Homeland Security and Governmental Affairs Committee
Introduced
In Committee
On Floor
Passed Chamber
Enacted
The legislation defines at‑risk individuals as members of Congress, their spouses, parents, siblings, children, and designated Senate or House employees, and it identifies covered information as personal data that could reveal a location or identity, including addresses, phone numbers, and social‑security numbers. It also clarifies the role of data brokers and excludes certain public‑interest activities from that definition. The bill requires each government agency to accept written notices from an at‑risk individual and to mark the individual’s covered information as private. Upon receipt of a request, the agency must remove the information from publicly available content within 72 hours. The act permits a third party to access the data only with a signed release, a court order, or a confidentiality agreement. Private businesses, data brokers, and other entities are prohibited from selling, licensing, or publicly posting covered information after a written request, and they must delete or block the data within 72 hours. The statute allows exceptions for news reporting, voluntary publication by the individual, or information obtained lawfully from a federal source. Violations give the affected individual the right to seek injunctive or declaratory relief in court. The law explicitly preserves the press’s ability to report on unlawful conduct or matters of public concern involving an at‑risk individual. Legislative officers may act on behalf of members or staff to submit notices and maintain compliance with the provisions.
Computers and information technologyComputer security and identity theftCongressional officers and employeesGovernment information and archivesMembers of Congress
A bill to improve the safety and security of Members of Congress, immediate family members of Members of Congress, and congressional staff.
USA119th CongressS-2144| Senate
| Updated: 10/10/2025
The legislation defines at‑risk individuals as members of Congress, their spouses, parents, siblings, children, and designated Senate or House employees, and it identifies covered information as personal data that could reveal a location or identity, including addresses, phone numbers, and social‑security numbers. It also clarifies the role of data brokers and excludes certain public‑interest activities from that definition. The bill requires each government agency to accept written notices from an at‑risk individual and to mark the individual’s covered information as private. Upon receipt of a request, the agency must remove the information from publicly available content within 72 hours. The act permits a third party to access the data only with a signed release, a court order, or a confidentiality agreement. Private businesses, data brokers, and other entities are prohibited from selling, licensing, or publicly posting covered information after a written request, and they must delete or block the data within 72 hours. The statute allows exceptions for news reporting, voluntary publication by the individual, or information obtained lawfully from a federal source. Violations give the affected individual the right to seek injunctive or declaratory relief in court. The law explicitly preserves the press’s ability to report on unlawful conduct or matters of public concern involving an at‑risk individual. Legislative officers may act on behalf of members or staff to submit notices and maintain compliance with the provisions.
Computers and information technologyComputer security and identity theftCongressional officers and employeesGovernment information and archivesMembers of Congress