty that comes with clear guidelines."
The bill will help assure Web users that their information is secure, while allowing the information economy to continue to "thrive," Kerry added. "This is a win for bipartisanship, a win for consumers, a win for the Internet and a win for businesses online and off," he said. "Most importantly, in a Washington where partisanship and division too often triumph, it's a victory for common sense."
The bill allows businesses to market and advertise to all consumers, while businesses that have no relationship with consumers are prohibited from collecting or sharing private their information, McCain added.
Collection and sharing by businesses with no relationship to the consumer is a practice that "American consumers reject as an unreasonable invasion of privacy," he said in a statement. "Consumers want to shop, browse and share information in an environment that is respectful of their personal information."
But members of privacy groups Consumer Watchdog, the Center for Digital Democracy (CDD) and Consumer Action said they couldn't support the bill. The legislation would take away some policy-making authority from the U.S. Federal Trade Commission and would take away the right of consumers to file lawsuits against companies for privacy violations, they said. The legislation also has no requirement for a national do-not-track mechanism that consumers can sign up for, and has an exemption for Facebook's data collection, critics said.
Sign up for CIO Asia eNewsletters.