S. 2134 · 117th Congress
Data Protection Act of 2021
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 117th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
GillibrandSponsor1 cosponsor · 1 D
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
Data Protection Act of 2021 This bill establishes the Data Protection Agency, an independent agency to regulate specified high-risk data practices and the collection, processing, and sharing of personal data. This includes the transfer of the powers and duties with respect to specified federal privacy laws from the Federal Trade Commission to the agency.
What it does: CRS summary · Introduced in Senate · Jun 17, 2021
Data Protection Act of 2021
This bill establishes the Data Protection Agency, an independent agency to regulate specified high-risk data practices and the collection, processing, and sharing of personal data. This includes the transfer of the powers and duties with respect to specified federal privacy laws from the Federal Trade Commission to the agency.
Among other functions, the agency must oversee the use of high-risk data practices, which include (1) using automated decision systems, such as machine learning; (2) profiling individuals on a large scale; (3) and processing personally identifying biometric information, such as genetic data. The agency also must prevent and remediate specified privacy harms (i.e., commercial practices that may lead to an adverse outcomes resulting from the collection, processing, or sharing of personal data).
The agency is authorized to collect fees from large data aggregators (i.e., large commercial entities that collect, use, or share the personal data). The agency also may require periodic reports and conduct periodic examinations of large data aggregators.
The bill authorizes the agency to prescribe rules, issue orders, and otherwise enforce violations of this bill and other privacy laws.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Data Protection Act of 2021
Latest action (Jun 17, 2021): Read twice and referred to the Committee on Commerce, Science, and Transportation.
Policy area: Commerce · Origin: Senate · Introduced: Jun 17, 2021
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.