Data Privacy and Civil Rights Protection Act

This bill would establish nationwide standards limiting the collection, use, sale, and retention of Americans’ personal data by businesses and federal agencies. Covered entities must obtain clear consent for sensitive data, collect only information reasonably necessary for a stated purpose, provide access, correction, deletion, and opt-out rights, and prohibit the use of personal data to discriminate against individuals or target lawful civil-rights, labor, faith, or community organizations. The Federal Trade Commission would enforce the requirements, with additional oversight by the Department of Justice for federal agencies and enhanced safeguards for children, survivors of abuse, immigrants, and other vulnerable communities.