This act prohibits companies from sending mail that has a misleading subject line. This act covers certain information that tracking cookies can collect when it is tied to personally identifiable information. This act requires companies who store financial or personal data to have an adequate security plan and system in place.