American Data Privacy and Protection Act

This topic page contains a curation of the IAPP’s coverage, analysis and relevant resources regarding the American Data Privacy and Protection Act.

The proposed ADPPA and its legislative path are the closest U.S. Congress has ever been to passing comprehensive federal privacy legislation. As summarized on the U.S. Library of Congress, “This bill establishes requirements for how companies, including nonprofits and common carriers, handle personal data, which includes information that identifies or is reasonably linkable to an individual.” The full text of the bill can be found here.

The bill has the support of some factions of the U.S. Federal Trade Commission, the agency that will be tasked with enforcing the bill if it passes.

The IAPP Resource Center includes a separate topic page for U.S. Federal Privacy, and a “U.S. Federal Privacy Legislation Tracker.”

Featured Resources

Scope of the ADPPA

This IAPP table aims to present a high-level breakdown of the American Data Privacy and Protection Act, a federal comprehensive data privacy bill.
Read More

State views on ADPPA preemption

The ADPPA is at a full stop in the U.S. House due to California’s concerns over current provisions for preemption of state comprehensive privacy laws.This article features reaction from state lawmakers and provides a a wider view on how the ADPPA and preemption are being received.
Read More

Reviewing the House changes to ADPPA

The proposed American Data Privacy and Protection Act has reached a standstill in the U.S. House. The bill is expected to undergo further changes before being brought to the floor. This article takes stock of the current version of the proposal and how it has transformed compared to prior drafts.
Read More


Latest News and Resources

What's needed to improve the ADPPA

For the first time in over a decade, Congress is seriously considering a comprehensive federal privacy law. While the American Data Privacy and Protection Act has received significant attention — mostly focused on enforcement mechanisms and whether it would preempt the California Privacy Rights Act — privacy experts have not yet publicly discussed other needed improvements. Absent these improvements, the ADPPA would impede innovation, undercut law enforcement’s most effective tools, and hamstrin... Read More

Analysis: ADPPA could offer better protection of health data held by non-HIPAA entities

The proposed American Data Privacy and Protection Act could have a far-reaching impact on health data that is not protected by the Health Insurance Portability and Accountability Act, Health IT Security reports. Invitae's Deven McGraw said, "HIPAA was never intended to be a privacy rule that covered all health data. ... The fact that we have this quite comprehensive piece of federal legislation that would cover personal data and extend additional protection to sensitive data is quite exciting. .... Read More

US House caucus endorses proposed American Data Privacy and Protection Act

The U.S. House New Democrat Coalition announced its support for the proposed American Data Privacy and Protection Act. The NDC, with 99 members, is the largest caucus in the House. NDC Chair Suzan DelBene, D-Wash., said the coalition's support comes as it has "prioritized advancing policies that make privacy the default and put people in control of their own information." She added the NDC calls on "Republicans and Democrats in the House and the Senate to seize this moment to come to an agreemen... Read More

Pelosi opposes proposed American Data Privacy and Protection Act, seeks new preemption compromise

Prospects for a landmark vote in the U.S. House on the proposed American Data Privacy and Protection Act boil down to House Speaker Nancy Pelosi, D-Calif., who decides when or if the comprehensive privacy bill's number will be considered on the House floor. Pelosi did not take a side upon the ADPPA becoming available for a floor vote just ahead of U.S. Congress' summer recess, leaving many wondering where the chips would fall when federal lawmakers returned to work Sept. 6. Following weeks of u... Read More

The path to success for approved compliance programs under the ADPPA

The American Data Privacy and Protection Act, H.R. 8152, recently amended and reported out by the U.S. House Committee on Energy and Commerce, represents important progress toward a passage of a privacy law in the United States. For smaller companies, the ADPPA provision for approved compliance programs is welcome news. Section 304 provides that enterprises whose revenues, data collection, data processing and transfer activities do not reach certain thresholds (as set forth in Section 209) may ... Read More

Stakeholders indicate stances on proposed American Data Privacy and Protection Act
(IAPP, August 2022)
Potential bipartisan refit for proposed American Data Privacy and Protection Act
(IAPP, August 2022)
CPPA restates American Data Privacy and Protection Act opposition to US House leaders
(IAPP, August 2022)
A pitch for final compromise with proposed American Data Privacy and Protection Act
(IAPP, August 2022)
American Data Privacy and Protection Act’s prospects after US Congress recess
(IAPP, August 2022)
Co-sponsors remain hopeful with proposed American Data Privacy and Protection Act
(IAPP, August 2022)
Advocates concerned with telecom data oversight in proposed ADPPA
(IAPP, August 2022)
Calif. privacy agency takes aim at dismantling federal privacy preemption
(IAPP, July 2022)
Sen. Cantwell holds firm on American Data Privacy and Protection Act opposition
(IAPP, July 2022)
American Data Privacy and Protection Act heads for US House floor
(IAPP, July 2022)
State attorneys general oppose preemption in proposed American Data Privacy and Protection Act
(IAPP, July 2022)
US lawmakers release amended American Data Privacy and Protection Act
(IAPP, July 2022)
US House committee schedules markup for American Data Privacy and Protection Act
(IAPP, July 2022)
Examining the intersection of data privacy and civil rights
(Brookings Institution, July 2022)
Defining health data: A major challenge for any privacy law
(IAPP, June 2022)
A view from DC: A look at the updated American Data Protection and Privacy Act
(IAPP, June 2022)
House subcommittee advances American Data Privacy and Protection Act
(IAPP, June 2022)
What does the newest U.S. privacy bill mean for cybersecurity?
(IAPP, June 2022)
Understanding the scope of the draft American Data Privacy and Protection Act
(IAPP, June 2022)
US House committee schedules American Data Privacy and Protection Act hearing
(IAPP, June 2022)
US lawmakers unveil bipartisan American Data Privacy and Protection Act
(IAPP, June 2022)
Distilling the essence of the American Data Privacy and Protection Act discussion draft
(IAPP, June 2022)
View More Resources