Us Congress 2023-2024 Regular Session

Us Congress House Bill HB7520 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
	1	+	IB
	2	+	Union Calendar No. 345
1	3		118THCONGRESS
2	4		2
3	5		DSESSION H. R. 7520
4		-	AN ACT
5		-	To prohibit data brokers from transferring personally identi-
6		-	fiable sensitive data of United States individuals to for-
7		-	eign adversaries, and for other purposes.
	6	+	[Report No. 118–418]
	7	+	To prohibit data brokers from transferring sensitive data of United States
	8	+	individuals to foreign adversaries, and for other purposes.
	9	+	IN THE HOUSE OF REPRESENTATIVES
	10	+	MARCH5, 2024
	11	+	Mr. P
	12	+	ALLONE(for himself and Mrs. RODGERSof Washington) introduced the
	13	+	following bill; which was referred to the Committee on Energy and Commerce
	14	+	M
	15	+	ARCH11, 2024
	16	+	Additional sponsors: Ms. S
	17	+	CHAKOWSKY, Mr. BILIRAKIS, Mr. ALLEN, and Mrs.
	18	+	T
	19	+	RAHAN
	20	+	M
	21	+	ARCH11, 2024
	22	+	Committed to the Committee of the Whole House on the State of the Union
	23	+	and ordered to be printed
	24	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00001 Fmt 6652 Sfmt 6652 E:\BILLS\H7520.RH H7520
	25	+	ssavage on LAPJG3WLY3PROD with BILLS 2
	26	+	•HR 7520 RH
	27	+	A BILL
	28	+	To prohibit data brokers from transferring sensitive data
	29	+	of United States individuals to foreign adversaries, and
	30	+	for other purposes.
	31	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00002 Fmt 6652 Sfmt 6652 E:\BILLS\H7520.RH H7520
	32	+	ssavage on LAPJG3WLY3PROD with BILLS 3
	33	+	•HR 7520 RH
8	34		Be it enacted by the Senate and House of Representa-1
9		-	tives of the United States of America in Congress assembled, 2 2
10		-	•HR 7520 EH
11		-	SECTION 1. SHORT TITLE. 1
12		-	This Act may be cited as the ‘‘Protecting Americans’ 2
13		-	Data from Foreign Adversaries Act of 2024’’. 3
14		-	SEC. 2. PROHIBITION ON TRANSFER OF PERSONALLY IDEN-4
15		-	TIFIABLE SENSITIVE DATA OF UNITED 5
16		-	STATES INDIVIDUALS TO FOREIGN ADVER-6
17		-	SARIES. 7
	35	+	tives of the United States of America in Congress assembled, 2
	36	+	SECTION 1. SHORT TITLE. 3
	37	+	This Act may be cited as the ‘‘Protecting Americans’ 4
	38	+	Data from Foreign Adversaries Act of 2024’’. 5
	39	+	SEC. 2. PROHIBITION ON TRANSFER OF SENSITIVE DATA 6
	40	+	OF UNITED STATES INDIVIDUALS TO FOR-7
	41	+	EIGN ADVERSARIES. 8
18	42		(a) P
19		-	ROHIBITION.—It shall be unlawful for a data 8
20		-	broker to sell, license, rent, trade, transfer, release, dis-9
21		-	close, provide access to, or otherwise make available per-10
22		-	sonally identifiable sensitive data of a United States indi-11
23		-	vidual to— 12
	43	+	ROHIBITION.—It shall be unlawful for a data 9
	44	+	broker to sell, license, rent, trade, transfer, release, dis-10
	45	+	close, provide access to, or otherwise make available sen-11
	46	+	sitive data of a United States individual to— 12
24	47		(1) any foreign adversary country; or 13
25	48		(2) any entity that is controlled by a foreign ad-14
26	49		versary. 15
27	50		(b) E
28	51		NFORCEMENT BY FEDERALTRADECOMMIS-16
29	52		SION.— 17
30	53		(1) U
31	54		NFAIR OR DECEPTIVE ACTS OR PRAC -18
32	55		TICES.—A violation of this section shall be treated 19
33	56		as a violation of a rule defining an unfair or a de-20
34	57		ceptive act or practice under section 18(a)(1)(B) of 21
35	58		the Federal Trade Commission Act (15 U.S.C. 22
36	59		57a(a)(1)(B)). 23
37	60		(2) P
38	61		OWERS OF COMMISSION .— 24
39		-	(A) I
40		-	N GENERAL.—The Commission shall 25
41		-	enforce this section in the same manner, by the 26 3
42		-	•HR 7520 EH
43		-	same means, and with the same jurisdiction, 1
