Comprehensive Right to Privacy Act

Comprehensive Right to Privacy Act - Sets forth administrative restrictions for any organization maintaining a data system that includes personal information. Imposes additional restrictions upon statistical reporting and research information systems. Establishes public and personal notice requirements relating to the existence and purpose of such systems.

Requires organizations maintaining personal information (1) to inform the data subject of legal obligations to supply data, (2) to request consent of the data subject to the transfer of data to another organization, (3) to permit the data subject to inspect to inspect personal information, its sources, and uses, (4) to makes specified disclosures, (5) to notify the data subject prior to the release of information pursuant to legal process, (6) to take certain actions with respect to the challenge, correction, or explanation of the information by the data subject, and (7) to notify the data subject of the nature of the information maintained and the place where subject may inspect such information.

Exempts from requirements of this Act (1) active criminal investigatory files of law enforcement agencies, (2) files of press and news media, and (3) certain mailing lists.

Prohibits requirements for disclosure of a social security number or other universal identifier unless required by Federal law.

Establishes the Federal Privacy Board to implement this Act and to publish a Data Base Directory of the United States.

Prohibits disclosure of personal information or business secrets except as required by this Act. Declares disclosures under this Act confidential information. Establishes criminal penalties and civil remedies for violation of this Act.