Skip to main content
S 2134 117th Congress Senate Commerce Administrative law and regulatory procedures Administrative remedies Business records Civil actions and liability Computers and information technology Consumer affairs Executive agency funding and structure Federal Trade Commission (FTC) Genetics Government information and archives Government studies and investigations Health information and medical records Internet, web applications, social media Right of privacy

Data Protection Act of 2021

Introduced: June 17, 2021 Introduced by: Gillibrand, Kirsten E. Democratic · New York See on congress.gov
Sign in to write a letter Sign in to watch
 Everywhere this bill has been 2 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Jun 17, 2021
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Jun 17, 2021
Introduced in Senate
 Plain-English summary Congressional Research Service

Data Protection Act of 2021

This bill establishes the Data Protection Agency, an independent agency to regulate specified high-risk data practices and the collection, processing, and sharing of personal data. This includes the transfer of the powers and duties with respect to specified federal privacy laws from the Federal Trade Commission to the agency.

Among other functions, the agency must oversee the use of high-risk data practices, which include (1) using automated decision systems, such as machine learning; (2) profiling individuals on a large scale; (3) and processing personally identifying biometric information, such as genetic data. The agency also must prevent and remediate specified privacy harms (i.e., commercial practices that may lead to an adverse outcomes resulting from the collection, processing, or sharing of personal data).

The agency is authorized to collect fees from large data aggregators (i.e., large commercial entities that collect, use, or share the personal data). The agency also may require periodic reports and conduct periodic examinations of large data aggregators.

The bill authorizes the agency to prescribe rules, issue orders, and otherwise enforce violations of this bill and other privacy laws.

What's happening now June 17, 2021

Read twice and referred to the Committee on Commerce, Science, and Transportation.

 Committees of jurisdiction 1