; table of contents. Sec. 2. Definitions. Sec. 3. Prohibition on waivers. Sec. 4. Effective date. Sec. 5. Journalism protection. Sec. 6. Small business compliance ramp. Sec. 7. Criminal prohibition on disclosing personal information. Sec. 8. Limitation on disclosing nonredacted government records. Title I—Individual Rights Sec. 101. Right of access. Sec. 102. Right of correction. Sec. 103. Right of deletion. Sec. 104. Right of portability. Sec. 105. Right to human review of automated decisions. Sec. 106. Right to individual autonomy. Sec. 107. Right to be informed. Sec. 108. Right to impermanence. Sec. 109. Exemptions, exceptions, fees, timelines, and rules of construction for rights under this title. Title II—Requirements for Covered Entities, Service Providers, and Third Parties Sec. 201. Minimization and articulated basis for collection, processing, and maintenance. Sec. 202. Minimization and records of access by employees and contractors. Sec. 203. Prohibition on the collection or maintenance of personal information. Sec. 204. Prohibitions on the disclosure of personal information. Sec. 205. Disclosure to entities not subject to United States jurisdiction or not compliant with this Act. Sec. 206. Prohibition on reidentification. Sec. 207. Restrictions on collection, processing, and disclosure of contents of communications. Sec. 208. Prohibition on discriminatory processing. Sec. 209. Restrictions on genetic information. Sec. 210. Requirements for notice and consent processes and privacy policies. Sec. 211. Prohibition on deceptive notice and consent processes and privacy policies. Sec. 212. Notice and consent required. Sec. 213. Privacy policy. Sec. 214. Information security requirements. Sec. 215. Notification of data breach or data sharing abuse. Title III—United States Digital Privacy Agency Sec. 301. Establishment. Sec. 302. Executive and administrative powers. Sec. 303. Rulemaking authority. Sec. 304. Personnel. Sec. 305. Complaints of individuals. Sec. 306. User advisory board. Sec. 307. Academic and