Consumer Data Privacy and Security Act of 2021
The source supplies the latest action, but no lifecycle stage.
Latest action (29 Apr 2021): Read twice and referred to the Committee on Commerce, Science, and Transportation.
What this bill does
The Consumer Data Privacy and Security Act of 2021 (S. 1494), introduced by Sen. Jerry Moran, would establish a federal framework governing how companies and other "covered entities" collect, use, and share personal data about individuals. It would generally require entities to obtain an individual's consent—implicit for most data, explicit affirmative consent for sensitive categories like health, biometric, financial, or precise location data—before collecting or processing personal information, unless the activity falls under specified "permissible purposes" such as completing a requested transaction, complying with law, preventing fraud, or conducting certain research. The bill also sets rules for service providers acting on behalf of companies, limits on retaining sensitive data, notice requirements, and consumer rights to know what data is collected, consistent with sections on individual control, security, accountability, and enforcement.
The bill would primarily affect businesses subject to FTC jurisdiction, common carriers, and nonprofit organizations that collect or process personal data, as well as their service providers; smaller businesses meeting certain size and data-volume thresholds would be treated differently under the "small business" definition. Consumers/individuals residing in the U.S. would gain new rights regarding notice, consent, and control over their personal and sensitive data, including in scenarios such as a company's bankruptcy proceeding.
The bill was introduced on April 29, 2021, and referred to the Senate Committee on Commerce, Science, and Transportation. It did not receive a vote and saw no further action before the end of the 117th Congress, meaning it did not become law.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Consumer Data Privacy and Security Act of 2021
This bill establishes standards for the collection of personal data, including prohibiting businesses from collecting such data without consent from the individual except as reasonably necessary for certain permissible purposes. Businesses must publish their privacy policies; implement data security programs to safeguard such data; and provide individuals with reasonable access to, and control of, their collected data.
Timeline
29 Apr 2021
Read twice and referred to the Committee on Commerce, Science, and Transportation.
Common questions
- What does S. 1494 do?
- The Consumer Data Privacy and Security Act of 2021 (S. 1494), introduced by Sen. Jerry Moran, would establish a federal framework governing how companies and other "covered entities" collect, use, and share personal data about individuals. It would generally require entities to obtain an individual's consent—implicit for most data, explicit affirmative consent for sensitive categories like health, biometric, financial, or precise location data—before collecting or processing personal information, unless the activity falls under specified "permissible purposes" such as completing a requested transaction, complying with law, preventing fraud, or conducting certain research. The bill also sets rules for service providers acting on behalf of companies, limits on retaining sensitive data, notice requirements, and consumer rights to know what data is collected, consistent with sections on individual control, security, accountability, and enforcement. The bill would primarily affect businesses subject to FTC jurisdiction, common carriers, and nonprofit organizations that collect or process personal data, as well as their service providers; smaller businesses meeting certain size and data-volume thresholds would be treated differently under the "small business" definition. Consumers/individuals residing in the U.S. would gain new rights regarding notice, consent, and control over their personal and sensitive data, including in scenarios such as a company's bankruptcy proceeding. The bill was introduced on April 29, 2021, and referred to the Senate Committee on Commerce, Science, and Transportation. It did not receive a vote and saw no further action before the end of the 117th Congress, meaning it did not become law.
- Has S. 1494 become law?
- The source does not supply a confirmed lifecycle stage for S. 1494. Check the latest action and official source below.
- Who sponsored S. 1494?
- S. 1494 was sponsored by Sen. Moran, Jerry [R-KS] (R-KS), with 0 cosponsors.
- What's the latest action on S. 1494?
- Read twice and referred to the Committee on Commerce, Science, and Transportation. (29 Apr 2021).
Related bills in Commerce
Critical Infrastructure Manufacturing Feasibility Act
Cybersecurity for Small Businesses Act of 2026
Small Business Payment for Performance Act of 2026
Combating Foreign Threats to Main Street Act of 2026
More bills from Sen. Moran, Jerry [R-KS]
A resolution relating to the death of the Honorable Nancy Kassebaum, former United States Senator for the State of Kansas.
Fair Audits and Inspections for Regulators' Exams Act
A resolution honoring and commending the 100th anniversary of the Golf Course Superintendents Association of America.
SUSTAIN 340B Act
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.