; or (2) willfully certifies any statement as set forth in subsections (b) and (c) of this section knowing that the annual report accompanying the statement does not comport with all the requirements set forth in this section shall be fined not more than $5,000,000 or 25 percent of the largest amount of annual compensation the person received during the previous 3-year period from the covered entity, imprisoned not more than 20 years, or both. . (2) Technical and conforming amendment The table of sections for chapter 63 of title 18, United States Code, is amended by adding at the end the following: 1352. Failure of corporate officers to certify data protection reports. . 6. Do not track data sharing opt out (a) Regulations Not later than 2 years after the date of enactment of this Act, the Commission shall promulgate regulations, in accordance with section 553 of title 5, United States Code, to— (1) implement and maintain a Do Not Track data sharing opt-out website— (A) that allows consumers to opt out of data sharing with 1 click after the consumer is logged into the website, view their opt-out status, and change their opt-out status; (B) the effect of which opt out is to prevent— (i) covered entities from sharing the personal information of the consumer with third parties, including personal information shared with or stored by the covered entity prior to the opt out unless— (I) the sharing is necessary for the primary purpose for which the consumer provided the personal information; and (II) the third party with whom the personal information was shared does not retain or use the personal information for secondary purposes; and (ii) covered entities from storing or using personal information of the consumer that has been shared with them by non-covered entities, not including personal information shared with or stored by the covered entity prior to the opt out; (C) that is reasonably accessible and usable by consumers