A warrant requirement means nothing when the real surveillance isn’t the government — it’s every app on your phone tracking where you sleep, brokers you’ve never heard of selling your health searches, and your DNA becoming someone’s product. This statute ends commercial surveillance as a business model: your data is yours, consent must be real, deletion must be honored, and your genome is not for sale.
Every app tracked where you slept. Your browsing, your searches, your purchases, your location were harvested and sold to brokers you had never heard of and could not find.Check it
"Consent" was a wall of fine print you had to accept to use anything at all — take it or be excluded from modern life. Nobody read it. That was the point.Check it
Data about your health, your finances, your immigration status, your sexuality, your faith, your politics was profiled and monetized without your knowledge.Check it
Companies harvested children’s data, and your genome — the most permanent identifier a human being has, one you share with your relatives — became a product to be sold and shared.Check it
You have real rights over your personal information: to know what’s collected, to access it, to correct it, to delete it, to take it with you, and to say no.
Consent must be genuine and specific — not buried, not bundled, not the price of admission. Sensitive data gets heightened protection, and the burden of proving real de-identification falls on the company claiming it.
Data brokers must register and answer for what they hold. The invisible market in your life becomes visible — and accountable.
Genetic privacy is protected outright, children get special protection, and you can enforce all of it yourself with a private right of action.
Companies treated harvested data as their asset, and "anonymized" claims went unchallenged even when re-identification was trivial.Check it
Personal information is defined broadly — device IDs, IP addresses, precise location, browsing and search and purchase history, financial and health data, biometrics, voice, photos, and any inference drawn from them. De-identification only counts if it genuinely cannot be reversed, and the company asserting it bears the burden of proving that.
Agreement was manufactured through fine print and take-it-or-leave-it terms, then treated as your free choice.Check it
Consent must be real, specific, and meaningful — with obligations on the entities collecting your data. Access to a service can’t be conditioned on surrendering rights you never actually agreed to give up.
Precise location, health, mental health, immigration status, sexual orientation, religion, and political views were collected and sold like any other data point.Check it
Sensitive personal information is a defined category with heightened protection — geolocation within 1,000 meters, health and mental-health data, financial credentials, biometrics, communications content, minors’ information, immigration status, sexual orientation and gender identity, religious belief, and political views and associations.
An entire industry bought and sold dossiers on people who had no idea these companies existed, let alone how to reach them.Check it
Data brokers must register and carry defined obligations. The trade in your life stops being invisible — and an industry that operated in the dark is dragged into daylight where it can be held to account.
Kids’ data was harvested with the same indifference as everyone else’s, and monetized before they were old enough to object.Check it
Children’s protections are written in as their own category of heightened obligation. A child cannot consent to a lifetime of surveillance.
Genetic data — permanent, unchangeable, and shared with your relatives who never consented — was collected, sold, and shared as an ordinary commodity.Check it
Genetic privacy is protected under Right 46. The one piece of information you can never change, and that exposes your family along with you, is not merchandise.
Enforcement depended on an agency choosing to act, and individuals had essentially no way to make anyone stop.Check it
Layered enforcement: FTC authority, a private right of action so you can sue on your own behalf, and preserved state authority. You don’t have to wait for a regulator to care.
This is the plain-language version. The binding text is CS-16, which implements Rights 10, 38, and 46 of the Constitution.
This is your country’s law. Help shape the next draft of it.
