Online bill of rights is pushed

California Rep. Ro Khanna wants consumers to have control over data.

By July of 2019, Rep. Ro Khanna (D-Fremont) aims to see the House of Representatives pass landmark legislation shielding consumers from the onslaught of data breaches and the anxiety and confusion over the misuse of their personal information on the web.

To nudge such legislation along, Khanna unveiled a list of 10 principles amounting to a draft Internet Bill of Rights that he hopes will inform sweeping data privacy laws to protect American citizens in the digital age.

“There’s great concern that Americans have about the protection of their privacy online and about their security online,” Khanna said in an interview Friday.

This list contains principles that many lawmakers and consumer advocates have clamored for, including network neutrality, transparency into data-collection practices and notification if a company holding personal data suffers a hack.

Previous congressional efforts to pass data protection laws have failed to advance, even in the wake of the massive Equifax breach disclosed last year and Facebook’s Cambridge Analytica scandal that broke in March. But even Republican officials have suggested the momentum has shifted.

“The question is no longer whether we need a national law to protect consumers’ privacy,” Senate Commerce Committee Chairman John Thune (R-S.D.) said in an op-ed last month.

The European Union’s General Data Protection Regulation has swayed industry players to work on uniform rules — as has the recent passage of California’s robust privacy law. And the prospect rises of other states passing similar restrictions on data-harvesting practices.

Khanna’s draft bill of rights states:

Consumers should have the right:

1. to have access to and knowledge of all collection and uses of personal data by companies;

2. to opt-in consent to the collection of personal data by any party and to the sharing of personal data with a third party;

3. where context appropriate and with a fair process, to obtain, correct or delete personal data controlled by any company and to have those requests honored by third parties;

4. to have personal data secured and to be notified in a timely manner when a security breach or unauthorized access of personal data is discovered;

5. to move all personal data from one network to the next;

6. to access and use the internet without internet service providers blocking, throttling, engaging in paid prioritization or otherwise unfairly favoring content, applications, services or devices;

7. to internet service without the collection of data that is unnecessary for providing the requested service absent opt-in consent;

8. to have access to multiple viable, affordable internet platforms, services and providers with clear and transparent pricing;

9. not to be unfairly discriminated against or exploited based on your personal data; and

10. to have an entity that collects your personal data have reasonable business practices and accountability to protect your privacy.