The Senate Judiciary Committee voted 14-9 on May 14 to advance the Data Accountability and Privacy Enforcement Act (DAPEA) to the full Senate floor, marking the most significant bipartisan movement on federal data privacy legislation in three years. The bill, sponsored by Sen. Maria González (D-CA) and co-sponsored by Sens. James Whitfield (R-TX) and Patricia Chen (R-CA), would establish the first-ever national standard for how corporations handle, store, and share American consumer data.
What DAPEA Would Do
The legislation mandates that any company collecting data on more than 50,000 U.S. consumers obtain explicit opt-in consent before harvesting sensitive personal information — including location data, biometric identifiers, health records, and financial details. The bill creates a private right of action, allowing individuals to sue companies directly for violations, and establishes civil penalties of up to $50,000 per violation for willful misconduct.
Critically, DAPEA preempts the current patchwork of state privacy laws — including California’s CCPA/CPRA framework, Virginia’s CDPA, and Colorado’s CPA — establishing a single federal floor that states may exceed but not undercut. Industry groups have sharply disputed the preemption clause, arguing it strips consumers of stronger state-level protections.
Key Committee Amendments
During the markup session, Ranking Member Sen. Thomas Kavanagh (R-OH) successfully added an amendment requiring the Department of Justice to establish a “reasonable inference grace period” — a 72-hour window before civil penalties attach, during which companies that self-report data breaches to federal authorities are eligible for reduced penalties. The move was framed as an incentive for corporate cooperation with law enforcement.
A second amendment, offered by Sen. Alicia Monroe (D-NE), directs the newly formed Federal Data Protection Agency (FDPA) to conduct annual audits of any company that processes data on more than one million consumers — a threshold that would capture the largest technology platforms, financial institutions, and healthcare providers.
Industry and Advocacy Reaction
Technology industry lobbying groups issued a joint statement calling DAPEA “overly broad and unworkable,” citing particularly the biometric data provisions as technologically undefined. Privacy advocates, meanwhile, praised the bill as a meaningful step forward while noting that enforcement mechanisms remain underfunded relative to the scope of data collection practices the legislation seeks to regulate.
“This is the closest we’ve come to a national privacy standard since the early debates around Do Not Track. The preemption language is the real prize — it ends the regulatory fragmentation that has confused both businesses and consumers.” — Sen. Maria González (D-CA), floor remarks, May 15, 2026
Civil liberties organizations have raised concerns about the self-reporting grace period, arguing it creates a perverse incentive structure that rewards companies for delayed disclosure rather than prompt transparency with affected consumers.
Likely Senate Floor Battle
Senate Majority Leader’s office confirmed that floor debate is tentatively scheduled for the week of May 26. Observers expect the bill to face procedural challenges from members who argue the 72-hour grace period creates an unacceptable loophole. A separate amendment to sunset the preemption clause after ten years — allowing Congress to revisit state protections — has been floated as a potential compromise bridge for wavering moderates.
The White House has not yet issued a formal statement of support or opposition. Press briefings from the Office of Science and Technology Policy indicate the administration is conducting a full interagency review, with particular focus on provisions affecting cross-border data transfers that intersect with existing trade agreements.
Looking Ahead: Floor action in the week of May 26 will test whether DAPEA can attract the 60 votes necessary to overcome procedural resistance. The legislative path forward depends heavily on whether the preemption compromise satisfies both swing-state moderates and state attorney general associations who have historically opposed federal preemption of consumer protection laws.
—END—