Democrat's draft privacy bill includes prison time for execs

Details: The law would apply to companies with more than $50 million in revenue and personal information on a million or more consumers.

• The bill would create a national “ ‘Do Not Track’ data sharing opt-out website” that would let users say no to “data sharing, view their opt-out status, and change their opt-out status.” Sites are allowed to charge for a version of their product that does not rely on user data to generate revenue.
• That Do Not Track system might not cover certain types of targeted advertising on Facebook or Google, where no personal data is exchanged on an individual, but would cover ad buys where data was submitted to those platforms.
• If passed, the law would give the Federal Trade Commission the power to fine companies for a first offense, something it cannot currently do, and give the agency more staffers.
• Companies covered under the law would have to submit an annual data protection report signed by top executives, including their CEOs. Executives could face criminal penalties as high as 20 years in prison if they intentionally mislead the agency.
• The law also includes an exemption for the editorial side of news organizations.

What they’re not saying: The bill doesn’t say that the federal government should preempt state rules or address the ability of citizens to sue in certain privacy cases.

What’s next? The midterms. If voters flip the House or, less likely, the Senate on Tuesday, it could supercharge the debate over privacy. Lawmakers are trying to get federal legislation in place before California’s new rules go into effect in 2020.

Go deeper:

• FTC takes first steps to police Big Tech
• What they're saying: Big Tech, rivals fight over FTC antitrust policy
• By the numbers: The robocall scourge