1. Short title This Act may be cited as the Privacy Score Act of 2020 . 2. Privacy framework and scores (a) Privacy framework (1) Development The Commission shall develop a framework for assessing the privacy practices of interactive computer services (in this section referred to as the privacy framework ). (2) Framework criteria The privacy framework shall include an assessment of the following criteria, with respect to an interactive computer service: (A) Whether the service collects, stores, uses, and shares only covered information necessary to perform a relevant user-facing purpose. (B) The level of transparency of the service regarding the privacy practices of the service, including the extent to which the service communicates to users the following: (i) What covered information may be collected. (ii) How such information may be stored. (iii) How such information may be used. (iv) With whom such information may be shared. (C) Whether the service offers users any options to designate preferences for covered information collected, stored, used, or shared in excess of the minimum information necessary to perform a relevant user-facing purpose, and whether such preferences are respected. (D) The risk that covered information collected by the service may be used to identify users, while taking into consideration whether the identification is necessary to perform a relevant user-facing purpose of the service and whether a reasonable user would be aware of such purpose. (E) The security of sensitive covered information collected by the service. (F) Any other criteria the Commission determines necessary to protect the privacy of users with respect to covered information. (b) Privacy scores (1) Development The Commission shall use the privacy framework to develop a system for issuing a score for an interactive computer service that reflects the extent to which the service protects the privacy of the covered information of users, taking into consideration the purpose of the service and options offered to users with