Consumer Reports put forth a model for U.S. state privacy laws. The model bill would give residents automatic protections rather than going with an opt-out model for sharing personal information. It would also require companies to limit the amount of information they collect to what they reasonably need to perform tasks, prohibit any secondary uses of data, and stop companies from penalizing consumers for exercising their rights.