1. Short title This Act may be cited as the Information Transparency & Personal Data Control Act . 2. Requirements for sensitive personal information or behavioral data (a) Regulations Not later than 1 year after the date of the enactment of this Act, the Federal Trade Commission shall promulgate regulations under section 553 of title 5, United States Code, to require, except as provided in subsection (b), any operator that provides services to the public involving the collection, storage, processing, sale, sharing with third parties, or other use of sensitive personal information from United States persons or persons located in the United States when the data is collected, to meet the following requirements: (1) Affirmative, express, and opt in consent Provide users with notice through a privacy and data use policy of a specific request to use their data and require that users provide affirmative, express, and opt in consent to any functionality that involves the collection, storage, processing, sale, sharing, or other use of sensitive personal information, including sharing personal data with third parties. (2) Privacy and data use policy Provide users with an up-to-date, transparent privacy, security, and data use policy that meets general requirements, including that such policy, presented to users in the context where it applies— (A) is concise and intelligible; (B) is clear and prominent in appearance; (C) uses clear and plain language; (D) uses visualizations where appropriate to make complex information understandable by the ordinary user