Federal Privacy and Data Protection Policy Act of 2002
Latest action (17 Jun 2002): Introduced
What this bill does
S. 2629, the Federal Privacy and Data Protection Policy Act of 2002, would establish a framework requiring federal agencies to review and document how they handle personal data. Each agency would have to designate a privacy manager responsible for compliance, training, and developing data-protection practices. Within one year of enactment, agencies would need to conduct a detailed "benchmark assessment" documenting what personal information they collect, why, what notice and consent practices are used, and how the data is secured. At least every three years, agencies would be required to have an independent third-party reviewer—selected to avoid conflicts of interest—evaluate compliance with the benchmark assessment, including a technical scan of agency websites for privacy vulnerabilities. Inspectors General would receive and report on these reviews, and the assessments, reviews, and reports would be posted publicly on agency websites.
The bill would affect all federal agencies as defined under existing law, as well as members of the public and agency employees whose personal information is collected by those agencies. It is intended to increase transparency and accountability in how the government manages personal data, particularly amid expanded data collection following the September 11, 2001 attacks.
The bill was introduced in the Senate on June 17, 2002, by Senator Robert Torricelli and referred to the Committee on Governmental Affairs. It did not receive a vote and did not advance further in the 107th Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
This bill was introduced on June 17, 2002, in a previous session of Congress, but it did not receive a vote.
Common questions
- What does S. 2629 do?
- S. 2629, the Federal Privacy and Data Protection Policy Act of 2002, would establish a framework requiring federal agencies to review and document how they handle personal data. Each agency would have to designate a privacy manager responsible for compliance, training, and developing data-protection practices. Within one year of enactment, agencies would need to conduct a detailed "benchmark assessment" documenting what personal information they collect, why, what notice and consent practices are used, and how the data is secured. At least every three years, agencies would be required to have an independent third-party reviewer—selected to avoid conflicts of interest—evaluate compliance with the benchmark assessment, including a technical scan of agency websites for privacy vulnerabilities. Inspectors General would receive and report on these reviews, and the assessments, reviews, and reports would be posted publicly on agency websites. The bill would affect all federal agencies as defined under existing law, as well as members of the public and agency employees whose personal information is collected by those agencies. It is intended to increase transparency and accountability in how the government manages personal data, particularly amid expanded data collection following the September 11, 2001 attacks. The bill was introduced in the Senate on June 17, 2002, by Senator Robert Torricelli and referred to the Committee on Governmental Affairs. It did not receive a vote and did not advance further in the 107th Congress.
- Has S. 2629 become law?
- Not yet. As of 17 Jun 2002, S. 2629 is introduced.
- Who sponsored S. 2629?
- S. 2629 was sponsored by Sen. Robert Torricelli [D-NJ, 1997-2002] (Democrat-NJ), with 0 cosponsors.
- What's the latest action on S. 2629?
- Introduced (17 Jun 2002).
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.