Protecting Personal Information Act of 2019

This bill requires covered entities to provide consumers with the opportunity to prohibit the collection, sale, or transfer of specified personally identifiable information about the consumer and requires the covered entity to, upon request by the consumer, delete any such personally identifiable information that has been collected or stored by the covered entity.

This bill applies to (1) business corporations, (2) nonprofits, and (3) common carriers that (1) have annual revenue greater than $25 million, (2) have access to personally identifiably information of 50,000 or more individuals, or (3) derive at least 50% of their revenue from selling such information.

These requirements may be enforced by the Federal Trade Commission or by a state attorney general bringing a lawsuit on behalf of the state's residents.