Report to the Chairman, Committee on Energy and Commerce, House of Representatives
Additional Federal Authority Could Enhance Consumer Protection and Provide Flexibility.
What GAO Found
The United States does not have a comprehensive Internet privacy law governing the collection, use, and sale or other disclosure of consumers’ personal information. At the federal level, the Federal Trade Commission (FTC) currently has the lead in overseeing Internet privacy, using its statutory authority under the FTC Act to protect consumers from unfair and deceptive trade practices. However, to date, FTC has not issued regulations for Internet privacy other than those protecting financial privacy and the Internet privacy of children, which were required by law. For FTC Act violations, FTC may promulgate regulations but is required to use procedures that differ from traditional notice-and-comment processes and that FTC staff said add time and complexity.
The full report:
Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679