Consumer Privacy Protection Act of 2011
The source supplies the latest action, but no lifecycle stage.
Latest action (25 Apr 2011): Referred to the Subcommittee on Commerce, Manufacturing, and Trade.
What this bill does
The Consumer Privacy Protection Act of 2011, introduced in the House of Representatives, would require companies that collect or use personal information from over 5,000 consumers in a year to provide notices about their data practices. These companies would also need to create and make public a privacy policy detailing how they collect, use, sell, and secure consumer information. The Federal Trade Commission (FTC) would be involved in helping to standardize how privacy policies are presented, potentially through universal wording or graphics.
Under the bill, individuals would have the opportunity to opt out of having their personal information sold or disclosed to other companies for up to five years. Businesses would also need to establish information security policies to prevent unauthorized access to consumer data. The legislation allows for self-regulatory programs, which, if approved by the FTC and providing consumer protections equal to or greater than the bill's requirements, could allow participating companies to be presumed in compliance with these rules.
This bill was introduced in April 2011 and referred to the House Committee on Energy and Commerce. Its current status is "Introduced," meaning it has not yet advanced to other legislative stages such as committee review, floor debate, or votes in either the House or Senate.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Consumer Privacy Protection Act of 2011 - Requires any entity that collects, sells, discloses for consideration, or uses personally identifiable information of more than 5,000 consumers during any consecutive 12-month period to: (1) provide consumers notice (meeting specified requirements) before using personally identifiable information for purposes unrelated to the transaction for which it was collected or upon a material change of the entity's privacy policy; and (2) establish a privacy policy (meeting specified requirements) with respect to the collection, sale, disclosure for consideration, dissemination, use, and security of consumers' personally identifiable information. Authorizes the Federal Trade Commission (FTC) to facilitate the development of harmonized, universal wording or logo-based graphics to convey the contents of privacy policy statements.
Requires each such entity to: (1) provide a consumer with the opportunity to prevent for up to five years the sale or disclosure for consideration, to any covered entity that is not an information-sharing affiliate of the entity, of the consumer's personally identifiable information that may be used for a purpose other than a transaction with such consumer; (2) give notice of any additional opportunities to limit such entity's practices with respect to collection or use of personally identifiable information; and (3) implement an information security policy that is applicable to the information security practices and treatment of personally identifiable information maintained by such entity and that is designed to prevent the unauthorized disclosure or release of such information.
Sets forth provisions concerning compliance with, approval of, and requirements of a self-regulatory program that provides protections for consumers and their personally identifiable information that are equal to or greater than protections provided under this Act.
Timeline
25 Apr 2011
Referred to the Subcommittee on Commerce, Manufacturing, and Trade.
Common questions
- What does H.R. 1528 do?
- The Consumer Privacy Protection Act of 2011, introduced in the House of Representatives, would require companies that collect or use personal information from over 5,000 consumers in a year to provide notices about their data practices. These companies would also need to create and make public a privacy policy detailing how they collect, use, sell, and secure consumer information. The Federal Trade Commission (FTC) would be involved in helping to standardize how privacy policies are presented, potentially through universal wording or graphics. Under the bill, individuals would have the opportunity to opt out of having their personal information sold or disclosed to other companies for up to five years. Businesses would also need to establish information security policies to prevent unauthorized access to consumer data. The legislation allows for self-regulatory programs, which, if approved by the FTC and providing consumer protections equal to or greater than the bill's requirements, could allow participating companies to be presumed in compliance with these rules. This bill was introduced in April 2011 and referred to the House Committee on Energy and Commerce. Its current status is "Introduced," meaning it has not yet advanced to other legislative stages such as committee review, floor debate, or votes in either the House or Senate.
- Has H.R. 1528 become law?
- The source does not supply a confirmed lifecycle stage for H.R. 1528. Check the latest action and official source below.
- Who sponsored H.R. 1528?
- H.R. 1528 was sponsored by Rep. Stearns, Cliff [R-FL-6] (R-FL), with 5 cosponsors.
- What's the latest action on H.R. 1528?
- Referred to the Subcommittee on Commerce, Manufacturing, and Trade. (25 Apr 2011).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Cybersecurity for Small Businesses Act of 2026
Combating Foreign Threats to Main Street Act of 2026
Small Business Payment for Performance Act of 2026
More bills from Rep. Stearns, Cliff [R-FL-6]
Expressing support for the designation of January 28, 2010, as National Data Privacy Day.
Requiring the display of the Ten Commandments in the United States Capitol.
Consumer Privacy Protection Act of 2005
Consumer Privacy Protection Act of 2003
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.