Skip to main content
S 2134 117th Congress Senate Commerce Administrative law and regulatory procedures Administrative remedies Business records Civil actions and liability Computers and information technology Consumer affairs Executive agency funding and structure Federal Trade Commission (FTC) Genetics Government information and archives Government studies and investigations Health information and medical records Internet, web applications, social media Right of privacy

Data Protection Act of 2021

Introduced: June 17, 2021 Introduced by: Gillibrand, Kirsten E. Democratic · New York See on congress.gov
Sign in to write a letter Sign in to watch
This bill died when the 117th Congress ended
It never became law before the 117th Congress (2021–2022) adjourned, and bills don't carry over to the next Congress. It would have to be reintroduced. You can still save it for reference, but it won't receive updates.
 Everywhere this bill has been 2 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jun 17, 2021
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Jun 17, 2021
Introduced in Senate
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Plain-English summary Congressional Research Service

Data Protection Act of 2021

This bill establishes the Data Protection Agency, an independent agency to regulate specified high-risk data practices and the collection, processing, and sharing of personal data. This includes the transfer of the powers and duties with respect to specified federal privacy laws from the Federal Trade Commission to the agency.

Among other functions, the agency must oversee the use of high-risk data practices, which include (1) using automated decision systems, such as machine learning; (2) profiling individuals on a large scale; (3) and processing personally identifying biometric information, such as genetic data. The agency also must prevent and remediate specified privacy harms (i.e., commercial practices that may lead to an adverse outcomes resulting from the collection, processing, or sharing of personal data).

The agency is authorized to collect fees from large data aggregators (i.e., large commercial entities that collect, use, or share the personal data). The agency also may require periodic reports and conduct periodic examinations of large data aggregators.

The bill authorizes the agency to prescribe rules, issue orders, and otherwise enforce violations of this bill and other privacy laws.

What's happening now June 17, 2021

Read twice and referred to the Committee on Commerce, Science, and Transportation.

 Bill text 1 version

Source documents hosted by congress.gov.

 Committees of jurisdiction 1
Cite this page click to expand
APA
U.S. Congress. (2026). S. 2134: Data Protection Act of 2021. 117th Congress. Open America. https://openamerica.io/bill/117-S-2134/
MLA
"S. 2134: Data Protection Act of 2021." 117th Congress, 2026, Open America, https://openamerica.io/bill/117-S-2134/.
Bluebook (legal)
S. 2134, 117th Cong. (2026), https://openamerica.io/bill/117-S-2134/.
Markdown link
[S. 2134: Data Protection Act of 2021](https://openamerica.io/bill/117-S-2134/)
Report a problem