Sponsors (4)
This bill modernizes and expands Privacy Act protections and agency transparency for people in the United States — especially noncitizens — but does so at the cost of higher compliance and litigation risk, potential operational slowdowns (and uneven immediate application to certain entities), and some statutory ambiguities that may spur legal disputes.
People physically in the United States — including noncitizen residents and other non‑U.S. persons located here — gain explicit coverage under the Privacy Act, increasing legal privacy protections for immigrants, patients, and other noncitizen residents.
Individuals and governments benefit from stronger limits on data collection and greater transparency because agencies must collect only what is appropriate/necessary and must publish purposes and legal authorities for records.
People harmed by unlawful data practices gain stronger enforcement tools because the bill expands civil remedies (including statutory damages) and increases criminal penalties for intentional misuse of records.
Taxpayers and agencies will face higher compliance costs because broader definitions, new notice/purpose requirements, and updated systems will require agency and vendor investment.
Individuals and governments face increased litigation and liability risk because expanded civil remedies, higher criminal penalties, and broader coverage raise the chance of lawsuits and government payouts — and ambiguous language could exacerbate that risk.
Ambiguities in new terminology (e.g., reliance on FISA 'United States person', 'reasonably linkable', 'processed') will likely generate litigation and enforcement uncertainty, complicating agency operations and rights enforcement.
Based on analysis of 5 sections of legislative text.
Introduced March 31, 2025 by Ronald Lee Wyden · Last progress March 31, 2025
Amends the federal Privacy Act to broaden who the law covers, redefine what counts as a record and as personally identifiable information (PII), tighten limits and transparency requirements on federal collection, use, disclosure, and matching of records, expand civil remedies and increase criminal penalties for misuse, and set when the changes take effect. Most changes take effect two years after enactment, but the bill makes them immediately effective for actions involving the U.S. DOGE Service and many related entities and personnel.