"private right of action" -> means that private individuals can sue the corporations that break the rules, they don't have to rely on a government agency to bring charges. (I'm not against government agencies also bringing charges, but that shouldn't be the only enforcement mechanism)