To establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission, to amend the Children's Online Privacy Protection Act of 1998 to improve provisions relating to collection, use, and disclosure of personal information of children, and for other purposes.

[AI summary unavailable — showing source text] TITLE I--COMMERCIAL PRIVACY Commercial Privacy Bill of Rights Act of 2015 Directs the Federal Trade Commission (FTC) to initiate a rulemaking to require covered entities that collect or use information about individuals to carry out security measures to protect personally identifiable information, unique identifier information, and other information that may be used to identify a specific individual. Defines "covered entity" as a person (a person, partnership, or corporation over which the FTC has authority under the Federal Trade Commission Act, a common carrier subject to the Communications Act of 1934, or a nonprofit organization) who collects, uses, transfers, or stores such information concerning more than 5,000 individuals during any consecutive 12-month period. Directs the FTC to require covered entities to: (1) notify individuals of their practices regarding the collection, use, transfer, and storage of such information; (2) provide timely notice before implementing a material change in such practices; (3) offer individuals a mechanism to provide opt-in consent for any unauthorized use of such information or a third party's use for behavioral advertising or market…