SB779,7,22 (d) When translation required. If a broadband Internet access service provider transacts business with a customer in a language other than English, the provider shall translate the contents of the notices required under pars. (b) and (c) into the language through which the provider transacts business with the customer.

SB779,7,25 (3) Customer approval. (a) Opt-in approval required. Except as provided under par. (c), a broadband Internet access service provider may not do any of the following unless the provider obtains opt-in approval from the customer:

SB779,8,2 1. Use, disclose, or permit access to any of the customer's sensitive customer proprietary information.

SB779,8,5 2. Use, disclose, or permit access to any of the customer's proprietary information previously collected by the provider for which the customer has not previously granted approval under this paragraph or par. (b).

SB779,8,9 (b) Opt-out approval required. 1. Except as provided under subd. 2. or par. (c), a broadband Internet access service provider may not use, disclose, or permit access to any of a customer's nonsensitive customer proprietary information unless the provider obtains opt-out approval from the customer.

SB779,8,12 2. A broadband Internet access service provider may obtain opt-in approval from a customer to use, disclose, or permit access to any of the customer's nonsensitive customer proprietary information.

SB779,8,16 (c) Permissible use without customer approval. A broadband Internet access service provider may use, disclose, or permit access to customer proprietary information without approval from the customer under par. (a) or (b) only for the following purposes:

SB779,8,19 1. To provide the broadband Internet access service from which the information is derived, or in its provision of services necessary to, or used in, the provision of that service.

SB779,8,20 2. To initiate, render, bill, or collect for broadband Internet access service.

SB779,8,23 3. To protect the rights or property of the broadband Internet access service provider, or to protect users of the broadband Internet access service and other providers from fraudulent, abusive, or unlawful use of the service.

SB779,9,3 4. To provide any marketing, referral, or administrative services to a customer for the duration of a real-time interaction if the interaction was initiated by the customer.

SB779,9,5 5. To provide location information or nonsensitive customer proprietary information to any of the following:

SB779,9,9 a. A public safety answering point, as defined in s. 256.35 (1) (gm), emergency medical service provider, emergency dispatch provider, public safety official, fire service official, law enforcement official, or hospital emergency or trauma care facility, in order to respond to the user's request for emergency services.

SB779,9,12 b. The user's legal guardian or a member of the user's immediate family, to inform about the user's location in an emergency situation that involves the risk of death or serious physical harm.

SB779,9,15 c. A provider of information or database management services only for the purpose of assisting in the delivery of emergency services in response to an emergency.

SB779,9,16 6. As otherwise required or authorized by law.

SB779,9,21 (d) Solicitation and exercise of customer approval. 1. A broadband Internet access service provider shall request the approval required under par. (a) or (b) at the point of sale to a customer and at the time the provider makes a material change to its policies concerning the privacy of information that the provider obtains about a customer.

SB779,9,24 2. A broadband Internet access service provider shall request customer approval clearly and conspicuously, in language that is readily understandable and not misleading, and each request shall include all of the following:

SB779,10,2 a. A disclosure of the types of customer proprietary information for which the provider is seeking customer approval to use, disclose, or permit access to.

SB779,10,4 b. A disclosure of the purposes for which the customer's proprietary information will be used.

SB779,10,6 c. A disclosure of the categories of entities to which the provider intends to disclose or permit access to the customer proprietary information.

SB779,10,7 d. A means to easily access the notice required under sub. (2) (a) or (c).

SB779,10,8 e. A means to easily access the mechanism required under subd. 3.

SB779,10,11 3. A broadband Internet access service provider shall make available, at no additional cost to the customer, a mechanism for a customer to grant, deny, or withdraw opt-in approval or opt-out approval, or both, at any time.

SB779,10,15 4. A broadband Internet access service provider shall give effect to a customer's grant, denial, or withdrawal of approval promptly, and the grant, denial, or withdrawal of approval shall remain in effect until the customer revokes or limits the grant, denial, or withdrawal of approval.

SB779,10,20 5. If a broadband Internet access service provider transacts business with a customer in a language other than English, the provider shall translate the contents required under subd. 2. and the instructions for using the mechanism required under subd. 3. into the language through which the provider transacts business with the customer.

SB779,10,23 (4) Data security. (a) A broadband Internet access service provider shall take reasonable security measures to protect customer proprietary information from unauthorized use, disclosure, or access.

SB779,11,3 (b) In implementing reasonable security measures under par. (a), a broadband Internet access service provider shall appropriately take into account each of the following factors:

SB779,11,4 1. The nature and scope of the provider's activities.