Online Privacy Protection Act of 1999
Latest action (15 Apr 1999): Introduced
What this bill does
S. 809, the Online Privacy Protection Act of 1999, would direct the Federal Trade Commission to write regulations, within one year of enactment, governing how operators of commercial websites and online services collect, use, and disclose personal information from individuals age 13 and older who are not already covered by the Children's Online Privacy Protection Act. Operators would generally be required to post clear notice of what information they collect and how it is used, offer a simple way for individuals to limit disclosure of their information for unrelated purposes, provide individuals access to certain information sold or transferred to outside companies, and maintain reasonable security procedures. Violations would be treated as unfair or deceptive practices under FTC law. The bill allows industry-developed self-regulatory guidelines to serve as a "safe harbor" if approved by the FTC.
The bill primarily affects operators of commercial websites and online services (with an exemption for certain nonprofits), and internet users whose personal information is collected. State attorneys general would be authorized to bring civil enforcement actions on behalf of residents, subject to notifying the FTC, which could intervene. Certain regulated industries (banks, credit unions, airlines, etc.) would have compliance enforced by their existing federal regulators. The Act would generally preempt inconsistent state laws, except for fraud prosecutions, and requires an FTC review and report to Congress five years after regulations take effect.
The bill was introduced on April 15, 1999, by Senator Conrad Burns with Senator Ron Wyden, and referred to the Senate Committee on Commerce, Science, and Transportation. It did not receive a vote and did not advance further in the 106th Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Online Privacy Protection Act of 1999 - Makes it unlawful for an operator of a Web site or online service to collect, use, or disclose personal information concerning an individual (age 13 and above) in a manner that violates regulations to be prescribed by the Federal Trade Commission (FTC) requiring such operators to protect the confidentiality, security, and integrity of personal information it collects from such individuals, including providing a process for them to consent to or limit the disclosure of such information.Directs the FTC to provide incentives for efforts of self-regulation by operators to implement appropriate protections for such information.Authorizes the States to enforce such regulations by bringing actions on behalf of residents, requiring the State attorney general to first notify the FTC of such action. Authorizes the FTC to intervene in any such action.Provides for enforcement of this Act through the Federal Trade Commission Act.
Common questions
- What does S. 809 do?
- S. 809, the Online Privacy Protection Act of 1999, would direct the Federal Trade Commission to write regulations, within one year of enactment, governing how operators of commercial websites and online services collect, use, and disclose personal information from individuals age 13 and older who are not already covered by the Children's Online Privacy Protection Act. Operators would generally be required to post clear notice of what information they collect and how it is used, offer a simple way for individuals to limit disclosure of their information for unrelated purposes, provide individuals access to certain information sold or transferred to outside companies, and maintain reasonable security procedures. Violations would be treated as unfair or deceptive practices under FTC law. The bill allows industry-developed self-regulatory guidelines to serve as a "safe harbor" if approved by the FTC. The bill primarily affects operators of commercial websites and online services (with an exemption for certain nonprofits), and internet users whose personal information is collected. State attorneys general would be authorized to bring civil enforcement actions on behalf of residents, subject to notifying the FTC, which could intervene. Certain regulated industries (banks, credit unions, airlines, etc.) would have compliance enforced by their existing federal regulators. The Act would generally preempt inconsistent state laws, except for fraud prosecutions, and requires an FTC review and report to Congress five years after regulations take effect. The bill was introduced on April 15, 1999, by Senator Conrad Burns with Senator Ron Wyden, and referred to the Senate Committee on Commerce, Science, and Transportation. It did not receive a vote and did not advance further in the 106th Congress.
- Has S. 809 become law?
- Not yet. As of 15 Apr 1999, S. 809 is introduced.
- Who sponsored S. 809?
- S. 809 was sponsored by Sen. Conrad Burns [R-MT, 1989-2006] (Republican-MT), with 2 cosponsors.
- What's the latest action on S. 809?
- Introduced (15 Apr 1999).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Small Business Payment for Performance Act of 2025
Strategic Task Force on Scam Prevention Act
PACK Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.