44		-	powers, and duties as though all applicable 2
45		-	terms and provisions of the Federal Trade 3
46		-	Commission Act (15 U.S.C. 41 et seq.) were in-4
47		-	corporated into and made a part of this section. 5
	62	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00003 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	63	+	ssavage on LAPJG3WLY3PROD with BILLS 4
	64	+	•HR 7520 RH
	65	+	(A) IN GENERAL.—The Commission shall 1
	66	+	enforce this section in the same manner, by the 2
	67	+	same means, and with the same jurisdiction, 3
	68	+	powers, and duties as though all applicable 4
	69	+	terms and provisions of the Federal Trade 5
	70	+	Commission Act (15 U.S.C. 41 et seq.) were in-6
	71	+	corporated into and made a part of this section. 7
48	72		(B) P
49		-	RIVILEGES AND IMMUNITIES .—Any 6
50		-	person who violates this section shall be subject 7
51		-	to the penalties and entitled to the privileges 8
52		-	and immunities provided in the Federal Trade 9
53		-	Commission Act. 10
	73	+	RIVILEGES AND IMMUNITIES .—Any 8
	74	+	person who violates this section shall be subject 9
	75	+	to the penalties and entitled to the privileges 10
	76	+	and immunities provided in the Federal Trade 11
	77	+	Commission Act. 12
54	78		(3) A
55		-	UTHORITY PRESERVED .—Nothing in this 11
56		-	section may be construed to limit the authority of 12
57		-	the Commission under any other provision of law. 13
	79	+	UTHORITY PRESERVED .—Nothing in this 13
	80	+	section may be construed to limit the authority of 14
	81	+	the Commission under any other provision of law. 15
58	82		(c) D
59		-	EFINITIONS.—In this section: 14
	83	+	EFINITIONS.—In this section: 16
60	84		(1) C
61		-	OMMISSION.—The term ‘‘Commission’’ 15
62		-	means the Federal Trade Commission. 16
	85	+	OMMISSION.—The term ‘‘Commission’’ 17
	86	+	means the Federal Trade Commission. 18
63	87		(2) C
64		-	ONTROLLED BY A FOREIGN ADVERSARY .— 17
65		-	The term ‘‘controlled by a foreign adversary’’ means, 18
66		-	with respect to an individual or entity, that such in-19
67		-	dividual or entity is— 20
68		-	(A) a foreign person that is domiciled in, 21
69		-	is headquartered in, has its principal place of 22
70		-	business in, or is organized under the laws of 23
71		-	a foreign adversary country; 24 4
72		-	•HR 7520 EH
	88	+	ONTROLLED BY A FOREIGN ADVERSARY .— 19
	89	+	The term ‘‘controlled by a foreign adversary’’ means, 20
	90	+	with respect to an entity, that such entity is— 21
	91	+	(A) a foreign person that is domiciled in, 22
	92	+	is headquartered in, has its principal place of 23
	93	+	business in, or is organized under the laws of 24
	94	+	a foreign adversary country; 25
	95	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00004 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	96	+	ssavage on LAPJG3WLY3PROD with BILLS 5
	97	+	•HR 7520 RH
73	98		(B) an entity with respect to which a for-1
74	99		eign person or combination of foreign persons 2
75	100		described in subparagraph (A) directly or indi-3
76	101		rectly own at least a 20 percent stake; or 4
77	102		(C) a person subject to the direction or 5
78	103		control of a foreign person or entity described 6
79	104		in subparagraph (A) or (B). 7
80	105		(3) D
81	106		ATA BROKER.— 8
82	107		(A) I
83	108		N GENERAL .—The term ‘‘data 9
84	109		broker’’ means an entity that, for valuable con-10
85	110		sideration, sells, licenses, rents, trades, trans-11
86	111		fers, releases, discloses, provides access to, or 12
87	112		otherwise makes available data of United States 13
88		-	individuals that the entity did not collect di-14
89		-	rectly from such individuals to another entity 15
	113	+	individuals, that the entity did not collect di-14
