FT 24.05: Right to Privacy Act (Passed)

[Mad Deadly Worldwide Communist Gangster Computer God]

AN ACT
To strengthen privacy protections


Be it enacted by the Parliament of Frémont assembled;

Section 1. Title.

This section may be cited as the Right to Privacy Act.

Section 2. Patient-physician privilege protection for children

No state or locality may enact statute requiring the disclosure of a student's sexual orientation or matters pertaining to their gender or sexuality without signed consent of the student.

Section 3. Data privacy

A. A consumer may invoke the consumer rights authorized pursuant to this act at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child's parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:

1. To confirm whether or not a controller is processing the consumer's personal data and to access such personal data;

2. To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data;

3. To delete personal data provided by or obtained about the consumer;

4. To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and

5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

B. Except as otherwise provided in this act, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to section A as follows:

1. A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in section A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer's requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.

2. If a controller declines to take action regarding the consumer's request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to section C.

3. Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.

4. If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer's request.

5. A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to subsection A 3 by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling pursuant to subsection A 5.

C. A controller shall establish a process for a consumer to appeal the controller's refusal to take action on a request within a reasonable period of time after the consumer's receipt of the decision pursuant to subsection B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to section A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.

D. As used in this act:

1. "Consumer" means a natural person who is a resident of the Southern Region acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

2. "Controller" means the natural or legal person that, alone or jointly with others, determines the purpose and means of processing personal data.

Section 4. Un-cancelling ex-convicts

1. No company shall request disclosure of prior conviction status until after the job is offered. This shall not affect any law pertaining to background checks for history of sex crimes.

2. No home renter shall request disclosure of prior conviction statuses. This shall not affect any law pertaining to background checks for history of sex crimes.

3. No ex-convict who was previously convicted of a non-violent crime shall be barred from ownership of firearms.

Section 5. Minimum threshold for abortion limitations

No state shall enact any law banning abortion prior to 22 weeks, and must include exceptions for rape and pregnancies which may be life-threatening to the mother. Accordingly, the Commonwealth recognizes the right to an abortion within these limits under constitutional privacy protections and right to due process.

Section 6. Ban on gun registries

No state shall enact any law implementing either private or public records of firearm owners, or requiring registration for gun permits.

Sponsor: Scott

The First Minister is recognized.

[Mad Deadly Worldwide Communist Gangster Computer God]

In summary, this bill expands individual privacy rights in both the public and private sectors.

To summarize:

Section 2: States cannot require the disclosure of a student's expressed sexuality or gender to the student's parents. This simply affirms a medical ethical principle which had not been challenged until fairly recently, as an assault on young people who express gender dysphoria or discuss their sexual preferences.

Section 3: I took this from another R bill that expands privacy protections for data collection.

Section 4: Reformed convicts should be afforded the same opportunities as everybody else, and with the exception of sex offenders, their record should not be a public or business matter.

Section 5: Takes a middle stance on the abortion issue. States can ban elective abortions after the point of viability, but I believe early abortions should be safe, legal, and rare.

Section 6: Put simply, anyone without a history of violence should be allowed to own firearms after their sentence, and this shouldn't be the government's business.

[Mad Deadly Worldwide Communist Gangster Computer God]

In response to what Governor Wheelchair has done in Texas OTL, I'm expanding the language for section 2.

AN ACT
To strengthen privacy protections


Be it enacted by the Parliament of Frémont assembled;

Section 1. Title.

This section may be cited as the Right to Privacy Act.

Section 2. Patient-physician privilege protection for children

No state or locality may enact statute requiring the disclosure of a student's minor's sexual orientation or matters pertaining to their gender or sexuality without signed consent of the student individual, nor shall parents be investigated by state authorities for matters pertaining to an individual's gender or medical treatment thereof.

Section 3. Data privacy

A. A consumer may invoke the consumer rights authorized pursuant to this act at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child's parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:

1. To confirm whether or not a controller is processing the consumer's personal data and to access such personal data;

2. To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data;

3. To delete personal data provided by or obtained about the consumer;

4. To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and

5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

B. Except as otherwise provided in this act, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to section A as follows:

1. A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in section A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer's requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.

2. If a controller declines to take action regarding the consumer's request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to section C.

3. Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.

4. If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer's request.

5. A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to subsection A 3 by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling pursuant to subsection A 5.

C. A controller shall establish a process for a consumer to appeal the controller's refusal to take action on a request within a reasonable period of time after the consumer's receipt of the decision pursuant to subsection B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to section A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.

D. As used in this act:

1. "Consumer" means a natural person who is a resident of the Southern Region acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

2. "Controller" means the natural or legal person that, alone or jointly with others, determines the purpose and means of processing personal data.

Section 4. Un-cancelling ex-convicts

1. No company shall request disclosure of prior conviction status until after the job is offered. This shall not affect any law pertaining to background checks for history of sex crimes.

2. No home renter shall request disclosure of prior conviction statuses. This shall not affect any law pertaining to background checks for history of sex crimes.

3. No ex-convict who was previously convicted of a non-violent crime shall be barred from ownership of firearms.

Section 5. Minimum threshold for abortion limitations

No state shall enact any law banning abortion prior to 22 weeks, and must include exceptions for rape and pregnancies which may be life-threatening to the mother. Accordingly, the Commonwealth recognizes the right to an abortion within these limits under constitutional privacy protections and right to due process.

Section 6. Ban on gun registries

No state shall enact any law implementing either private or public records of firearm owners, or requiring registration for gun permits.

Members have 24 hours to object.

Also, f#ck social conservatives in general. Just as a side note.

[Kahane's Grave Is A Gender-Neutral Bathroom]

This is a good bill, although there should be clear penalties for violating section two.

[Mad Deadly Worldwide Communist Gangster Computer God]

This is a good bill, although there should be clear penalties for violating section two.

The penalties are, ideally, the same as any other violation of HIPAA. But we don't have a regional equivalent of HIPAA, so I'll introduce another amendment later.

[𝕭𝖆𝖕𝖙𝖎𝖘𝖙𝖆 𝕸𝖎𝖓𝖔𝖑𝖆]

A lot of this is good - data privacy is important, and so are patient-physician privilege and allowing people who we've decided have completed their sentences to actually be free - but I cannot support sections 5 and 6.

[Continential]

I concur with the right honorable gentleman from New Mexico on opposing section five and I propose an amendment to lower the threshold from twenty-two weeks to fourteen weeks in section five.

[Mad Deadly Worldwide Communist Gangster Computer God]

Hearing no objection, the amendment is adopted.

I am willing to compromise on the abortion limit at 18 weeks. As for the gun registry, even Canada tried that and it was an expensive failure. I'm not opposed to background checks, but registries solve nothing.

New language for section 2 mimics the same penalty for other HIPAA violations.

AN ACT
To strengthen privacy protections


Be it enacted by the Parliament of Frémont assembled;

Section 1. Title.

This section may be cited as the Right to Privacy Act.

Section 2. Patient-physician privilege protection for children

1. No state or locality may enact statute requiring the disclosure of a minor's sexual orientation or matters pertaining to their gender or sexuality without signed consent of the student individual, nor shall parents be investigated by state authorities for matters pertaining to an individual's gender or medical treatment thereof.

2. Willful violations of patient's privacy with regard to history of gender dysphoria treatment and counseling shall carry a minimum of $100 per violation with an annual maximum of $25,000 for repeat violations.

Section 3. Data privacy

A. A consumer may invoke the consumer rights authorized pursuant to this act at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child's parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:

1. To confirm whether or not a controller is processing the consumer's personal data and to access such personal data;

2. To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data;

3. To delete personal data provided by or obtained about the consumer;

4. To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and

5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

B. Except as otherwise provided in this act, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to section A as follows:

1. A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in section A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer's requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.

2. If a controller declines to take action regarding the consumer's request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to section C.

3. Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.

4. If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer's request.

5. A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to subsection A 3 by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling pursuant to subsection A 5.

C. A controller shall establish a process for a consumer to appeal the controller's refusal to take action on a request within a reasonable period of time after the consumer's receipt of the decision pursuant to subsection B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to section A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.

D. As used in this act:

1. "Consumer" means a natural person who is a resident of the Southern Region acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

2. "Controller" means the natural or legal person that, alone or jointly with others, determines the purpose and means of processing personal data.

