Online Privacy Act

This bill amends the Communications Act of 1934 to direct the Federal Communications Commission (FCC) to promulgate customer privacy regulations that require telecommunications services, broadband Internet access services, and interconnected VoIP (internet phone) services to:

• notify a customer about the collection, use, and sharing of customer proprietary information that is individually identifiable customer proprietary network information, personally identifiable information, or the content of communications;
• obtain opt-in approval from a customer to use and share sensitive customer proprietary information about financial or health information, children, Social Security numbers, precise geolocation, content of communications, call detail information, web browsing or application usage history, or other customary proprietary information that the FCC determines to be sensitive;
• not refuse to serve a customer who does not consent to the use and sharing of customer proprietary information for commercial purposes under a "take-it-or-leave-it" offer;
• develop data security practices; and
• notify customers of security breaches.

The FCC must also implement strong protection for de-identified customary proprietary information to prevent re-identifying such information.