1. Short title This Act may be cited as the Data Care Act of 2018 . 2. Definitions In this Act— (1) the term Commission means the Federal Trade Commission; (2) the term end user means an individual who engages with an online service provider or logs into or uses services provided by the online service provider over the internet or any other digital network; (3) the term individual identifying data means any data that is— (A) collected over the internet or any other digital network; and (B) linked, or reasonably linkable, to— (i) a specific end user; or (ii) a computing device that is associated with or routinely used by an end user; (4) the term online service provider means an entity that— (A) is engaged in interstate commerce over the internet or any other digital network; and (B) in the course of business, collects individual identifying data about end users, including in a manner that is incidental to the business conducted; and (5) the term sensitive data means any data that includes— (A) a social security number; (B) personal information (as defined in section 1302 of the Children's Online Privacy Protection Act of 1998 ( 15 U.S.C. 6501 )) collected from a child (as defined in such section 1302); (C) a driver’s license number, passport number, military identification number, or any other similar number issued on a government document used to verify identity; (D) a financial account number, credit or debit card number, or any required security code, access code, or password that is necessary to permit access to a financial account of an individual; (E) unique biometric data such as a finger print, voice print, a retina or iris image, or any other unique physical representation; (F) information sufficient to access an account of an individual, such as user name and password or email address and password; (G) the first and last name of an individual, or first initial and last name, or other unique identifier in combination with— (i) the month, day, and year of birth of the individual