Establishes consumers' foundational data privacy rights; creates oversight mechanisms; establishes enforcement mechanisms; establishes the privacy and security victims relief fund.