DATA Privacy Act
Latest action (12 Nov 2020): Introduced
What this bill does
The DATA Privacy Act would establish federal requirements for how businesses and organizations handle personal information collected through digital means. It would require "covered entities"—defined generally as those handling data on 3,000 or more individuals or devices in a year—to post clear privacy notices explaining what data they collect and why, and to implement data-handling practices that are reasonable, non-discriminatory, and not deceptive. The bill directs the Federal Trade Commission to write implementing regulations within a year covering opt-out and opt-in consent requirements (the latter for sensitive data such as health or precise location information), data minimization, and information security standards. It also gives individuals rights to access, correct, delete, and transfer their data, and requires larger companies (over $25 million in annual revenue) to designate a privacy protection officer.
The bill primarily affects businesses and other entities that collect, process, store, or share personal data online, exempting smaller entities and certain government or employment-related data. Individuals whose data is collected would gain new notice, consent, and control rights. Enforcement would rest with the FTC, which could hire additional staff, and with state attorneys general, who could sue on behalf of residents and seek civil penalties.
The bill was introduced in the House on November 12, 2020, by Rep. Filemon Vela and referred to the Committees on Energy and Commerce and on Science, Space, and Technology. It did not receive a vote and did not advance before the end of the 116th Congress, meaning it did not become law.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
This bill was introduced on November 12, 2020, in a previous session of Congress, but it did not receive a vote.
Common questions
- What does H.R. 8749 do?
- The DATA Privacy Act would establish federal requirements for how businesses and organizations handle personal information collected through digital means. It would require "covered entities"—defined generally as those handling data on 3,000 or more individuals or devices in a year—to post clear privacy notices explaining what data they collect and why, and to implement data-handling practices that are reasonable, non-discriminatory, and not deceptive. The bill directs the Federal Trade Commission to write implementing regulations within a year covering opt-out and opt-in consent requirements (the latter for sensitive data such as health or precise location information), data minimization, and information security standards. It also gives individuals rights to access, correct, delete, and transfer their data, and requires larger companies (over $25 million in annual revenue) to designate a privacy protection officer. The bill primarily affects businesses and other entities that collect, process, store, or share personal data online, exempting smaller entities and certain government or employment-related data. Individuals whose data is collected would gain new notice, consent, and control rights. Enforcement would rest with the FTC, which could hire additional staff, and with state attorneys general, who could sue on behalf of residents and seek civil penalties. The bill was introduced in the House on November 12, 2020, by Rep. Filemon Vela and referred to the Committees on Energy and Commerce and on Science, Space, and Technology. It did not receive a vote and did not advance before the end of the 116th Congress, meaning it did not become law.
- Has H.R. 8749 become law?
- Not yet. As of 12 Nov 2020, H.R. 8749 is introduced.
- Who sponsored H.R. 8749?
- H.R. 8749 was sponsored by Rep. Filemon Vela [D-TX34, 2013-2022] (Democrat-TX), with 0 cosponsors.
- What's the latest action on H.R. 8749?
- Introduced (12 Nov 2020).
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.