Section 4. Un-cancelling ex-convicts

1. No company shall request disclosure of prior conviction status until after the job is offered. This shall not affect any law pertaining to background checks for history of sex crimes.

2. No home renter shall request disclosure of prior conviction statuses. This shall not affect any law pertaining to background checks for history of sex crimes.

3. No ex-convict who was previously convicted of a non-violent crime shall be barred from ownership of firearms.

Section 5. Minimum threshold for abortion limitations

No state shall enact any law banning abortion prior to 22 18 weeks, and must include exceptions for rape and pregnancies which may be life-threatening to the mother. Accordingly, the Commonwealth recognizes the right to an abortion within these limits under constitutional privacy protections and right to due process.

Section 6. Ban on gun registries

No state shall enact any law implementing either private or public records of firearm owners, or requiring registration for gun permits.

[Mad Deadly Worldwide Communist Gangster Computer God]

Hearing no objection, the amendment is adopted.

[Mad Deadly Worldwide Communist Gangster Computer God]

Apologies for the slow week. I was hoping for some more debate on this bill, but we're obviously not getting that.

Members, a final vote is now open. Please vote Aye, Nay, or Abstain.

AN ACT
To strengthen privacy protections


Be it enacted by the Parliament of Frémont assembled;

Section 1. Title.

This section may be cited as the Right to Privacy Act.

Section 2. Patient-physician privilege protection for children

1. No state or locality may enact statute requiring the disclosure of a minor's sexual orientation or matters pertaining to their gender or sexuality without signed consent of the student individual, nor shall parents be investigated by state authorities for matters pertaining to an individual's gender or medical treatment thereof.

2. Willful violations of patient's privacy with regard to history of gender dysphoria treatment and counseling shall carry a minimum of $100 per violation with an annual maximum of $25,000 for repeat violations.

Section 3. Data privacy

A. A consumer may invoke the consumer rights authorized pursuant to this act at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child's parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:

1. To confirm whether or not a controller is processing the consumer's personal data and to access such personal data;

2. To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data;

3. To delete personal data provided by or obtained about the consumer;

4. To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and

5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

B. Except as otherwise provided in this act, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to section A as follows:

1. A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in section A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer's requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.

2. If a controller declines to take action regarding the consumer's request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to section C.

3. Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.

4. If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer's request.

5. A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to subsection A 3 by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling pursuant to subsection A 5.

C. A controller shall establish a process for a consumer to appeal the controller's refusal to take action on a request within a reasonable period of time after the consumer's receipt of the decision pursuant to subsection B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to section A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.

D. As used in this act:

1. "Consumer" means a natural person who is a resident of the Southern Region acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

2. "Controller" means the natural or legal person that, alone or jointly with others, determines the purpose and means of processing personal data.

Section 4. Un-cancelling ex-convicts

1. No company shall request disclosure of prior conviction status until after the job is offered. This shall not affect any law pertaining to background checks for history of sex crimes.

2. No home renter shall request disclosure of prior conviction statuses. This shall not affect any law pertaining to background checks for history of sex crimes.

3. No ex-convict who was previously convicted of a non-violent crime shall be barred from ownership of firearms.

Section 5. Minimum threshold for abortion limitations

No state shall enact any law banning abortion prior to 18 weeks, and must include exceptions for rape and pregnancies which may be life-threatening to the mother. Accordingly, the Commonwealth recognizes the right to an abortion within these limits under constitutional privacy protections and right to due process.

Section 6. Ban on gun registries

No state shall enact any law implementing either private or public records of firearm owners, or requiring registration for gun permits.

[Mad Deadly Worldwide Communist Gangster Computer God]

Aye

[AustralianSwingVoter]

Aye

[Continential]

Aye

[𝕭𝖆𝖕𝖙𝖎𝖘𝖙𝖆 𝕸𝖎𝖓𝖔𝖑𝖆]

Nay

[Kahane's Grave Is A Gender-Neutral Bathroom]

Aye

[Mad Deadly Worldwide Communist Gangster Computer God]

With four votes in favor and one opposed, the bill is passed.

AN ACT
To strengthen privacy protections


Be it enacted by the Parliament of Frémont assembled;

Section 1. Title.

