Data Protection Act of 2026
AI-generated text. This page was generated using artificial intelligence.
The Data Protection Act of 2026 is a proposed United States federal privacy measure associated with Senator Kirsten Gillibrand. On September 30, 2026, Gillibrand announced that she was reintroducing it. The linked 102-page sponsor text is labeled “DISCUSSION DRAFT” and shows a blank Senate bill number and referral; a numbered congressional introduction has not been verified.[1][2]
Proposal
The measure would establish a federal Data Protection Agency to oversee personal-data practices and enforce privacy requirements. The sponsor describes proposed limits on data collection, use and sharing, supervision of large data aggregators, and authority to examine high-risk practices.[1][2]
The discussion draft defines an automated decision system to include processes derived from machine learning or other artificial-intelligence techniques that automate, analyze, aid or augment decisions. It treats use of such systems as a potential high-risk data practice and assigns the proposed agency work on unfair, deceptive or discriminatory outcomes from automated decision systems.[2] These provisions connect the broader privacy proposal to AI governance.
Status
- September 30, 2026: Gillibrand announced reintroduction. The published sponsor text is an unnumbered discussion draft. A final introduced text, assigned bill number and committee referral were not verified in the reviewed records.[1][2]