There is 1 version of this bill. View text

Click the check-box to add or remove the section, click the text link to scroll to that section.
Titles Actions Overview All Actions Cosponsors Committees Related Bills Subjects Latest Summary All Summaries

Titles (2)

Short Titles

Short Titles - Senate

Short Title(s) as Introduced

Data Protection Act of 2020

Official Titles

Official Titles - Senate

Official Titles as Introduced

A bill to establish a Federal data protection agency, and for other purposes.


Actions Overview (1)

Date Actions Overview
02/13/2020Introduced in Senate

All Actions (1)

Date All Actions
02/13/2020Read twice and referred to the Committee on Commerce, Science, and Transportation.
Action By: Senate

Cosponsors (0)

No cosponsors.


Committees (1)

Committees, subcommittees and links to reports associated with this bill are listed here, as well as the nature and date of committee activity and Congressional report number.

Committee / Subcommittee Date Activity Related Documents
Senate Commerce, Science, and Transportation02/13/2020 Referred to

No related bill information was received for S.3300.


Latest Summary (1)

There is one summary for S.3300. View summaries

Shown Here:
Introduced in Senate (02/13/2020)

Data Protection Act of 2020

This bill establishes in the executive branch an independent Data Protection Agency (DPA) to regulate the processing of personal data.

The DPA shall seek to protect individuals' privacy and limit the collection, disclosure, processing, and misuse of individuals' personal data by a covered entity (i.e., a person that collects, processes, or otherwise obtains personal data other than an individual processing personal data in the course of personal or household activity).

The DPA must examine and oversee high-risk data practices, which include

  • a systematic or extensive evaluation of personal data that is based on automated processing;
  • any processing of biometric data for the purpose of uniquely identifying an individual;
  • processing which involves tracking an individual's geolocation; or
  • the use of personal data of children or other vulnerable individuals for marketing purposes, profiling, or automated processing.

The DPA is authorized to (1) enforce federal privacy law, and (2) take specified actions to prevent a covered entity from committing or engaging in an unfair or deceptive act or practice.

The DPA shall establish procedures to provide consumers with a timely response to complaints against, or inquiries concerning, a covered entity.

The DPA may engage in joint investigations and requests for information and may issue subpoenas. The bill provides for civil monetary penalties for violations of privacy law and the use of such penalties, including as monetary relief for individuals affected by violations.