Federal Privacy and Data Protection Policy Act of 2002
The source supplies the latest action, but no lifecycle stage.
Latest action (17 Jun 2002): Read twice and referred to the Committee on Governmental Affairs.
What this bill does
S. 2629, the Federal Privacy and Data Protection Policy Act of 2002, would establish a framework requiring federal agencies to review and document how they handle personal data. Each agency would have to designate a privacy manager responsible for compliance, training, and developing data-protection practices. Within one year of enactment, agencies would need to conduct a detailed "benchmark assessment" documenting what personal information they collect, why, what notice and consent practices are used, and how the data is secured. At least every three years, agencies would be required to have an independent third-party reviewer—selected to avoid conflicts of interest—evaluate compliance with the benchmark assessment, including a technical scan of agency websites for privacy vulnerabilities. Inspectors General would receive and report on these reviews, and the assessments, reviews, and reports would be posted publicly on agency websites.
The bill would affect all federal agencies as defined under existing law, as well as members of the public and agency employees whose personal information is collected by those agencies. It is intended to increase transparency and accountability in how the government manages personal data, particularly amid expanded data collection following the September 11, 2001 attacks.
The bill was introduced in the Senate on June 17, 2002, by Senator Robert Torricelli and referred to the Committee on Governmental Affairs. It did not receive a vote and did not advance further in the 107th Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Federal Privacy and Data Protection Policy Act of 2002 - Requires each Federal agency to designate an employee as privacy manager to: (1) be responsible for data protection and management within that agency; (2) ensure compliance with the privacy and data security policies; and (3) be responsible for training and educating employees about such policies and developing practices and procedures to ensure compliance.Requires each agency to conduct and record with its Inspector General a benchmark assessment of privacy and data protection policies and practices for the collection, use, sharing, disclosure, transfer, and security of personally identifiable information relating to employees and the public.Requires each agency to perform an independent, third-party review of privacy and data protection practices every three years to: (1) determine the effectiveness of policies, practices, and procedures; and (2) ensure compliance with its stated privacy policy.Requires each Inspector General to: (1) contract with an independent, third party to evaluate privacy and data protection policies and recommend strategies and steps to improve privacy and data protection management; and (2) report to the head of the agency on such review.Requires agencies to make such assessments, reviews, and Inspector General reports available to the public on their websites.
Timeline
17 Jun 2002
Read twice and referred to the Committee on Governmental Affairs.
Common questions
- What does S. 2629 do?
- S. 2629, the Federal Privacy and Data Protection Policy Act of 2002, would establish a framework requiring federal agencies to review and document how they handle personal data. Each agency would have to designate a privacy manager responsible for compliance, training, and developing data-protection practices. Within one year of enactment, agencies would need to conduct a detailed "benchmark assessment" documenting what personal information they collect, why, what notice and consent practices are used, and how the data is secured. At least every three years, agencies would be required to have an independent third-party reviewer—selected to avoid conflicts of interest—evaluate compliance with the benchmark assessment, including a technical scan of agency websites for privacy vulnerabilities. Inspectors General would receive and report on these reviews, and the assessments, reviews, and reports would be posted publicly on agency websites. The bill would affect all federal agencies as defined under existing law, as well as members of the public and agency employees whose personal information is collected by those agencies. It is intended to increase transparency and accountability in how the government manages personal data, particularly amid expanded data collection following the September 11, 2001 attacks. The bill was introduced in the Senate on June 17, 2002, by Senator Robert Torricelli and referred to the Committee on Governmental Affairs. It did not receive a vote and did not advance further in the 107th Congress.
- Has S. 2629 become law?
- The source does not supply a confirmed lifecycle stage for S. 2629. Check the latest action and official source below.
- Who sponsored S. 2629?
- S. 2629 was sponsored by Sen. Torricelli, Robert G. [D-NJ] (D-NJ), with 0 cosponsors.
- What's the latest action on S. 2629?
- Read twice and referred to the Committee on Governmental Affairs. (17 Jun 2002).
Related bills in Government Operations and Politics
Bring Our Heroes Home Act
Skills-Based Federal Contracting Act of 2025
National American History and Founders Month Act
Italian Heroes and Heritage Act
More bills from Sen. Torricelli, Robert G. [D-NJ]
Abel and Mary Nicholson House National Historic Site Study Act of 2001
A bill to end the use of conventional steel-jawed leghold traps on animals in the United States.
Protecting American Small Business Trade Act of 1998
A bill to enact the Passaic River Basin Flood Management Program.
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.