APPS Act of 2016
Latest action (10 Feb 2016): Introduced
What this bill does
Generate a neutral, plain-English explanation of what this bill does, who it affects and what happens next — grounded in the official text.
Official summary
Application Privacy, Protection, and Security Act of 2016 or the APPS Act of 2016
This bill directs mobile device application developers, before the application collects personal data about the user, to notify the user and obtain the user's consent regarding the terms and conditions governing the collection, use, storage, and sharing of such personal data.
Excluded from such notice and consent requirements is any "de-identified data" that cannot reasonably be used to identify or infer information about, or otherwise be linked to, a particular individual or mobile device, as determined with a reasonable level of justified confidence based on the available methods and technologies, the nature of the data at issue, and the purposes for which the data will be used.
Developers must: (1) provide users with a method to withdraw such consent and to request that the developer delete personal data or refrain from further data collection or sharing, and (2) take measures to prevent unauthorized access to personal and de-identified data.
Violations are to be treated as unfair or deceptive acts or practices under the Federal Trade Commission Act.
The Federal Trade Commission (FTC) must promulgate regulations to implement and enforce this Act.
States may bring civil actions in federal court on behalf of affected state residents.
Nothing in this Act prohibits a developer from disclosing or preserving personal data or de-identified data as required by other federal laws or, except when superceded by this Act, the laws of a state or political subdivision, including court orders.
Common questions
- What does H.R. 4517 do?
- Application Privacy, Protection, and Security Act of 2016 or the APPS Act of 2016 This bill directs mobile device application developers, before the application collects personal data about the user, to notify the user and obtain the user's consent regarding the terms and conditions governing the collection, use, storage, and sharing of such personal data. Excluded from such notice and consent requirements is any "de-identified data" that cannot reasonably be used to identify or infer information about, or otherwise be linked to, a particular individual or mobile device, as determined with a reasonable level of justified confidence based on the available methods and technologies, the nature of the data at issue, and the purposes for which the data will be used. Developers must: (1) provide users with a method to withdraw such consent and to request that the developer delete personal data or refrain from further data collection or sharing, and (2) take measures to prevent unauthorized access to personal and de-identified data. Violations are to be treated as unfair or deceptive acts or practices under the Federal Trade Commission Act. The Federal Trade Commission (FTC) must promulgate regulations to implement and enforce this Act. States may bring civil actions in federal court on behalf of affected state residents. Nothing in this Act prohibits a developer from disclosing or preserving personal data or de-identified data as required by other federal laws or, except when superceded by this Act, the laws of a state or political subdivision, including court orders. A developer may satisfy the requirements of this Act by adopting and following a code of conduct for consumer data privacy that is approved pursuant to FTC regulations.
- Has H.R. 4517 become law?
- Not yet. As of 10 Feb 2016, H.R. 4517 is introduced.
- Who sponsored H.R. 4517?
- H.R. 4517 was sponsored by Rep. Henry C. “Hank” Johnson [D-GA4] (Democrat-GA), with 5 cosponsors.
- What's the latest action on H.R. 4517?
- Introduced (10 Feb 2016).
Related bills in Science, Technology, Communications
Open-Source AI Leadership Act
AI for Secure Networks Act
Memory Chip Competitiveness Assessment Act of 2026
ITS Codification Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.