This section may be cited as the Right to Privacy Act.

Section 2. Patient-physician privilege protection for children

1. No state or locality may enact statute requiring the disclosure of a minor's sexual orientation or matters pertaining to their gender or sexuality without signed consent of the student individual, nor shall parents be investigated by state authorities for matters pertaining to an individual's gender or medical treatment thereof.

2. Willful violations of patient's privacy with regard to history of gender dysphoria treatment and counseling shall carry a minimum of $100 per violation with an annual maximum of $25,000 for repeat violations.

Section 3. Data privacy

A. A consumer may invoke the consumer rights authorized pursuant to this act at any time by submitting a request to a controller specifying the consumer rights the consumer wishes to invoke. A known child's parent or legal guardian may invoke such consumer rights on behalf of the child regarding processing personal data belonging to the known child. A controller shall comply with an authenticated consumer request to exercise the right:

1. To confirm whether or not a controller is processing the consumer's personal data and to access such personal data;

2. To correct inaccuracies in the consumer's personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer's personal data;

3. To delete personal data provided by or obtained about the consumer;

4. To obtain a copy of the consumer's personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and

5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

B. Except as otherwise provided in this act, a controller shall comply with a request by a consumer to exercise the consumer rights authorized pursuant to section A as follows:

1. A controller shall respond to the consumer without undue delay, but in all cases within 45 days of receipt of the request submitted pursuant to the methods described in section A. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of the consumer's requests, so long as the controller informs the consumer of any such extension within the initial 45-day response period, together with the reason for the extension.

2. If a controller declines to take action regarding the consumer's request, the controller shall inform the consumer without undue delay, but in all cases and at the latest within 45 days of receipt of the request, of the justification for declining to take action and instructions for how to appeal the decision pursuant to section C.

3. Information provided in response to a consumer request shall be provided by a controller free of charge, up to twice annually per consumer. If requests from a consumer are manifestly unfounded, excessive, or repetitive, the controller may charge the consumer a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request. The controller bears the burden of demonstrating the manifestly unfounded, excessive, or repetitive nature of the request.

4. If a controller is unable to authenticate the request using commercially reasonable efforts, the controller shall not be required to comply with a request to initiate an action under subsection A and may request that the consumer provide additional information reasonably necessary to authenticate the consumer and the consumer's request.

5. A controller that has obtained personal data about a consumer from a source other than the consumer shall be deemed in compliance with a consumer's request to delete such data pursuant to subsection A 3 by opting the consumer out of the processing of that data for targeted advertising, sale, or profiling pursuant to subsection A 5.

C. A controller shall establish a process for a consumer to appeal the controller's refusal to take action on a request within a reasonable period of time after the consumer's receipt of the decision pursuant to subsection B 2. The appeal process shall be conspicuously available and similar to the process for submitting requests to initiate action pursuant to section A. Within 60 days of receipt of an appeal, a controller shall inform the consumer in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, the controller shall also provide the consumer with an online mechanism, if available, or other method through which the consumer may contact the Attorney General to submit a complaint.

D. As used in this act:

1. "Consumer" means a natural person who is a resident of the Southern Region acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

2. "Controller" means the natural or legal person that, alone or jointly with others, determines the purpose and means of processing personal data.

Section 4. Un-cancelling ex-convicts

1. No company shall request disclosure of prior conviction status until after the job is offered. This shall not affect any law pertaining to background checks for history of sex crimes.

2. No home renter shall request disclosure of prior conviction statuses. This shall not affect any law pertaining to background checks for history of sex crimes.

3. No ex-convict who was previously convicted of a non-violent crime shall be barred from ownership of firearms.

Section 5. Minimum threshold for abortion limitations

No state shall enact any law banning abortion prior to 18 weeks, and must include exceptions for rape and pregnancies which may be life-threatening to the mother. Accordingly, the Commonwealth recognizes the right to an abortion within these limits under constitutional privacy protections and right to due process.

Section 6. Ban on gun registries

No state shall enact any law implementing either private or public records of firearm owners, or requiring registration for gun permits.

Passed the Frémont House of Commons 4-1


Scott
First Minister of the Commonwealth of Frémont