III 115th CONGRESS 2d Session S. RES. 523 IN THE SENATE OF THE UNITED STATES May 24, 2018 Mr. Markey (for himself, Mr. Durbin , Mr. Sanders , and Mr. Blumenthal ) submitted the following resolution; which was referred to the Committee on Commerce, Science, and Transportation RESOLUTION Encouraging companies to apply privacy protections included in the General Data Protection Regulation of the European Union to citizens of the United States.

Whereas the European Union has enacted the General Data Protection Regulation (referred to in this preamble as the GDPR ), which provides the 508,000,000 residents of the European Union with significant new privacy protections; Whereas the GDPR takes effect on May 25, 2018; Whereas the rules of the GDPR will apply to many entities in the United States that serve users and customers in both Europe and the United States; Whereas the GDPR requires that— (1) data processors have a legal basis for processing the data of users; and (2) opt-in, freely given, specific, informed, and unambiguous consent from users is a primary legal basis; Whereas polling shows that people in the United States are increasingly concerned about their privacy and the security of their personal information; Whereas recent data breaches and privacy invasions affecting millions of people in the United States underscore the need for enhanced privacy protection in the United States; and Whereas people in the United States have a right to privacy, and entities that control and process the data of people in the United States have an obligation to protect that data: Now, therefore, be it