DATA Privacy Act
The source supplies the latest action, but no lifecycle stage.
Latest action (2 Nov 2021): Referred to the Subcommittee on Consumer Protection and Commerce.
What this bill does
H.R. 5807, also known as the DATA Privacy Act, would establish national standards for how companies collect, process, store, and share personal data collected online. It would require companies, referred to as "covered entities," to provide clear privacy notices, obtain consent for certain data uses, and limit data collection to what is necessary. The bill also mandates data minimization, allows individuals to access, correct, and delete their data, and sets information security standards.
The bill would affect entities that collect, process, store, or disclose personal data gathered online, with an exemption for those handling data for fewer than 50,000 individuals and devices annually. It would also require companies with over $50 million in annual revenue to appoint a privacy protection officer. Additionally, the bill supports research into technologies that enhance data privacy.
This bill was introduced in the House of Representatives in November 2021 during the 117th Congress. It was referred to committees but did not advance for a vote in that session. As a result, it is no longer actively being considered in the current Congress.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Digital Accountability and Transparency to Advance Privacy Act or the DATA Privacy Act
This bill establishes information security requirements for businesses that collect, process, store, or disclose information relating to at least 50,000 people in a 12-month period. The bill applies to information that may be linked to a specific individual or a device associated with a specific individual. It does not cover data related to employment or publicly available government records. Specifically, covered businesses must • provide consumers with accessible notice of the business's privacy practices with respect to such information; and
• if meeting a certain revenue threshold, appoint a privacy officer to oversee compliance with the business's privacy practices.
The bill further requires the Federal Trade Commission to promulgate rules requiring covered businesses to
• limit the purpose and amount of consumer data collection to reasonable business purposes, provide consumers with clear methods to opt-in and opt-out of such collection, and refrain from using such data for discriminatory purposes;
• provide consumers with a method to access, revise, transmit, and delete collected information; and
• establish information security standards based on the sensitivity and level of identifiability of the collected data, risk of exposure of such data, widely-accepted practices of securing such data, and cost and impact of implementing such practices.
Finally, the bill requires the National Science Foundation, and other agencies, to support research of technology that increases the privacy and confidentiality of collected data.
Timeline
2 Nov 2021
Referred to the Subcommittee on Consumer Protection and Commerce.
Common questions
- What does H.R. 5807 do?
- H.R. 5807, also known as the DATA Privacy Act, would establish national standards for how companies collect, process, store, and share personal data collected online. It would require companies, referred to as "covered entities," to provide clear privacy notices, obtain consent for certain data uses, and limit data collection to what is necessary. The bill also mandates data minimization, allows individuals to access, correct, and delete their data, and sets information security standards. The bill would affect entities that collect, process, store, or disclose personal data gathered online, with an exemption for those handling data for fewer than 50,000 individuals and devices annually. It would also require companies with over $50 million in annual revenue to appoint a privacy protection officer. Additionally, the bill supports research into technologies that enhance data privacy. This bill was introduced in the House of Representatives in November 2021 during the 117th Congress. It was referred to committees but did not advance for a vote in that session. As a result, it is no longer actively being considered in the current Congress.
- Has H.R. 5807 become law?
- The source does not supply a confirmed lifecycle stage for H.R. 5807. Check the latest action and official source below.
- Who sponsored H.R. 5807?
- H.R. 5807 was sponsored by Rep. Vela, Filemon [D-TX-34] (D-TX), with 0 cosponsors.
- What's the latest action on H.R. 5807?
- Referred to the Subcommittee on Consumer Protection and Commerce. (2 Nov 2021).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Cybersecurity for Small Businesses Act of 2026
Small Business Payment for Performance Act of 2026
Combating Foreign Threats to Main Street Act of 2026
More bills from Rep. Vela, Filemon [D-TX-34]
Digital Defense Leadership Act
DATA Privacy Act
DHS Body-Worn Camera Act of 2018
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.