Stronger Privacy Protections: Government Data Handling and Individual Rights.
This Act broadens the definition of personal data and the systems used to store it, now covering information linked to devices. It imposes stricter requirements on agencies for collecting and disclosing data, mandating data minimization efforts. Individuals gain rights to sue the government for privacy violations, with guaranteed minimum damages and the ability to claim non-monetary losses.
Key points
Expanded Coverage: Privacy protections now cover natural persons who are U.S. persons or physically present in the U.S., replacing the limitation to citizens and permanent residents.
Device Data Included: The definition of personally identifiable information (PII) now explicitly includes data linked to an individual's device.
Stricter Agency Rules: Agencies must use the minimum necessary amount of information when disclosing records and must justify the legal necessity of data collection.
Penalties and Damages: Introduces felony charges (up to 10 years) for malicious data misuse and sets the minimum compensation for intentional privacy violations at $1,000, including non-monetary damages.
Introduced
Additional Information
Print number: 119_S_1208
Sponsor: Sen. Wyden, Ron [D-OR]
Process start date: 2025-03-31