	114	+	rectly from such individuals, to another entity 15
90	115		that is not acting as a service provider. 16
91	116		(B) E
92	117		XCLUSION.—The term ‘‘data broker’’ 17
93	118		does not include an entity to the extent such 18
94	119		entity— 19
95		-	(i) is transmitting data of a United 20
96		-	States individual, including communica-21
97		-	tions of such an individual, at the request 22
98		-	or direction of such individual; 23
99		-	(ii) is providing, maintaining, or offer-24
100		-	ing a product or service with respect to 25 5
101		-	•HR 7520 EH
102		-	which personally identifiable sensitive data, 1
103		-	or access to such data, is not the product 2
104		-	or service; 3
105		-	(iii) is reporting or publishing news or 4
106		-	information that concerns local, national, 5
107		-	or international events or other matters of 6
108		-	public interest; 7
109		-	(iv) is reporting, publishing, or other-8
110		-	wise making available news or information 9
111		-	that is available to the general public— 10
112		-	(I) including information from— 11
113		-	(aa) a book, magazine, tele-12
114		-	phone book, or online directory; 13
115		-	(bb) a motion picture; 14
116		-	(cc) a television, internet, or 15
117		-	radio program; 16
118		-	(dd) the news media; or 17
119		-	(ee) an internet site that is 18
120		-	available to the general public on 19
121		-	an unrestricted basis; and 20
122		-	(II) not including an obscene vis-21
123		-	ual depiction (as such term is used in 22
124		-	section 1460 of title 18, United States 23
125		-	Code); or 24
126		-	(v) is acting as a service provider. 25 6
127		-	•HR 7520 EH
128		-	(4) FOREIGN ADVERSARY COUNTRY .—The term 1
129		-	‘‘foreign adversary country’’ means a country speci-2
130		-	fied in section 4872(d)(2) of title 10, United States 3
131		-	Code. 4
	120	+	(i) is transmitting data, including 20
	121	+	communications of a United States indi-21
	122	+	vidual at the request or direction of such 22
	123	+	individual; 23
	124	+	(ii) is reporting, publishing, or other-24
	125	+	wise making available news or information 25
	126	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00005 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	127	+	ssavage on LAPJG3WLY3PROD with BILLS 6
	128	+	•HR 7520 RH
	129	+	that is available to the general public, in-1
	130	+	cluding information from a telephone book 2
	131	+	or online directory, a television, internet, 3
	132	+	or radio program, the news media, or an 4
	133	+	internet site that is available to the general 5
	134	+	public on an unrestricted basis, but not in-6
	135	+	cluding an obscene visual depiction (as 7
	136	+	such term is used in section 1460 of title 8
	137	+	18, United States Code); or 9
	138	+	(iii) is acting as a service provider. 10
	139	+	(4) F
	140	+	OREIGN ADVERSARY COUNTRY .—The term 11
	141	+	‘‘foreign adversary country’’ means a country speci-12
	142	+	fied in section 4872(d)(2) of title 10, United States 13
	143	+	Code. 14
132	144		(5) P
133		-	ERSONALLY IDENTIFIABLE SENSITIVE 5
134		-	DATA.—The term ‘‘personally identifiable sensitive 6
135		-	data’’ means any sensitive data that identifies or is 7
136		-	linked or reasonably linkable, alone or in combina-8
137		-	tion with other data, to an individual or a device 9
138		-	that identifies or is linked or reasonably linkable to 10
139		-	an individual. 11
140		-	(6) P
141		-	RECISE GEOLOCATION INFORMATION .— 12
142		-	The term ‘‘precise geolocation information’’ means 13
143		-	information that— 14
144		-	(A) is derived from a device or technology 15
145		-	of an individual; and 16
146		-	(B) reveals the past or present physical lo-17
