BOBBY L. RUSH ®, omc he Toma ConGrESS OF THE UNITED STATES tno ssdsranr tr Wastincron, D.C, 20515 fermen May 16,2018 Mr. Brian Chesky CEO Aion 999 Brannan Stroot San Franciseo, CA 94103-4905 Mr. Chesky: ‘As you ate aware, this month marks implementation of the European Union's General Data Projection Regulation (GDPR) that is to take effect on May 25, 2018, While this regulation is intended to apply only to the EU, I am sure you would agree that in today’s interconnected ‘environment, it will undoubtedly have an impact on Airbnb users in the United States and around the word, With this in mind, 1 believe that Americans must have a clear understanding of how their online information will be used and protected, Furthermore, as Congress continues to discuss legal framework for data privacy and data protection inthe United States, itis imperative that we know how US. companies are operating. ‘Therefore, I would like to request information on the following items as they pertain to Aitbnb: 1, What provisions of the GDPR will be implemented in the United States? What is the antieipated timeline for implementing these provisions? 2. What provisions of the GDPR will not be implemented in the United States, and why? Do you anticipate any changes to Airbnb's privacy policies for users inthe United States? Io, when will you notify users ofthe now privacy policies? How s00n before, or after, implementation ofthese policies will users be notified? How will users be notified of Airbnb’s new privacy policies? 4, Will any new privacy options be contingent on a user opting-in or will they be the default setting?5, What information will Aisbnb collect on its users? Will Arbnb users have the ability to ‘opt-out of having their information colleted? Will Aibab users have the ability to request that already-collected information is deleted? ‘As Lam sure you agree, the safety and privacy of individuals’ data is paramount and should not be limited by geography. look forwatd to your response to this inquiry and to working with you on this critically important issue. Sincerely, ‘Member of Congresscenlttit'fisouae CONGRESS OF THE UNITED STATES. os oe ———w House oF REPRESENTATIVES. ‘act emer May 16, 2018, ‘Mr, James Park (CHO, President & Co-Founder Fieit 199 Fremont Street Floor 14 San Francisco, CA. 94105-2253, Mer. Park: As you ate aware, this month marks implementation of the European Union’s General Data Protection Regulation (GDPR) that is to take effect on May 25, 2018, While this regulation is intended to apply only to the EU, I am sure you would agree that in today’s interconnected ‘environment, it wll undoubtedly have an impact on Fitbit users in the United States and around the world. ‘Wit thi in mind, I believe that Americans must have a clear understanding of how their online formation will be used and protected. Furthermore, as Congress continues to discuss a legal framework for data privacy and data protection in the United States, itis imperative that we know how US. companies are operating. ‘Therefore, I would lke to request information on the following items as they pertain to Fitbit: 1. What provisions of the GDPR will be implemented in the United States? What is the anticipated timeline for implementing these provisions? 2, What provisions ofthe GDPR will not be implemented inthe United States, and why? 3. _Do you anticipate any changes to Fitbi's privacy policies for users inthe United States? If so, when will ou notify users ofthe new privacy policies? How soon befote, oF afte, implementation of these policies will users be notified? How will users be notified of Fitbit's new privacy policies? 4, Will any new privacy options be contingent on a user opting-in or wil they be the default setting?‘5. What information will Fitbit collect on its users? Will Fibit users have the ability to opt- ‘out of having ther information collected? Will Fitbit users have the ability to request that already-colletod information is deleted? ‘As Lam sure you agree, the safety and privacy of individuals’ data i paramount and should not be limited by geography. 1 look forwaed to your response to this inquiry and to working with you on this critically important issue, Sincerely, BoblL. Rush ‘Member of Congressouey L. nus .