The company calls for the creation of “a comprehensive privacy and data security program” that embraces a set of “fair information practice principles,” including limiting data collection to that which is relevant and necessary; ensuring data is accurate, comprehensive and updated to maintain accuracy; specifying in notices the purposes for which personal data is processed; and placing limitation on use.

Under the Intel plan, the Federal Trade Commission (FTC) and the U.S. Attorney would have civil and criminal enforcement authority, respectively.