VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

S. 3300 · 116th Congress

Data Protection Act of 2020

Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Never voted on. It didn't reach a floor vote before the 116th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.

No cosponsors.

This bill establishes in the executive branch an independent Data Protection Agency (DPA) to regulate the processing of personal data.

What it does: CRS summary · Introduced in Senate · Feb 13, 2020

Data Protection Act of 2020

This bill establishes in the executive branch an independent Data Protection Agency (DPA) to regulate the processing of personal data.

The DPA shall seek to protect individuals' privacy and limit the collection, disclosure, processing, and misuse of individuals' personal data by a covered entity (i.e., a person that collects, processes, or otherwise obtains personal data other than an individual processing personal data in the course of personal or household activity).

The DPA must examine and oversee high-risk data practices, which include

  • a systematic or extensive evaluation of personal data that is based on automated processing;
  • any processing of biometric data for the purpose of uniquely identifying an individual;
  • processing which involves tracking an individual's geolocation; or
  • the use of personal data of children or other vulnerable individuals for marketing purposes, profiling, or automated processing.

The DPA is authorized to (1) enforce federal privacy law, and (2) take specified actions to prevent a covered entity from committing or engaging in an unfair or deceptive act or practice.

The DPA shall establish procedures to provide consumers with a timely response to complaints against, or inquiries concerning, a covered entity.

The DPA may engage in joint investigations and requests for information and may issue subpoenas. The bill provides for civil monetary penalties for violations of privacy law and the use of such penalties, including as monetary relief for individuals affected by violations.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: Data Protection Act of 2020

Latest action (Feb 13, 2020): Read twice and referred to the Committee on Commerce, Science, and Transportation.

Policy area: Government Operations and Politics · Origin: Senate · Introduced: Feb 13, 2020

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

No recorded floor vote found.