@, — oes my catia CONGRESS OF THE UNITED STATES are — Vouse or Remeatraraes eee a = WASHINGTON, D.C. 20515 May 16,2018 Mr, Sunda Pichai ceo Google LLC 1600 Amphitheatre Parkway ‘Mountain View, CA. 94043-1351 Mr. Pica: ‘As you are aware, this month marks implementation of the European Union's General Data Protection Regulation (GDPR) that is to take effect on May 25, 2018. While this regulation is intended to apply only to the EU, Iam sure you would agree that in today’s interconnected ‘environment, it wil undoubtedly have an impact on Google’s users in the United States and around the world, With this in mind, I believe that Americans must have a clear understanding of how their online formation will be used and protected, Furthermore, as Congress continues to discuss a legal framework for data privacy and data protection inthe United States, itis imperative that we know how U.S. companies are operating. Therefore, I would like to request information on the following items a they pertain to Google: 1 ‘What provisions of the GDPR will be implemented in the United States? What is the antiipated timeline for implementing these provisions? ‘What provisions ofthe GDPR will not be implemented inthe United States, and why? Do you anticipate any substantive changes to Google's privacy policies for users in the United States? Iso, when will you notify users of the new privacy policies? How soon before, or after, implementation ofthese policies will users be notified”? Will any new privacy options be contingent on a user opting-in or will they be the default setting? ‘What information will Google collect on its users? Will Google users have the ability © ‘opt-out of having their information collected? How will Google and its subsidiaries treat ‘browser-based “do not track” requests? Will Google users have the ability to request that already-collected information is deleted?‘As Tam sure you agree, the safety and privacy of individuals’ data is paramount and should not be limited by geography. look forward to your response fo this inquiry and to working with you on this critically important issue. Sincerely, ‘Member of Congressay 1. nush .® a ‘comurrEe ow ERaY AND come ee outa oo CONGRESS OF THE UNITED STATES: sets 8 —— House or Remnesentaries| ‘scone Wasnineron, D.C. 20515 May 16,2018 Mr. Logan Green cEO Lyf Ine. 185 Berry Stet Suite 5000 San Francisco, CA 94107-2503, Me. Green: AAs you ate aware, this month marks implementation of the European Union's General Data Protection Regulation (GDPR) that is to take effect on May 25, 2018. While this regulation is intended to apply only to the EU, Iam sure you would agree that in today’s interconnected ‘environment, twill undoubtedly have an impact on Lyft users in the United States and around the world With this in mind, I believe that Americans must have a clear understanding of how their online information will be used and protected. Furthermore, as Congress continues to discuss a legal framework for data privacy and data protection inthe United States, itis imperative that we know how U.S. companies are operating. ‘Therefore, would like to request information on the following items as they pertain to Lyf 1, What provisions of the GDPR will be implemented in the United States? What is the anticipated timeline for implementing these provisions? 2. What provisions ofthe GDPR will not be implemented inthe United States, and why? 3. Do you anticipate any changes to Lys privacy policies for users inthe United States? If 30, wen will you notify users of the new privacy policies? How soon before, oF ater, ‘implementation ofthese policies will users be notified? How will users be notified of LLyft's new privacy policies? 4, Will any new privacy options be contingent on a user opting-in or will they be the default setting?5, What information will Lyft collect on its usees? Will Lyft users have the ability to optout ‘of having their information collected? Will Lyft users have the ability to request that already-collected information is deleted? ‘As Lam sure you agree, the safety and privacy of individuals’ data i paramount and should not be limited by geography. 1Took forward to your response to this inquiry and to working with you on this critically important issue. Gale 20 Bobby E: Rush Member of CongressBOBBY L. RUSH 28 aati Sn Bane cout ae tensor CONGRESS OF THE UNITED STATES ———— House oF REPRESENTATIVES samt cnet ‘asearaor wie “Tore Shoo WASHINGTON, D.C. 20515. May 16,2018 ‘Mr. Evan Spiegel CEO Snap In. (63 Market Street Venice, CA 90291-3603 Mr. Spiegel [As you are aware, this month marks implementation of the European Union’s General Data Protection Regulation (GDPR) that is to take effect on May 25, 2018. While this regulation is intended to apply only to the EU, Iam sure you would agree that in today's interconnected. environment, it will undoubtedly have an impact on Snap users in the United States and around the world, With this in mind, believe that Americans must have a clear understanding of how their online information will be used and protected. Furthermore, as Congress continues to discuss a legal ‘framework for data privacy and data protection in the United States, itis imperative that we know how US. companies are operating “Therefore, I would lke to request information onthe following items as they pertain to Snap: 1, What provisions of the GDPR will be implemented in the United States? What is the anticipated timeline for implementing these provisions? 2, What provisions of the GDPR will not be implemented in the United States, and why? Do you anticipate any changes to Snap’s privacy policies for users inthe United States? If 0, when will you notify users of the new privacy policies? How soon below, or after, implementation ofthese policies will users be notified? How will users be notified of Snap's new privacy policies? 