147		-	cation of an individual or device that identifies 18
148		-	or is linked or reasonably linkable to 1 or more 19
149		-	individuals, with sufficient precision to identify 20
150		-	street level location information of an individual 21
151		-	or device or the location of an individual or de-22
152		-	vice within a range of 1,850 feet or less. 23
	145	+	RECISE GEOLOCATION INFORMATION .— 15
	146	+	The term ‘‘precise geolocation information’’ means 16
	147	+	information that— 17
	148	+	(A) is derived from a device or technology; 18
	149	+	and 19
	150	+	(B) reveals the past or present physical lo-20
	151	+	cation of an individual or device that identifies 21
	152	+	or is linked or reasonably linkable to 1 or more 22
	153	+	individuals, with sufficient precision to identify 23
	154	+	street level location information of an individual 24
	155	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00006 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	156	+	ssavage on LAPJG3WLY3PROD with BILLS 7
	157	+	•HR 7520 RH
	158	+	or device or the location of an individual or de-1
	159	+	vice within a range of 1,850 feet or less. 2
	160	+	(6) S
	161	+	ENSITIVE DATA.—The term ‘‘sensitive 3
	162	+	data’’ includes the following: 4
	163	+	(A) A government-issued identifier, such as 5
	164	+	a Social Security number, passport number, or 6
	165	+	driver’s license number. 7
	166	+	(B) Any information that describes or re-8
	167	+	veals the past, present, or future physical 9
	168	+	health, mental health, disability, diagnosis, or 10
	169	+	healthcare condition or treatment of an indi-11
	170	+	vidual. 12
	171	+	(C) A financial account number, debit card 13
	172	+	number, credit card number, or information 14
	173	+	that describes or reveals the income level or 15
	174	+	bank account balances of an individual. 16
	175	+	(D) Biometric information. 17
	176	+	(E) Genetic information. 18
	177	+	(F) Precise geolocation information. 19
	178	+	(G) An individual’s private communica-20
	179	+	tions such as voicemails, emails, texts, direct 21
	180	+	messages, mail, voice communications, and 22
	181	+	video communications, or information identi-23
	182	+	fying the parties to such communications or 24
	183	+	pertaining to the transmission of such commu-25
	184	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00007 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	185	+	ssavage on LAPJG3WLY3PROD with BILLS 8
	186	+	•HR 7520 RH
	187	+	nications, including telephone numbers called, 1
	188	+	telephone numbers from which calls were 2
	189	+	placed, the time calls were made, call duration, 3
	190	+	and location information of the parties to the 4
	191	+	call. 5
	192	+	(H) Account or device log-in credentials, or 6
	193	+	security or access codes for an account or de-7
	194	+	vice. 8
	195	+	(I) Information identifying the sexual be-9
	196	+	havior of an individual. 10
	197	+	(J) Calendar information, address book in-11
	198	+	formation, phone or text logs, photos, audio re-12
	199	+	cordings, or videos, maintained for private use 13
	200	+	by an individual, regardless of whether such in-14
	201	+	formation is stored on the individual’s device or 15
	202	+	is accessible from that device and is backed up 16
	203	+	in a separate location. 17
	204	+	(K) A photograph, film, video recording, or 18
	205	+	other similar medium that shows the naked or 19
	206	+	undergarment-clad private area of an indi-20
	207	+	vidual. 21
	208	+	(L) Information revealing the video con-22
	209	+	tent requested or selected by an individual. 23
	210	+	(M) Information about an individual under 24
	211	+	the age of 17. 25
