Skip to main content
HR 4240 117th Congress House

User Data Protection Act

Official title: To prohibit digital platforms from using information about a user unless the user consents to such use, to ensure personal information is considered a property right, and for other purposes.

Introduced: June 29, 2021 Introduced by: Schweikert, David Republican · Arizona See on congress.gov
Commerce Civil actions and liabilityConsumer affairsInternet, web applications, social mediaProperty rightsState and local government operations
Sign in to write a letter Sign in to watch
This bill died when the 117th Congress ended
It never became law before the 117th Congress (2021–2022) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 3 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jun 30, 2021
Referred to the Subcommittee on Consumer Protection and Commerce.
Jun 29, 2021
Introduced in House
Jun 29, 2021
Referred to the House Committee on Energy and Commerce.
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action June 30, 2021

Referred to the Subcommittee on Consumer Protection and Commerce.

 Plain-English summary Congressional Research Service

User Data Protection Act

This bill establishes requirements for websites and other digital platforms that collect and store information about their users, including information saved to a web browser to track a user over time (i.e., cookies).

Specifically, a website may not (1) use cookies or otherwise collect information about a user without the user's consent, (2) restrict access to the website if a user declines such consent, (3) use pixel-sized images that are hidden or embedded in a web page that collect data about a user (i.e., tracking pixels), or (4) share a user's information with other websites or online businesses.

Further, if a user consents to the collection of information, the website must (1) disclose to the user what the information will be used for, and (2) treat any such information as an exclusive property right owned by the user.

The bill provides for enforcement of these provisions by the Federal Trade Commission, state attorneys general, and private right of action.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 2
Cite this page click to expand
APA
U.S. Congress. (2026). H.R. 4240: User Data Protection Act. 117th Congress. Open America. https://openamerica.io/bill/117-HR-4240/
MLA
"H.R. 4240: User Data Protection Act." 117th Congress, 2026, Open America, https://openamerica.io/bill/117-HR-4240/.
Bluebook (legal)
H.R. 4240, 117th Cong. (2026), https://openamerica.io/bill/117-HR-4240/.
Markdown link
[H.R. 4240: User Data Protection Act](https://openamerica.io/bill/117-HR-4240/)
Report a problem