Rubio's proposal appears to lack the teeth that some competing privacy bills have. Instead of giving the FTC the authority to create regulations, it requires Congress to write the rules and asks the agency to enforce what they come up with. Only if Congress fails to successfully pass a law within two years of the ADDA going into effect would the FTC have the power to write rules on its own. The ADDA would also require exemptions for smaller companies to operate outside of rules that might hurt their business.
While Rubio's bill -- which doesn't have any cosponsors -- take some baby steps toward improving data privacy laws, it also would effectively override any state laws that might have stricter rules that tech giants and telecom companies have to follow. With California's Consumer Privacy Act set to go into effect in 2020 and a number of state-based net neutrality laws on the books, the ADDA may be viewed as a way to undermine those more stringent rules with watered down national laws.