To establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission, to amend the Children's Online Privacy Protection Act of 1998 to improve provisions relating to collection, use, and disclosure of personal information of children, and for other purposes.

This bill addresses the protection of personal information by requiring entities to carry out security measures to protect the personal information they collect and maintain, limiting the collection and distribution of personal information, requiring specified notice with respect to certain security breaches, restricting targeted marketing to children, and otherwise modifying provisions relating to the collection and use of personal information of children or adults.