A bill to establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission, to amend the Children’s Online Privacy Protection Act of 1998 to improve provisions relating to collection, use, and disclosure of personal information of children, and for other purposes.
Latest action (4 Dec 2017): Introduced
What this bill does
This bill, S. 2187, would create a new federal privacy framework administered by the Federal Trade Commission covering how businesses collect, use, store, and share personal data. It would require covered entities to adopt security safeguards, build privacy protections into products and services ("privacy by design"), give individuals clear notice of data practices, and offer opt-in consent mechanisms for uses of personal data beyond core transactions, including for behavioral advertising or sharing with third parties. It also would require processes letting individuals access, correct, or request deletion of their information, and it establishes breach-notification duties, enforcement mechanisms (FTC, U.S. Attorney General, and state attorneys general, with civil penalties but no private right of action), and optional industry "safe harbor" compliance programs. A second part of the bill would amend the Children's Online Privacy Protection Act to strengthen rules on collecting and using children's and teens' personal information, including geolocation data, targeted marketing, and content removal.
The bill would primarily affect businesses that collect personal data through commerce, especially online, requiring new compliance obligations, and would affect consumers—adults, teens, and children—by giving them greater rights over their personal information and additional protections for minors.
The bill was introduced in the Senate on December 4, 2017, by Senator Robert Menendez and referred to the Committee on Commerce, Science, and Transportation. It has not received a vote and, per official congressional records, did not advance further in that session of Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
This bill addresses the protection of personal information by
• requiring entities to carry out security measures to protect the personal information they collect and maintain,
• limiting the collection and distribution of personal information,
• requiring specified notice with respect to certain security breaches,
• restricting targeted marketing to children, and
• otherwise modifying provisions relating to the collection and use of personal information of children or adults.
Common questions
- What does S. 2187 do?
- This bill, S. 2187, would create a new federal privacy framework administered by the Federal Trade Commission covering how businesses collect, use, store, and share personal data. It would require covered entities to adopt security safeguards, build privacy protections into products and services ("privacy by design"), give individuals clear notice of data practices, and offer opt-in consent mechanisms for uses of personal data beyond core transactions, including for behavioral advertising or sharing with third parties. It also would require processes letting individuals access, correct, or request deletion of their information, and it establishes breach-notification duties, enforcement mechanisms (FTC, U.S. Attorney General, and state attorneys general, with civil penalties but no private right of action), and optional industry "safe harbor" compliance programs. A second part of the bill would amend the Children's Online Privacy Protection Act to strengthen rules on collecting and using children's and teens' personal information, including geolocation data, targeted marketing, and content removal. The bill would primarily affect businesses that collect personal data through commerce, especially online, requiring new compliance obligations, and would affect consumers—adults, teens, and children—by giving them greater rights over their personal information and additional protections for minors. The bill was introduced in the Senate on December 4, 2017, by Senator Robert Menendez and referred to the Committee on Commerce, Science, and Transportation. It has not received a vote and, per official congressional records, did not advance further in that session of Congress.
- Has S. 2187 become law?
- Not yet. As of 4 Dec 2017, S. 2187 is introduced.
- Who sponsored S. 2187?
- S. 2187 was sponsored by Sen. Robert “Bob” Menendez [D-NJ, 2006-2024] (Democrat-NJ), with 0 cosponsors.
- What's the latest action on S. 2187?
- Introduced (4 Dec 2017).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Virginia Graeme Baker Pool and Spa Safety Reauthorization Act
PACK Act
Small Business Payment for Performance Act of 2025
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.