15 U.S.C. Ch.94 is amended--
'SUBCHAPTER III--AGGREGATION OF NONPUBLIC PERSONAL INFORMATION
AND RADIO FREQUENCY TAG IDENTIFICATION INFORMATION
'§ 6831. Privacy protection for consumers
(1) A business shall not combine or link an individual's
nonpublic personal information with RFID tag identification information, beyond
what is required to manage inventory.
'(2) A business shall not, directly or through an affiliate,
disclose to a nonaffiliated third party an individual's nonpublic personal
information in association with RFID tag identification information.
'(3) A business shall not, directly or through an affiliate
or nonaffiliated third party, use RFID tag identification information to
identify an individual.
'The Federal Trade Commission shall establish appropriate standards
for the businesses described in subsection (a) of this section--
'(1) to insure the integrity and confidentiality of an individual's
records and information;
'(2) to insure that RFID tag records do not identify individuals;
'(3) to protect against anticipated threats or hazards to the
security of an individual's records and information; and
'(4) to protect an individual against substantial harm or inconvenience,
which may result from unauthorized access to or use of an individual's records
'§ 6832. Consumer and Business Education
'(a) The Federal Trade Commission shall publish and disseminate
documents with the purpose of educating the general public about RFID technology.
The documents, at a minimum, shall describe RFID technology and how companies,
marketers and government agencies can use RFID technology to collect an
individual's nonpublic personal information.
'(b) The Federal Trade Commission shall publish and disseminate
documents with the purpose of educating businesses about RFID technology and
the importance of protecting an individual's privacy. The documents, at
a minimum, shall describe RFID technology, advocate privacy protection, and
explain how businesses must conform their actions to comply with the provisions
of this Act.'.
'§ 6833. Relation to State laws
'A State may afford an individual greater protection than the
protection provided under this subchapter.'.
'§ 6834. Rulemaking
'The Federal Trade Commission shall prescribe regulations necessary
to carry out and enforce the mandate of this subchapter.'.
'§ 6835. Definitions
'(a) The term "radio frequency identification" or "RFID" means
technologies that use radio waves to automatically identify individual items.
'(b) The term "tag" means a microchip that is attached to an
antenna and can transmit identification information.
'(c) The term "business" means a corporation, partnership or
other entity that collects or aggregates an individual's nonpublic personal
'(d) The term "nonpublic personal information" means information
that a business can use to identify an individual. Such information includes,
at a minimum, name, address, social security number, and financial data.'.