S4211-119

In Committee

Consumer Data Privacy and Security Act of 2026

119th Congress Introduced Mar 25, 2026

Analysis under review: This bill has generated analysis that may be too generic or incomplete. Clause-level evidence remains available below.

Summary

What This Bill Does

This bill, Consumer Data Privacy and Security Act of 2026, changes federal law or congressional policy affecting technology companies and users of digital services. The main policy domain is Technology, Finance, Criminal Justice.

Who Benefits and How

technology companies and users of digital services may benefit from new authority, funding, eligibility, regulatory clarity, or reduced risk created by the bill.

Who Bears the Burden and How

federal implementing agencies, technology companies and users of digital services may take on implementation duties, reporting obligations, compliance costs, or oversight responsibilities.

Key Provisions

  • Section S1: 1. Short title; table of contents This Act may be cited as the Consumer Data Privacy and Security Act of 2026. The table of contents of this Act is as follows:
  • Section ida36d4215c4c7482797c049d449e342d7: 2. Definitions In this Act: The term biometric information means information, resulting from specific technical processing related to the physical, biological,...
  • Section ida8f663638e07477a8a47c52bb9e5f876: 3. Collection and processing of personal data Except as provided in paragraphs (2) and (3), a covered entity shall not collect or process personal data of an...
  • Section id9941cf99eb2748d78b298fabc4c56e64: 4. Right to know A covered entity shall make publicly available, in a clear and prominent location and in easy-to-understand language, a privacy policy that...
  • Section idb902d23b74574ef196c41d662f38eed5: 5. Individual control Each covered entity shall— provide each individual whose personal data is collected or processed by the covered entity with a reasonably...

Evidence Chain:

This summary is generated from the full bill text using AI analysis. Expand "Detailed Analysis" below for identified beneficiaries/burden bearers with clause-level evidence links.

At a Glance

What This Bill Does

This bill, Consumer Data Privacy and Security Act of 2026, changes federal law or congressional policy affecting technology companies and users of digital services.

Key Policy Areas

Technology, Finance, Criminal Justice

Primary Purpose

This bill, Consumer Data Privacy and Security Act of 2026, changes federal law or congressional policy affecting technology companies and users of digital services.

Policy Domains

Technology Finance Criminal Justice

Whole bill

Identified Gains
  • technology companies and users of digital services
Model: codex-gpt-5 | Version: bill_summary_v2 | Source: is
technology companies and users of digital services: ,
Identified Costs
  • federal implementing agencies
  • technology companies and users of digital services
Model: codex-gpt-5 | Version: bill_summary_v2 | Source: is
federal implementing agencies: ,
technology companies and users of digital services: ,

Legislative Progress

In Committee
Introduced Committee Passed
Mar 25, 2026

Read twice and referred to the Committee on Commerce, Science, …

Mar 25, 2026

Introduced in Senate

Mar 25, 2026

Mr. Moran introduced the following bill; which was read twice …

Impact analysis is available but no clear stakeholder effects identified. View clause-level analysis →

Bill Structure & Actor Mappings

Who is "The Secretary" in each section?

Domains
Technology Finance Criminal Justice
Actor Mappings
"the_commission"
→ The commission identified in the operative section
"secretary_of_commerce"
→ Secretary of Commerce

Key Definitions

Terms defined in this bill

2 terms
"applicable entity" §id80a8d01eaefc477595762fe8a42d1f6a

a covered entity or service provider that, on an annual basis, conducts collection and processing of— the personal data of more than 20,000,000 individuals

"third party personal data" §ida36d4215c4c7482797c049d449e342d7

personal data that a covered entity discloses to another unaffiliated covered entity and such disclosure— is not directed by the individual to whom the personal data relates

We use a combination of our own taxonomy and classification in addition to large language models to assess meaning and potential beneficiaries. High confidence means strong textual evidence. Always verify with the original bill text.

Learn more about our methodology