S. 2889 · 116th Congress
National Security and Personal Data Protection Act of 2019
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 116th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
R
HawleySponsor2 cosponsors · 2 R
2 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill prohibits the transfer of data to, and storage of data within, foreign countries that threaten U.S. national security.
What it does: CRS summary · Introduced in Senate · Nov 18, 2019
National Security and Personal Data Protection Act of 2019
This bill prohibits the transfer of data to, and storage of data within, foreign countries that threaten U.S. national security.
Specifically, the bill requires the Department of State to designate as a country of concern any country, including the People's Republic of China and the Russian Federation, whose data privacy and security requirements pose a substantial risk to U.S. national security.
A technology company that is subject to the jurisdiction of a country of concern and that provides a website or internet application operating in interstate or foreign commerce shall
- not collect unnecessary user data or use any user data for a purpose that is secondary to the operation of the website, service, or application;
- not transfer user data or information to a country of concern;
- not store user data on a server outside either the United States or a country that has agreed to share data with U.S. law enforcement agencies; and
- allow individuals to view and delete their individual user data.
Additionally, any company that provides a website or internet application operating in interstate or foreign commerce but which is not subject to the jurisdiction of a country of concern is prohibited from transferring data to a country of concern or storing user data on a server located in a country of concern.
The Federal Trade Commission shall enforce these requirements; however, the bill also provides for civil actions brought by either an individual or the attorney general of a state to enjoin the engagement of any person in a practice that violates the prohibitions in this bill.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: National Security and Personal Data Protection Act of 2019
Latest action (Nov 18, 2019): Read twice and referred to the Committee on Commerce, Science, and Transportation.
Policy area: Science, Technology, Communications · Origin: Senate · Introduced: Nov 18, 2019
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.