	212	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00008 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	213	+	ssavage on LAPJG3WLY3PROD with BILLS 9
	214	+	•HR 7520 RH
	215	+	(N) An individual’s race, color, ethnicity, 1
	216	+	or religion. 2
	217	+	(O) Information identifying an individual’s 3
	218	+	online activities over time and across websites 4
	219	+	or online services. 5
	220	+	(P) Information that reveals the status of 6
	221	+	an individual as a member of the Armed 7
	222	+	Forces. 8
	223	+	(Q) Any other data that a data broker 9
	224	+	sells, licenses, rents, trades, transfers, releases, 10
	225	+	discloses, provides access to, or otherwise makes 11
	226	+	available to a foreign adversary country, or en-12
	227	+	tity that is controlled by a foreign adversary, 13
	228	+	for the purpose of identifying the types of data 14
	229	+	listed in subparagraphs (A) through (P). 15
153	230		(7) S
154		-	ENSITIVE DATA.—The term ‘‘sensitive 24
155		-	data’’ includes the following: 25 7
156		-	•HR 7520 EH
157		-	(A) A government-issued identifier, such as 1
158		-	a Social Security number, passport number, or 2
159		-	driver’s license number. 3
160		-	(B) Any information that describes or re-4
161		-	veals the past, present, or future physical 5
162		-	health, mental health, disability, diagnosis, or 6
163		-	healthcare condition or treatment of an indi-7
164		-	vidual. 8
165		-	(C) A financial account number, debit card 9
166		-	number, credit card number, or information 10
167		-	that describes or reveals the income level or 11
168		-	bank account balances of an individual. 12
169		-	(D) Biometric information. 13
170		-	(E) Genetic information. 14
171		-	(F) Precise geolocation information. 15
172		-	(G) An individual’s private communica-16
173		-	tions such as voicemails, emails, texts, direct 17
174		-	messages, mail, voice communications, and 18
175		-	video communications, or information identi-19
176		-	fying the parties to such communications or 20
177		-	pertaining to the transmission of such commu-21
178		-	nications, including telephone numbers called, 22
179		-	telephone numbers from which calls were 23
180		-	placed, the time calls were made, call duration, 24 8
181		-	•HR 7520 EH
182		-	and location information of the parties to the 1
183		-	call. 2
184		-	(H) Account or device log-in credentials, or 3
185		-	security or access codes for an account or de-4
186		-	vice. 5
187		-	(I) Information identifying the sexual be-6
188		-	havior of an individual. 7
189		-	(J) Calendar information, address book in-8
190		-	formation, phone or text logs, photos, audio re-9
191		-	cordings, or videos, maintained for private use 10
192		-	by an individual, regardless of whether such in-11
193		-	formation is stored on the individual’s device or 12
194		-	is accessible from that device and is backed up 13
195		-	in a separate location. 14
196		-	(K) A photograph, film, video recording, or 15
197		-	other similar medium that shows the naked or 16
198		-	undergarment-clad private area of an indi-17
199		-	vidual. 18
200		-	(L) Information revealing the video con-19
201		-	tent requested or selected by an individual. 20
202		-	(M) Information about an individual under 21
203		-	the age of 17. 22
204		-	(N) An individual’s race, color, ethnicity, 23
205		-	or religion. 24 9
206		-	•HR 7520 EH
207		-	(O) Information identifying an individual’s 1
208		-	online activities over time and across websites 2
209		-	or online services. 3
210		-	(P) Information that reveals the status of 4
211		-	an individual as a member of the Armed 5
212		-	Forces. 6
213		-	(Q) Any other data that a data broker 7
