; table of contents. Sec. 2. Definitions. Sec. 3. Act prohibited. Sec. 4. Right to notice. Sec. 5. Right to control. Sec. 6. Right to access, correction, deletion, and data portability. Sec. 7. Prohibition on re-identifying personal information. Sec. 8. Prohibition on take-it-or-leave-it. Sec. 9. Prohibition on financial incentives. Sec. 10. Prohibition on disclosing information to third parties without proper assurances. Sec. 11. Use limitations. Sec. 12. Data minimization. Sec. 13. Right to data security. Sec. 14. Privacy and security officer. Sec. 15. Federal enforcement. Sec. 16. State enforcement. Sec. 17. Private right of action. Sec. 18. Relation to other laws. Sec. 19. Effective date. 2. Definitions In this Act: (1) Breach of security The term breach of security means any instance in which a person, without authorization or in violation of any authorization provided to the person, gains access to, uses, or discloses personal information. (2) Commission The term Commission means the Federal Trade Commission. (3) Covered entity The term covered entity means any person that collects or otherwise obtains personal information. (4) Data broker The term data broker means a commercial entity that collects, assembles, or maintains personal information concerning an individual who is not a customer or employee of the entity, and who has not established a subscription or account with the entity, in order to sell the information or provide third-party access to the information. (5) De-identified The term de-identified , with respect to information, means information that cannot reasonably identify, relate to, describe, or be capable of being associated with or linked to, directly or indirectly, a particular individual. (6) Disclose The term disclose means to disclose, release, transfer, share, disseminate, make available, or otherwise communicate orally, in writing, electronically, or by any other means to any third party. (7) Minor The term minor means any individual who is under 16 years of age. (8) Mobile