Under the proposed legislation, called the Consumer Privacy Bill of Rights Act, industries would draw up their own codes of conduct on handling customer data, which regulators would enforce.