214		-	sells, licenses, rents, trades, transfers, releases, 8
215		-	discloses, provides access to, or otherwise makes 9
216		-	available to a foreign adversary country, or en-10
217		-	tity that is controlled by a foreign adversary, 11
218		-	for the purpose of identifying the types of data 12
219		-	listed in subparagraphs (A) through (P). 13
220		-	(8) S
221		-	ERVICE PROVIDER.—The term ‘‘service 14
222		-	provider’’ means an entity that— 15
223		-	(A) collects, processes, or transfers data on 16
224		-	behalf of, and at the direction of— 17
225		-	(i) an individual or entity that is not 18
226		-	a foreign adversary country or controlled 19
227		-	by a foreign adversary; or 20
228		-	(ii) a Federal, State, Tribal, terri-21
229		-	torial, or local government entity; and 22
230		-	(B) receives data from or on behalf of an 23
231		-	individual or entity described in subparagraph 24 10
232		-	•HR 7520 EH
233		-	(A)(i) or a Federal, State, Tribal, territorial, or 1
234		-	local government entity. 2
235		-	(9) U
236		-	NITED STATES INDIVIDUAL .—The term 3
237		-	‘‘United States individual’’ means a natural person 4
238		-	residing in the United States. 5
	231	+	ERVICE PROVIDER.—The term ‘‘service 16
	232	+	provider’’ means an entity that— 17
	233	+	(A) collects, processes, or transfers data on 18
	234	+	behalf of, and at the direction of— 19
	235	+	(i) an entity that is not a data broker 20
	236	+	and is not controlled by a foreign adver-21
	237	+	sary; or 22
	238	+	(ii) a Federal, State, Tribal, terri-23
	239	+	torial, or local government entity; and 24
	240	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00009 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	241	+	ssavage on LAPJG3WLY3PROD with BILLS 10
	242	+	•HR 7520 RH
	243	+	(B) receives data from or on behalf of an 1
	244	+	entity described in subparagraph (A)(i) or a 2
	245	+	Federal, State, Tribal, territorial, or local gov-3
	246	+	ernment entity. 4
	247	+	(8) U
	248	+	NITED STATES INDIVIDUAL .—The term 5
	249	+	‘‘United States individual’’ means a natural person 6
	250	+	residing in the United States. 7
239	251		(d) E
240		-	FFECTIVEDATE.—This section shall take effect 6
241		-	on the date that is 60 days after the date of the enactment 7
242		-	of this Act. 8
243		-	Passed the House of Representatives March 20,
244		-	2024.
245		-	Attest:
246		-	Clerk. 118
	252	+	FFECTIVEDATE.—This section shall take effect 8
	253	+	on the date that is 60 days after the date of the enactment 9
	254	+	of this Act. 10
	255	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00010 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	256	+	ssavage on LAPJG3WLY3PROD with BILLS VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00011 Fmt 6652 Sfmt 6201 E:\BILLS\H7520.RH H7520
	257	+	ssavage on LAPJG3WLY3PROD with BILLS Union Calendar No.
	258	+	345
	259	+	118
247	260		TH
248	261		CONGRESS
249	262		2
250	263		D
251	264		S
252	265		ESSION
253	266
254	267		H. R. 7520
255		-	AN ACT
256		-	To prohibit data brokers from transferring person-
257		-	ally identifiable sensitive data of United States
258		-	individuals to foreign adversaries, and for other
259		-	purposes.
	268	+	[Report No. 118–418]
	269	+	A BILL
	270	+	To prohibit data brokers from transferring sensitive
	271	+	data of United States individuals to foreign ad-
	272	+	versaries, and for other purposes.
	273	+	M
	274	+	ARCH
	275	+	11, 2024
	276	+	Committed to the Committee of the Whole House on the
	277	+	State of the Union and ordered to be printed
	278	+	VerDate Sep 11 2014 00:38 Mar 12, 2024 Jkt 049200 PO 00000 Frm 00012 Fmt 6651 Sfmt 6651 E:\BILLS\H7520.RH H7520
	279	+	ssavage on LAPJG3WLY3PROD with BILLS