Skip to main content
H.R. 8152 117th Congress House

American Data Privacy and Protection Act

Official title: To provide consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement.

Introduced: June 21, 2022 Introduced by: Frank Pallone, Jr. Democratic · New Jersey See on congress.gov
Commerce Business recordsCaliforniaCivil actions and liabilityComputer security and identity theft
More subjectsShow fewer subjects
Consumer affairsFederal preemptionIllinoisRight of privacyState and local government operations
This bill died when the 117th Congress ended
It never became law before the 117th Congress (2021–2022) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 9 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Dec 30, 2022
Placed on the Union Calendar, Calendar No. 488.
Dec 30, 2022
Reported (Amended) by the Committee on Energy and Commerce. H. Rept. 117-669.
Jul 20, 2022
Ordered to be Reported (Amended) by the Yeas and Nays: 53 - 2.
Jul 20, 2022
Committee Consideration and Mark-up Session Held.
Jun 23, 2022
Forwarded by Subcommittee to Full Committee (Amended) by Voice Vote .
Jun 23, 2022
Subcommittee Consideration and Mark-up Session Held.
Jun 22, 2022
Referred to the Subcommittee on Consumer Protection and Commerce.
Jun 21, 2022
Introduced in House
Jun 21, 2022
Referred to the House Committee on Energy and Commerce.
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Latest action December 30, 2022

Placed on the Union Calendar, Calendar No. 488.

 Plain-English summary Congressional Research Service

American Data Privacy and Protection Act

This bill establishes requirements for how companies, including nonprofits and common carriers, handle personal data, which includes information that identifies or is reasonably linkable to an individual.

Specifically, the bill requires most companies to limit the collection, processing, and transfer of personal data to that which is reasonably necessary to provide a requested product or service and to other specified circumstances. It also generally prohibits companies from transferring individuals' personal data without their affirmative express consent.

The bill establishes consumer data protections, including the right to access, correct, and delete personal data. Prior to engaging in targeted advertising, the bill requires companies to provide individuals with a means to opt out of such advertising. The bill also provides additional protections with respect to personal data of individuals under the age of 17. It further prohibits companies from using personal data to discriminate based on specified protected characteristics.

Additionally, companies must implement security practices to protect and secure personal data against unauthorized access, and the Federal Trade Commission (FTC) may issue regulations for complying with this requirement.

The bill provides for enforcement of these requirements by the FTC and state attorneys general. Beginning two years after the bill takes effect, individuals may, subject to certain notification requirements, bring civil actions for violations of the bill.

Finally, the bill preempts state laws that are covered by the provisions of the bill except for certain categories of state laws and specified laws in Illinois and California.

 Bill text 2 versions

Source documents hosted by congress.gov.

 Committees of jurisdiction 2
 Lobbying activity 27

Registered lobbyists who named this bill in their disclosure filings. Source: federal Lobbying Disclosure Act filings.

Bodies those filers lobbied

A filing lists the bills it worked on and the parts of government it contacted in separate sections, so these are the bodies those filers named anywhere in the filing, not a per-bill breakdown.

See all 27 filings →
Cite this page click to expand
APA
U.S. Congress. (2026). H.R. 8152: American Data Privacy and Protection Act. 117th Congress. Open America. https://openamerica.io/bill/117-HR-8152/
MLA
"H.R. 8152: American Data Privacy and Protection Act." 117th Congress, 2026, Open America, https://openamerica.io/bill/117-HR-8152/.
Bluebook (legal)
H.R. 8152, 117th Cong. (2026), https://openamerica.io/bill/117-HR-8152/.
Markdown link
[H.R. 8152: American Data Privacy and Protection Act](https://openamerica.io/bill/117-HR-8152/)
Report a problem