VotedBy VotedBy ⌕
Election Day · Tue, Nov 3See how your members of Congress voted →

H.R. 2701 · 118th Congress

Online Privacy Act of 2023

Key: what the circles and colors mean

Each circle is a bill. The ring fills as it moves through Congress:

IntroducedPassed one chamberPassed both chambersBecame law (gold)Resolution agreed to (full, dark)Failed or vetoed (gray)

Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.

Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.

Never voted on. It didn't reach a floor vote before the 118th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.

AED EshooSponsor
1 cosponsor · 1 D

1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.

This bill establishes online privacy rights for personal information, including the contents of personal communications. It also applies requirements for protecting those rights to certain data processors, service providers, and other entities that collect, process, or maintain personal information and transmit it online.

What it does: CRS summary · Introduced in House · Apr 19, 2023

Online Privacy Act of 2023

This bill establishes online privacy rights for personal information, including the contents of personal communications. It also applies requirements for protecting those rights to certain data processors, service providers, and other entities that collect, process, or maintain personal information and transmit it online.

The entities covered by the bill must generally permit individuals to oversee and control their personal information, including by allowing them to

  • access, download, and transmit their information;
  • correct inaccurate or incomplete information;
  • request the deletion of their information; and
  • request human reviews of certain automated processes.

Further, the bill limits how covered entities may use, retain, and disclose personal information and otherwise requires actions to preserve information privacy. For example, covered entities must (1) notify and obtain consent from individuals before using, retaining, or disclosing their information in most instances; and (2) maintain privacy and information security policies. Additionally, covered entities may not process information for purposes related to employment, housing, and other opportunities in a discriminatory manner.

The bill establishes the Digital Privacy Agency to administer the provisions of the bill and transfers certain authorities, employees, and responsibilities related to information privacy from the Federal Communications Commission to the agency.

Violations of the bill's requirements may be enforced by the Digital Privacy Agency, states, and individuals. The bill sets out specific guidelines for investigating and adjudicating violations, with violations subject to civil penalties.

The bill also requires research and public education on information privacy.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov

About this bill and sources

Official title: Online Privacy Act of 2023

Latest action (Apr 19, 2023): Referred to the Committee on Energy and Commerce, and in addition to the Committees on the Judiciary, House Administration, and Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.

Policy area: Science, Technology, Communications · Origin: House · Introduced: Apr 19, 2023

Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)

No recorded floor vote found.