Data Protection Act of 2020
The source supplies the latest action, but no lifecycle stage.
Latest action (13 Feb 2020): Read twice and referred to the Committee on Commerce, Science, and Transportation.
What this bill does
The Data Protection Act of 2020, introduced by Sen. Kirsten Gillibrand in February 2020, would create a new independent federal agency—the Data Protection Agency—to regulate how businesses and other organizations collect, use, store, and share personal data such as identifying information, financial and health records, biometric data, and online activity. The agency would be led by a Director appointed by the President and confirmed by the Senate for a five-year term, supported by a Deputy Director and staff, with headquarters in Washington, D.C. and authority to open regional offices.
The bill would give this new agency broad powers: writing regulations, issuing guidance, investigating complaints, and enforcing existing federal privacy statutes (such as the Children's Online Privacy Protection Act, Fair Credit Reporting Act, and Telephone Consumer Protection Act, among others). It would specifically require review and oversight of "high-risk data practices," such as automated profiling, biometric or genetic data processing, and geolocation tracking. Larger companies—those with over $25 million in annual revenue, that handle personal data of 50,000+ people, or that derive half their revenue from selling personal data—would face additional reporting and examination requirements. The agency could also prohibit unfair or deceptive data practices. The measure primarily affects businesses and organizations that handle personal data, as well as individuals whose data is collected, by creating new compliance obligations and consumer protections.
The bill was introduced on February 13, 2020, in the 116th Congress and referred to the Senate Committee on Commerce, Science, and Transportation. According to congressional records, it did not receive a committee vote or further action, and it expired at the end of that Congress without becoming law.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Data Protection Act of 2020
This bill establishes in the executive branch an independent Data Protection Agency (DPA) to regulate the processing of personal data.
The DPA shall seek to protect individuals' privacy and limit the collection, disclosure, processing, and misuse of individuals' personal data by a covered entity (i.e., a person that collects, processes, or otherwise obtains personal data other than an individual processing personal data in the course of personal or household activity).
The DPA must examine and oversee high-risk data practices, which include
• a systematic or extensive evaluation of personal data that is based on automated processing;
• any processing of biometric data for the purpose of uniquely identifying an individual;
• processing which involves tracking an individual's geolocation; or
• the use of personal data of children or other vulnerable individuals for marketing purposes, profiling, or automated processing.
Timeline
13 Feb 2020
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Common questions
- What does S. 3300 do?
- The Data Protection Act of 2020, introduced by Sen. Kirsten Gillibrand in February 2020, would create a new independent federal agency—the Data Protection Agency—to regulate how businesses and other organizations collect, use, store, and share personal data such as identifying information, financial and health records, biometric data, and online activity. The agency would be led by a Director appointed by the President and confirmed by the Senate for a five-year term, supported by a Deputy Director and staff, with headquarters in Washington, D.C. and authority to open regional offices. The bill would give this new agency broad powers: writing regulations, issuing guidance, investigating complaints, and enforcing existing federal privacy statutes (such as the Children's Online Privacy Protection Act, Fair Credit Reporting Act, and Telephone Consumer Protection Act, among others). It would specifically require review and oversight of "high-risk data practices," such as automated profiling, biometric or genetic data processing, and geolocation tracking. Larger companies—those with over $25 million in annual revenue, that handle personal data of 50,000+ people, or that derive half their revenue from selling personal data—would face additional reporting and examination requirements. The agency could also prohibit unfair or deceptive data practices. The measure primarily affects businesses and organizations that handle personal data, as well as individuals whose data is collected, by creating new compliance obligations and consumer protections. The bill was introduced on February 13, 2020, in the 116th Congress and referred to the Senate Committee on Commerce, Science, and Transportation. According to congressional records, it did not receive a committee vote or further action, and it expired at the end of that Congress without becoming law.
- Has S. 3300 become law?
- The source does not supply a confirmed lifecycle stage for S. 3300. Check the latest action and official source below.
- Who sponsored S. 3300?
- S. 3300 was sponsored by Sen. Gillibrand, Kirsten E. [D-NY] (D-NY), with 0 cosponsors.
- What's the latest action on S. 3300?
- Read twice and referred to the Committee on Commerce, Science, and Transportation. (13 Feb 2020).
Related bills in Government Operations and Politics
Bring Our Heroes Home Act
Skills-Based Federal Contracting Act of 2025
Italian Heroes and Heritage Act
National American History and Founders Month Act
More bills from Sen. Gillibrand, Kirsten E. [D-NY]
Seneca Nation Law Enforcement Efficiency Act
BAD DEAL Act
Clean Elections Act
PROKID Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.