Privacy Act Modernization Act of 2025
The source supplies the latest action, but no lifecycle stage.
Latest action (31 Mar 2025): Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
What this bill does
The Privacy Act Modernization Act of 2025, introduced in the Senate, aims to enhance privacy protections for personal data held by government agencies. It would broaden the scope of individuals covered by these protections beyond U.S. citizens and permanent residents to include all natural persons in the United States, as well as certain associations and corporations. The bill also imposes stricter limits on how agencies can use and share this data, requiring that use be for a legally authorized purpose and that disclosures include only the minimum necessary information.
Penalties for violating these privacy rules would be increased. For example, an agency employee intentionally disclosing identifiable information for commercial gain or malicious harm could face felony charges, a fine of up to $250,000, and a prison sentence of up to 10 years. Additionally, courts would be empowered to offer preliminary relief, and the U.S. government could be liable for additional damages, including punitive damages, if it is found to have acted intentionally or willfully in violating the act.
This bill was introduced on March 31, 2025, and is currently in the Senate, referred to the Committee on Homeland Security and Governmental Affairs. Most provisions would take effect two years after enactment, though certain actions by specific government entities and personnel would be subject to the new rules immediately upon enactment.
Plain-English summary generated by Bill100 AI from the official record. Always verify against the source below.
Official summary
Privacy Act Modernization Act of 2025
This bill strengthens privacy protections that apply to personal data held or maintained by government agencies. These protections restrict the storage, access, use, and disclosure of personal data, such as an individual’s name or Social Security number.
Currently, these protections apply to U.S. citizens and permanent residents. The bill expands this to include natural persons in the United States and certain associations and corporations.
The bill places additional limits on the use and disclosure of such data, including by limiting the use of records to a legally authorized purpose and requiring disclosures to be minimal and consistent with a previously stated use.
The bill also increases existing penalties and creates additional criminal penalties for violations. For example, under the bill, an agency employee who willfully discloses individually identifiable information with the intent to sell, transfer, use, or disclose such information for commercial advantage, personal gain, or malicious harm shall be guilty of a felony and fined not more than $250,000, imprisoned for not more than 10 years, or both.
Courts may provide preliminary relief and, if the U.S. is found to have acted intentionally or willfully, the U.S. is liable for additional types of damages (e.g., punitive).
The bill generally takes effect two years after the date of enactment. However, the bill takes effect immediately upon enactment with respect to certain actions taken by the Department of Government Efficiency (DOGE), certain special or temporary employees, and other related individuals and organizations.
Timeline
31 Mar 2025
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Common questions
- What does S. 1208 do?
- The Privacy Act Modernization Act of 2025, introduced in the Senate, aims to enhance privacy protections for personal data held by government agencies. It would broaden the scope of individuals covered by these protections beyond U.S. citizens and permanent residents to include all natural persons in the United States, as well as certain associations and corporations. The bill also imposes stricter limits on how agencies can use and share this data, requiring that use be for a legally authorized purpose and that disclosures include only the minimum necessary information. Penalties for violating these privacy rules would be increased. For example, an agency employee intentionally disclosing identifiable information for commercial gain or malicious harm could face felony charges, a fine of up to $250,000, and a prison sentence of up to 10 years. Additionally, courts would be empowered to offer preliminary relief, and the U.S. government could be liable for additional damages, including punitive damages, if it is found to have acted intentionally or willfully in violating the act. This bill was introduced on March 31, 2025, and is currently in the Senate, referred to the Committee on Homeland Security and Governmental Affairs. Most provisions would take effect two years after enactment, though certain actions by specific government entities and personnel would be subject to the new rules immediately upon enactment.
- Has S. 1208 become law?
- The source does not supply a confirmed lifecycle stage for S. 1208. Check the latest action and official source below.
- Who sponsored S. 1208?
- S. 1208 was sponsored by Sen. Wyden, Ron [D-OR] (D-OR), with 3 cosponsors.
- What's the latest action on S. 1208?
- Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (31 Mar 2025).
Related bills in Finance and Financial Sector
Bankruptcy Threshold Adjustment Act
Common Cents Act
To amend title 11, United States Code, to clarify the rules for the exceptions to the discharge of the debt of an individual debtor, and for other purposes.
Fossil Free Finance Act of 2026
More bills from Sen. Wyden, Ron [D-OR]
River Democracy Act
Saver's Match Enhancement Act of 2026
Protection of Social Security Benefits Restoration Act
A resolution supporting the designation of the week of August 24 through August 28, 2026, as the fourth annual "National Community Health Worker Awareness Week".
Bill100 mirrors the public U.S. legislative record from Congress.gov and GovTrack and adds plain-English AI summaries. It is an information tool, not legal, compliance or lobbying advice, and it is not affiliated with the U.S. Congress or any government agency. AI summaries can simplify or omit detail — every bill links to the official source; verify there before you rely on it.