Requiring merchants that collect specified personal and marketing
information to implement and maintain specified security procedures
and practices; requiring a merchant to disclose to a consumer
specified personal and marketing information in a specified manner;
establishing procedures for requesting the information; requiring a
merchant to provide the information requested within a specified
period of time; authorizing a merchant to charge a specified fee for
disclosure of the information; etc.