Democratic Senators introduced a second COVID-19 privacy bill.
It addresses the collection and processing of data in connection with fighting the COVID-19 pandemic. This Democratic Senate bill shares a number of key points with the recently filed Republican Senate bill, among them:
- consent required for collection and revocable
- disclosure at collection
- information security
- data minimization (collect only what you need)
- retention limitation (delete after revocation and after the pandemic).
The bill would be enforceable by the Federal Trade Commission and State Attorneys General, but this bill also adds a private right of action with statutory damages.