4, Will any new privacy options be contingent on a user opting-in or will hey be the defilt setting?5, What information will Snap collet on its users? Will Snap users have the ability to opt- ‘out of having their information collected? Will Snap users have the ability to equest that already-colleted information is deleted? ‘As Tam sure you agree, the safety and privacy of individuals’ data is paramount and should not be limited by geography. took forward to your response to this inquiry and to working with you on this eritically important issue. Sincerely, Bobby“L. Rush ‘Member of CongressBoBBy L. RUSH 290 puma out Se Bans cout femawer CONGRESS OF THE UNITED STATES: 7 asssranr uM ee "nae eden May 16,2018 Mr, ack Dorsey CEO ‘Twiter, Ine 1355 Market Street Suite 900, San Francisco, CA. 94103-1337 Mer, Dorse ‘As yo aro aware this month marks implementation ofthe Buropean Union's Genera Data Protection Regulation (GDPR) that st take effect on May 25, 2018, While this regulation is intended to aply only tothe EU, Tam sure you would agree that in today’s intereomected ‘With this in mind, I believe that Americans must have a elear understanding of how their online information will be used and protected, Furthermore, I believe that as Congress continues 10 discuss a legal framework for data privacy and data protection inthe United States itis imperative that we know how US. companies are operating, formation on the following items as they pertain to Twiter: States? What is the “Therefore, I would like to request |. What provisions of the GDPR will be implemented in the Unit antiipated timeline for implementing these provisions? ‘What provisions ofthe GDPR will not be implemented inthe United States, and why? 3. Do youanticipate any changes to Twitter's privacy policies for users in the United States? Iso, when will you notify users ofthe new privacy policies? How soon before, or after, ‘implementation ofthese policies will users be notified? How will users be notified of ‘Twitter's new privacy policies? 4. ‘users are afforded new privacy right, will these be contingent on a user optingcin o will they be the default setting? 5. What information will Twitter collet on its users? Will Twitter users have the ability t0 ‘opt-out of having thei information collected? How will Twitter and its subsidiaries teat ‘browser-based “do not track” requests? Will Twitter users have the ability to request that already-colleted information is deleted?As Lam sure you agree, the safety and privacy of individuals’ data is paramount and should not be limited by geography. [look forward to your response to this inquiry and to working with you on this critically important issu. Sincerely, ‘Member of Congressoat BOBBY L. RUSH sen pmo Ses Bone entiinait Ritiew CONGRESS OF THE UNITED STATES —ermmtoens — House oF Remmesentarives at tr assirar wae ‘Waonaton, D.C. 20515 Tor ones May 16,2018 Mr, Dara Khosrowshahi cEO Uber 1455 Market Stret Suite 400 San Francisco, CA 94103-1355 Mr. Khosrowshahi As you ate aware, this month marks implementation of the European Union’s General Data Protection Regulation (GDPR) that is to take effect on May 25, 2018. While this regulation is intended to apply only to the EU, Iam sure you would agree that in today’s interconnected ceavironment, it will undoubtedly have an impact on Uber users inthe United States and around the world, With this in mind, I helieve that Americans must have a lear understanding of how their online information will be used and protected. Furthermore, as Congress continues to discuss a legal framework for data privacy and data protection inthe United States, iti imperative that we know how U.S. companies are operating ‘Therefore, I would lke to request information onthe following items as they pertain to Uber: |. What provisions of the GDPR will be implemented in the United States? What is the antiipated timeline for implementing these provisions? 2. What provisions of the GDPR will not be implemented in the United States, and why? 3. Do you anticipate any changes to Uber’ privacy policies for users in the United States? If 0, when will you notify users of the new privacy policies? How soon before, or ates, ‘implementation of these policies will users be notified? How will users be notified of Uber’s new privacy policies? 4. Will any new privacy options be contingent on a user opting-in or will they be the default setting?5, What information will Uber collect on its users? Will Uber users have the ability to opt- ‘out of having their information collected? Will Ubee users have the ability to request that already-collected information is delete? AAs Lam sure you agree, the safety and privacy of individuals’ data is paramount and should not be limited by geography. look forward to your response to this inquiry and to working with you on this rtically important issue. cercly, li Rush “Member of Congress