Senator Gillibrand Reintroduced Data Protection Act

The proposed legislation would create an independent federal agency to regulate consumer data privacy practices.

Updated on Sept. 30, 2026 in Cybersecurity

Isometric editorial illustration of a stone plinth in a vast hall with abstract geometric data light patterns above. — Senator Kirsten Gillibrand reintroduced the Data Protection Act, a bill proposing an independent federal agency to regulate consumer privacy and personal data collection. AI Illustration. Upload story photo >

Live Poll

Should the U.S. establish an independent federal agency to regulate personal data privacy?

Senator Kirsten Gillibrand has reintroduced the Data Protection Act to establish an independent federal agency tasked with regulating data collection and usage. The bill seeks to limit how companies and government entities handle personal information while granting the new body power to enforce privacy standards.

Why it matters

The United States currently lacks a dedicated federal agency for data oversight, leaving personal information vulnerable to evolving threats. This legislation aims to address significant gaps in existing privacy protections and civil rights enforcement.

The proposed agency would oversee high-risk data practices, algorithm fairness, and maintain a public list of data aggregators. It would also enforce privacy standards through civil penalties and injunctive relief for violations.

The players

Kirsten Gillibrand

Kirsten Gillibrand is a U.S. Senator representing New York who frequently focuses on privacy and national security policy.

The details

The bill mandates strict limits on the collection, use, and sharing of personal data across both private and public sectors. It provides the proposed agency with the authority to establish guidelines that specifically monitor algorithm fairness and risky data handling procedures.

In 2025, more than 3,300 data breaches occurred in the United States.
Senator Kirsten Gillibrand reintroduced the Data Protection Act on September 30, 2026.

The Tech Race

This legislation marks a significant attempt to modernize federal oversight as the United States falls behind other nations that have long-established data protection authorities. It positions the proposal as a countermeasure to the current landscape where consumer data is often handled with minimal centralized regulation.

If enacted, the bill would likely change how everyday consumers manage their digital footprints by forcing companies to adopt stricter data handling protocols. This could reduce the frequency of personal information leaks while granting individuals greater control over how their data is aggregated and shared.

The takeaway

The proposed Data Protection Act represents a shift toward more robust federal oversight in response to a surge in high-profile data breaches. Consumers should monitor how these legislative updates might lead to new mandatory privacy disclosures or changes in terms-of-service agreements.