Super nice to see legislation being proposed about this. Miscellaneous thoughts: - S7.b.1.D seems nice, but I can't help but wonder what it means to "verify" a

Super nice to see legislation being proposed about this. Miscellaneous thoughts: - S7.b.1.D seems nice, but I can't help but wonder what it means to "verify" a consumer, and the potential for breaches that this poses. - S7.b.1.A "establish and implement reasonable cyber security and privacy policies, practices, and procedure" devil is in the details here, particularly what "reasonable" is defined to be - S6.b.1.B (paraphrasing, because the original text is a clusterfuck to comprehend, and I think I've got it right) companies must respect a consumer's opt-out, unless they allow a consumer to pay a fee, capped at the estimated value that the company would get out of said consumer's data I have no idea how S6.a.1 is going to go: "implement and maintain a ‘‘Do Not Track’’ data sharing opt-out website— (A) that allows consumers to opt-out of data sharing, view their opt-out status, and change their opt-out status; " No policy expertise here, sadly, so I have no idea how this will fare. As a techie, good first step.