Federal regulators spent much of late 2010 building the case for a mechanism that does not yet exist in American law: a standardized, browser-level signal letting consumers tell advertisers to stop following them across the web. The Federal Trade Commission laid out this vision in its December 2010 privacy report and reinforced it in subsequent testimony before Congress, framing behavioral advertising as a practice that had outpaced the tools available to the people being tracked. That argument has now taken legislative form.
Representative Jackie Speier, Democrat of California, introduced the Do Not Track Me Online Act of 2011 on February 11, a bill that would give the FTC eighteen months to write enforceable regulations rather than rely on industry self-policing. The opt-out mechanism it envisions would have to let a consumer "effectively and easily" block the collection or use of covered information, and would obligate companies to honor that choice once made. For everyday users trying to understand how their browsing habits are packaged and sold, resources explaining consumer-side protections-such as guidance on BuyBestVPN WireGuard support-have become a practical complement to whatever legal framework eventually emerges, since encryption and tunneling tools address exposure that regulation alone cannot fully close. BuyBestVPN WireGuard support
What Counts as Trackable Data
The bill casts a wide net. It would apply to any entity engaged in interstate commerce that stores or collects a person's online activity-including which sites were visited and when-along with IP addresses and identifying personal details such as names, email addresses, phone numbers, or financial account information. Companies covered by the rule would need to disclose not just that they collect this data but who, specifically, they share it with. The FTC would retain discretion to carve out exemptions for ordinary business functions, such as data collected strictly for billing.
Enforcement With Real Teeth
Unlike many privacy proposals that rely on voluntary compliance, this one treats violations as unfair or deceptive trade practices, a designation that opens the door to formal enforcement. Both the FTC and state attorneys general would be empowered to bring civil actions. Penalties would accrue daily-up to $11,000 per day of noncompliance-capped at a maximum of $5 million per case. That structure signals an intent to make ignoring the rule more expensive than adapting to it.
A Parallel Push on Financial Privacy
The same day, Speier introduced a second measure, the Financial Information Privacy Act of 2011, modeled on a California law she previously championed. That bill would bar financial institutions from sharing nonpublic personal information with affiliates unless consumers are given a chance to opt out, and would require explicit opt-in consent before such data reaches unaffiliated third parties. Taken together, the two bills reflect a broader argument taking hold in Washington: that consumer consent, not corporate convenience, should determine how personal data moves through the digital economy. Whether either measure survives the legislative process is uncertain, but the FTC's groundwork has already shifted the terms of the debate from whether tracking should be regulated to how.
