1. Short title; table of contents (a) Short title This Act may be cited as the Consumer Online Privacy Rights Act . (b) Table of contents The table of contents of this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Definitions. Sec. 3. Effective date. TITLE I—Data privacy rights Sec. 101. Duty of loyalty. Sec. 102. Right to access and transparency. Sec. 103. Right to delete. Sec. 104. Right to correct inaccuracies. Sec. 105. Right to controls. Sec. 106. Right to data minimization. Sec. 107. Right to data security. Sec. 108. Civil rights. Sec. 109. Prohibition on waiver of rights. Sec. 110. Limitations and applicability. TITLE II—Oversight and responsibility Sec. 201. Executive responsibility. Sec. 202. Privacy and data security officers; comprehensive privacy and data security programs; risk assessments and compliance. Sec. 203. Service providers and third parties. Sec. 204. Whistleblower protections. Sec. 205. Digital content forgeries. TITLE III—Miscellaneous Sec. 301. Enforcement, civil penalties, and applicability. Sec. 302. Relationship to Federal and State laws. Sec. 303. Severability. Sec. 304. Authorization of appropriations. 2. Definitions In this Act: (1) Affirmative express consent (A) In general The term affirmative express consent means an affirmative act by an individual that clearly communicates the individual’s authorization for an act or practice, in response to a specific request that meets the requirements of subparagraph (B). (B) Request requirements The requirements of this subparagraph with respect to a request from a covered entity to an individual are the following: (i) The request is provided to the individual in a standalone disclosure. (ii) The request includes a description of each act or practice for which the individual’s consent is sought and— (I) clearly distinguishes between an act or practice which is necessary to fulfill a request of the individual and an act or practice which is for another purpose