H.R. 2701 · 118th Congress
Online Privacy Act of 2023
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 118th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
1 cosponsor · 1 D
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill establishes online privacy rights for personal information, including the contents of personal communications. It also applies requirements for protecting those rights to certain data processors, service providers, and other entities that collect, process, or maintain personal information and transmit it online.
What it does: CRS summary · Introduced in House · Apr 19, 2023
Online Privacy Act of 2023
This bill establishes online privacy rights for personal information, including the contents of personal communications. It also applies requirements for protecting those rights to certain data processors, service providers, and other entities that collect, process, or maintain personal information and transmit it online.
The entities covered by the bill must generally permit individuals to oversee and control their personal information, including by allowing them to
- access, download, and transmit their information;
- correct inaccurate or incomplete information;
- request the deletion of their information; and
- request human reviews of certain automated processes.
Further, the bill limits how covered entities may use, retain, and disclose personal information and otherwise requires actions to preserve information privacy. For example, covered entities must (1) notify and obtain consent from individuals before using, retaining, or disclosing their information in most instances; and (2) maintain privacy and information security policies. Additionally, covered entities may not process information for purposes related to employment, housing, and other opportunities in a discriminatory manner.
The bill establishes the Digital Privacy Agency to administer the provisions of the bill and transfers certain authorities, employees, and responsibilities related to information privacy from the Federal Communications Commission to the agency.
Violations of the bill's requirements may be enforced by the Digital Privacy Agency, states, and individuals. The bill sets out specific guidelines for investigating and adjudicating violations, with violations subject to civil penalties.
The bill also requires research and public education on information privacy.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Online Privacy Act of 2023
Latest action (Apr 19, 2023): Referred to the Committee on Energy and Commerce, and in addition to the Committees on the Judiciary, House Administration, and Science, Space, and Technology, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Policy area: Science, Technology, Communications · Origin: House · Introduced: Apr 19, 2023
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.