Over 90% of Americans feel like they have no control over their data or their online privacy. Congress should be actively working to give back control of each internet users’ digital presence, instead of letting the companies with the worst privacy track records dictate users’ legal rights. Strong privacy legislation in the United States is possible, necessary, and long overdue. EFF has suggested five concrete recommendations for proposed legislation regarding the data privacy rights of users online:

1. Requiring op-in consent to online data gathering and sharing
2. Giving users a "right to know" about data gathering and sharing.
3. Giving users a right to data portability.
4. Imposing requirements on companies for when customer data is breached.
5. Requiring businesses that collect personal data directly from consumers to serve as "information fiduciaries," similar to the duty of care required of certified personal accountants.