S. 1208 · 119th Congress
Privacy Act Modernization Act of 2025
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Not yet voted on. This bill is still a proposal: it hasn't reached a floor vote, and its text can change in committee or on the floor before any vote.
D
WydenSponsor3 cosponsors · 3 D
3 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill strengthens privacy protections that apply to personal data held or maintained by government agencies. These protections restrict the storage, access, use, and disclosure of personal data, such as an individual’s name or Social Security number.
What it does: CRS summary · Introduced in Senate · Mar 31, 2025
Privacy Act Modernization Act of 2025
This bill strengthens privacy protections that apply to personal data held or maintained by government agencies. These protections restrict the storage, access, use, and disclosure of personal data, such as an individual’s name or Social Security number.
Currently, these protections apply to U.S. citizens and permanent residents. The bill expands this to include natural persons in the United States and certain associations and corporations.
The bill places additional limits on the use and disclosure of such data, including by limiting the use of records to a legally authorized purpose and requiring disclosures to be minimal and consistent with a previously stated use.
The bill also increases existing penalties and creates additional criminal penalties for violations. For example, under the bill, an agency employee who willfully discloses individually identifiable information with the intent to sell, transfer, use, or disclose such information for commercial advantage, personal gain, or malicious harm shall be guilty of a felony and fined not more than $250,000, imprisoned for not more than 10 years, or both.
Courts may provide preliminary relief and, if the U.S. is found to have acted intentionally or willfully, the U.S. is liable for additional types of damages (e.g., punitive).
The bill generally takes effect two years after the date of enactment. However, the bill takes effect immediately upon enactment with respect to certain actions taken by the Department of Government Efficiency (DOGE), certain special or temporary employees, and other related individuals and organizations.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Privacy Act Modernization Act of 2025
Latest action (Mar 31, 2025): Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Policy area: Finance and Financial Sector · Origin: Senate · Introduced: Mar 31, 2025
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.