DATA Privacy Act
Latest action · Nov 12, 2020 Referred to the Committee on Energy and Commerce, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedNov 12, 2020
- Passed HouseNot reached
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Digital Accountability and Transparency to Advance Privacy Act or the DATA Privacy Act
This bill establishes information security requirements for businesses that collect, process, store, or disclose information relating to at least 3,000 people in a 12-month period. The bill applies to information that may be linked to a specific individual or a device associated with a specific individual. It does not cover data related to employment or publicly available government records.
Specifically, covered businesses must
- provide consumers with accessible notice of the business’ privacy practices with respect to such information; and
- if meeting a certain revenue threshold, appoint a privacy officer to oversee compliance with the information privacy standards of this bill.
The bill further requires the Federal Trade Commission to promulgate rules requiring covered businesses to
- limit the purpose and amount of consumer data collection to reasonable business purposes, provide consumers with clear methods to opt-in and opt-out of such collection, and refrain from using such data for discriminatory purposes;
- provide consumers with a method to access, revise, transmit, and delete such collected information; and
- establish information security practices based on the sensitivity and level of identifiability of the collected data, risk of exposure of such data, widely-accepted practices of securing such data, and cost and impact of implementing such practices.
The bill further revises the National Science Foundation information security grants program to include research about methods to encrypt or remove identifiable elements from collected consumer data.
Cosponsors
Members who signed on, in the order they did.
Actions 2
Everything that happened, newest first.
- Nov 12, 2020Introduced in House
- Nov 12, 2020Referred to the Committee on Energy and Commerce, and in addition to the Committee on Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Related bills 1
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| S 583 | DATA Privacy Act | Identical bill | Feb 27, 2019 |
Subjects
Assigned by the Library of Congress. Policy area: Commerce.
- Accounting and auditing
- Administrative law and regulatory procedures
- Civil actions and liability
- Commerce
- Computer security and identity theft
- Computers and information technology
- Consumer affairs
- Employee hiring
- Federal Trade Commission (FTC)
- Government employee pay, benefits, personnel management
- Inflation and prices
- Research administration and funding
- Right of privacy
- State and local government operations
Text 1
Each version as it was printed, newest first.
- Nov 12, 2020Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.