1. Short title; table of contents (a) Short title This Act may be cited as the Consumer Data Privacy and Security Act of 2020 . (b) Table of contents The table of contents of this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Definitions. Sec. 3. Collection and processing of personal data. Sec. 4. Right to know. Sec. 5. Individual control. Sec. 6. Security. Sec. 7. Accountability. Sec. 8. Rules relating to service providers. Sec. 9. Enforcement. Sec. 10. Relation to other laws. Sec. 11. Commission resources. Sec. 12. Guidance and reporting. Sec. 13. Severability. Sec. 14. Effective date. 2. Definitions In this Act: (1) Biometric information The term biometric information means information, resulting from specific technical processing related to the physical, biological, physiological, genetic, or behavioral characteristics of an individual, that identifies the individual. (2) Collection The term collection means acquiring personal data by any means, including by receiving, purchasing, or leasing the data or by observing or interacting with the individual to whom the data relates. (3) Commission The term Commission means the Federal Trade Commission. (4) Covered entity (A) In general The term covered entity means any entity that— (i) alone, or jointly with others, determines the purpose and means of collecting or processing personal data; and (ii) is— (I) a person over which the Commission has authority pursuant to section 5(a)(2) of the Federal Trade Commission Act ( 15 U.S.C. 45(a)(2) ); (II) a common carrier subject to the Communications Act of 1934 ( 47 U.S.C. 151 et seq.) and Acts amendatory thereof and supplementary thereto