Fair Information Practices Act.

Existing law requires an operator of a commercial Web site or online service that collects personally identifiable information, as defined, through the Internet about individual consumers residing in California to conspicuously post its privacy policy on its Internet Web site, and requires that privacy policy to, among other things, identify the categories of personally identifiable information that the operator collects. This bill would require a person, as defined, that provides a mobile operating system or platform that is used by an operator or developer of a mobile application that collects personal data from an individual California user through the mobile application or an online service to create universal privacy policy standards that are based on certain principles, including, but not limited to, transparency and security. The bill would require that person to conspicuously post those standards on the person's Internet Web site in a digital format that is accessible to all users, and would require a developer or operator of a mobile application using a mobile operating system or platform to accept those universal privacy policy standards, except as specified. The bill would also make legislative findings and declarations regarding those principles.