Complaints of individuals

(a) In general The Director shall establish a unit within the Digital Privacy Agency the functions of which shall include establishing a single, toll-free telephone number, a website, and a database or utilizing an existing database to facilitate the centralized collection of, monitoring of, and response to complaints of individuals regarding the privacy or security of personal information. The Director shall coordinate with other Federal agencies with jurisdiction over Federal privacy laws to route complaints to such agencies, where appropriate. (b) Routing complaints to states To the extent practicable, State agencies (including State privacy regulators) may receive appropriate complaints from the systems established under subsection (a), if— (1) the State agency system has the functional capacity to receive calls or electronic reports routed by the Digital Privacy Agency systems; (2) the State agency has satisfied any conditions of participation in the system that the Digital Privacy Agency may establish, including treatment of personal information and sharing of information on complaint resolution or related compliance procedures and resources; and (3) participation by the State agency includes measures necessary to provide for protection of personal information that conform to the standards for protection of the confidentiality of personal information and for data integrity and security that apply to Federal agencies. (c) Data sharing required To facilitate inclusion in the reports required by section 303 of the matters regarding complaints of individuals required by subsection (a)(2)(D) of such section to be included in such reports, investigation and enforcement activities, and monitoring of the privacy and security of personal information, the Digital Privacy Agency shall share information about complaints of individuals with Federal and State agencies (including State privacy regulators) that have jurisdiction over the privacy or security of personal information and State attorneys general, subject to the standards applicable to Federal agencies for the protection of the confidentiality of personal information and for information security and integrity. Other Federal agencies that have jurisdiction over the privacy or security of personal information shall share data relating to complaints of individuals regarding the privacy or security of personal information with the Digital Privacy Agency, subject to the standards applicable to Federal agencies for the protection of confidentiality of personal information and for information security and integrity. (d) Publishing of complaints (1) Consent required In collecting a complaint from an individual, the Digital Privacy Agency shall request consent for publishing the complaint without any information identifying the individual. (2) Public database The Digital Privacy Agency shall make publicly available on its website a database of each complaint for which it has received consent to publish the complaint from an individual who provided the complaint to the Digital Privacy Agency. (3) Redacting information When necessary, the Digital Privacy Agency may redact information from a published complaint to protect the privacy of the individual.