Democratic Senators introduced a second COVID-19 privacy bill.

It addresses the collection and processing of data in connection with fighting the COVID-19 pandemic. This Democratic Senate bill shares a number of key points with the recently filed Republican Senate bill, among them:

  • consent required for collection and revocable
  • disclosure at collection
  • information security
  • data minimization (collect only what you need)
  • retention limitation (delete after revocation and after the pandemic).

The bill would be enforceable by the Federal Trade Commission and State Attorneys General, but this bill also adds a private right of action with statutory damages.

Read a detailed analysis in my client alert.