John McCain, John Kerry introduce contentious U.S. privacy bill

WASHINGTON Tue Apr 12, 2011 6:04pm EDT

U. S. Senator John McCain (R-AZ) applauds as fellow Senator John Kerry (D-MA) looks on during U.S. President Barack Obama's State of the Union address to a joint session of Congress on Capitol Hill in Washington, January 25, 2011. REUTERS/Jim Young

U. S. Senator John McCain (R-AZ) applauds as fellow Senator John Kerry (D-MA) looks on during U.S. President Barack Obama's State of the Union address to a joint session of Congress on Capitol Hill in Washington, January 25, 2011.

Credit: Reuters/Jim Young

Related Topics

WASHINGTON (Reuters) - Senators John Kerry and John McCain introduced a tough new privacy bill on Tuesday that would require companies to notify consumers in clear language when their data is being collected and oblige them to keep that information safe from hackers.

There are increasing concerns about the amount of information companies collect about consumers and how they safeguard it. Millions of people face a heightened risk of email swindles after a massive security breach suffered by Epsilon, an online marketing firm with hundreds of firms among its clients.

The bill would apply to hundreds of companies from search engine giant Google Inc to telephone companies such as AT&T Inc to cable companies such as Verizon Communications Inc and Comcast Corp.

The bill, if it becomes law, would require companies to tell consumers why data was being collected, whom it would be shared with and how it would be safeguarded.

Companies collecting data must also allow consumers to opt out of some data collection and they must agree, or opt in, to the collection of sensitive data like medical conditions.

The bill would also press businesses to collect only the information needed for any particular transaction.

Kerry, a Democrat from Massachusetts, said the measure had support from some big technology companies.

"These companies agree with us that it doesn't just make good business sense to protect their customer; they know it's the right thing to do," he told a news conference.

McCain, an Arizona Republican, noted many websites -- like most search engines -- are free precisely because they are supported by advertising.

"Our bill seeks to respect the ability of businesses to advertise, while also protecting consumers' personal information," said McCain.

The administration said it liked aspects of the legislation and was carefully reviewing other elements.

Hewlett-Packard Co, Microsoft Corp, eBay Inc and Intel Corp all support the bill.

"We have long advocated for comprehensive federal privacy legislation," they said in a joint statement. "The complexity of existing privacy regulations makes it difficult for many businesses to comply with the law."


The bill seeks to protect data that is unique to a person, such as their name, physical address, email address, telephone number, Social Security number and credit card numbers.

Enforcing the bill would fall to the Federal Trade Commission and to state attorneys general, with the FTC taking the lead.

Attorneys general would be limited to seeking a $3 million penalty for violating security and transparency rules. The FTC might levy civil penalties of $16,000 per violation per day.

California lawmakers are considering a "do not track" bill, which the Kerry/McCain measure would preempt


This was not a concern, said a congressional staffer who argued it was impossible to have state-by-state regulation of data collection.

"At the end of the day, this is interstate commerce," the staffer said.

The bill was a disappointment to the Direct Marketing Association, which argued it risked damaging the Internet at a time when it was a vibrant spot in the U.S. economy. In 2010, companies spent more than $25.4 billion on digital advertising, which generated $503.6 billion in sales, DMA said.

"DMA is wary of any legislation that upsets the information economy without a showing of actual harm to consumers," said Linda Woolley, a DMA executive vice president.

It was also a disappointment to a coalition of consumer groups and privacy advocates, which welcomed the bill but called for it to be "significantly strengthened."

"I don't think this is going to affect online marketing at all," said Jeff Chester, director of the Center for Digital Democracy privacy group.

John Simpson, of Consumer Watchdog, agreed.

"We cannot support it today," he said.

(Reporting by Diane Bartz; editing by Gerald E. McCormick, Matthew Lewis and Andre Grenon)

We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see
Comments (1)
MidwestVoice wrote:
This is a good start; the US has needed strong privacy protection for years. If both sides, the marketing association and the consumer advocates, are each unhappy – there is a strong likelihood that this bill strikes a decent balance. Many people have no objections to their data being collected then bought and sold – others strongly object; seems like allowing consumers to opt-in or opt-out is a reasonable approach. Far too much data is currently being tracked without the knowledge, much less consent of, most online users. Maybe this will begin to address that problem.

Apr 15, 2011 3:46pm EDT  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.