Short title; table of contents

(a) Short title This Act may be cited as the Online Privacy Act of 2026. (b) Table of contents The table of contents for this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Definitions. Sec. 3. General provisions. Sec. 4. Limitation on disclosing nonredacted government records. Sec. 5. Criminal prohibition on doxxing. Title I—Individual Rights Sec. 101. Right of access. Sec. 102. Right of correction. Sec. 103. Right of deletion. Sec. 104. Right of portability. Sec. 105. Right to human review of automated decisions. Sec. 106. Right to individual autonomy. Sec. 107. Right to be informed. Sec. 108. Right to impermanence. Sec. 109. Exemptions, exceptions, fees, timelines, and rules of construction for rights under this title. Title II—Requirements for Covered Entities, Service Providers, and Third Parties Sec. 201. Minimization. Sec. 202. Minimization and records of access by employees and contractors. Sec. 203. Prohibitions on disclosing of personal information. Sec. 204. Disclosing to entities not subject to United States jurisdiction or not compliant with this Act. Sec. 205. Prohibition on re-identification. Sec. 206. Restrictions on collecting, processing, maintaining, and disclosing contents of communications. Sec. 207. Prohibition on discriminatory processing. Sec. 208. Requirements for notice and consent processes and privacy policies. Sec. 209. Prohibition on dark patterns in notice and consent processes and privacy policies. Sec. 210. Notice and consent required. Sec. 211. Privacy policy. Sec. 212. Information security requirements. Sec. 213. Notification of data breach or data-sharing abuse. Title III—Digital Privacy Agency Sec. 301. Establishment; Director and Deputy Director. Sec. 302. Agency powers and authorities. Sec. 303. Reporting and audit requirements. Sec. 304. Relation to other agencies. Sec. 305. Personnel. Sec. 306. Office of Civil Rights. Sec. 307. Complaints of individuals. Sec. 308. Advisory boards. Sec. 309. Authorization of appropriations. Title IV—Enforcement Sec. 401. Investigations and administrative discovery. Sec. 402. Hearings and adjudication proceedings. Sec. 403. Litigation authority. Sec. 404. Enforcement by States. Sec. 405. Private rights of action. Sec. 406. Relief available. Sec. 407. Referral for criminal proceedings. Sec. 408. Whistleblower enforcement. Title V—Relation to Other Law Sec. 501. Effective date. Sec. 502. Relation to other Federal law. Sec. 503. Relation to State law. Sec. 504. Severability. Title VI—NIST and NSF Activities Sec. 601. National Institute of Standards and Technology privacy research and development. Sec. 602. National privacy awareness and education initiative. Sec. 603. National Science Foundation privacy research.