Definitions

In this Act: (1) Commission The term Commission means the Federal Trade Commission. (2) End user The term end user means an individual who engages with an online service provider or logs into or uses services provided by the online service provider over the internet or any other digital network. (3) Individual identifying data The term individual identifying data means any data that is— (A) collected over the internet or any other digital network; and (B) linked, or reasonably linkable, to— (i) a specific end user; or (ii) a computing device that is associated with or routinely used by an end user. (4) Online service provider The term online service provider means an entity that— (A) is engaged in interstate commerce over the internet or any other digital network; and (B) in the course of business, collects individual identifying data about end users, including in a manner that is incidental to the business conducted. (5) Sensitive data The term sensitive data means any data that includes— (A) a social security number; (B) personal information (as defined in section 1302 of the Children's Online Privacy Protection Act of 1998 (15 U.S.C. 6501)) collected from a child (as defined in such section 1302); (C) a driver’s license number, passport number, military identification number, or any other similar number issued on a government document used to verify identity; (D) a financial account number, credit or debit card number, or any required security code, access code, or password that is necessary to permit access to a financial account of an individual; (E) unique biometric data such as a finger print, voice print, a retina or iris image, or any other unique physical representation; (F) information sufficient to access an account of an individual, such as user name and password or email address and password; (G) the first and last name of an individual, or first initial and last name, or other unique identifier in combination with— (i) the month, day, and year of birth of the individual; (ii) the maiden name of the mother of the individual; or (iii) the past or present precise geolocation of the individual; (H) information that relates to— (i) the past, present, or future physical or mental health or condition of an individual; or (ii) the provision of health care to an individual; and (I) the nonpublic communications or other nonpublic user-created content of an individual.