Kirsten Gillibrand (D-NY)

Data Protection Act of 2026

S. 5594 · Senate bill Law

A Democratic bill with no cosponsors

Last activity — Read twice and referred to the Committee on Commerce, Science, and Transportation.

In committee

Introduced and handed to a committee in the chamber it started in.

The committee holds it, and most bills are never heard from again. A hearing or a committee vote would be news; silence is the usual outcome, and it kills the bill without anyone voting against it.

Its path through Congress

  1. Introduced
  2. In Committee

What this bill would do

This bill establishes the Data Protection Agency as an independent entity in the executive branch to protect individual privacy and oversee personal data practices. The Agency is tasked with enforcing federal privacy laws, limiting the collection and sharing of personal data, and preventing privacy harms and discrimination. It grants the Agency broad administrative, investigative, and rulemaking powers, including the authority to issue subpoenas and civil investigative demands. Large data aggregators are subject to regular supervision, risk assessments, and impact evaluations regarding their data handling practices. Additionally, the legislation creates specific funding mechanisms, including a Civil Penalty Fund to compensate victims of data privacy violations.

Yes· 3 of 31

  • Scored +10

    Does this protect people from being watched or searched?

    The act establishes comprehensive individual rights to access, correct, limit processing of, and request deletion of personal data.

  • Scored +10

    Does this give people more control over their personal data?

    The bill creates a dedicated Data Protection Agency with broad rulemaking and enforcement powers to guarantee individuals rights over their personal data and prevent privacy harms.

  • Scored +9

    Does this put more rules on large technology companies?

    The legislation establishes rigorous oversight, risk assessments, and supervision mechanisms for large data aggregators and companies handling substantial personal data.

The opposite

  • Scored -4

    Would business owners be better off under this?

    Smaller businesses and data aggregators face substantial administrative burdens, compliance costs, and reporting rules under the new regulatory framework.