United States of America: Introduction of the Protecting Sensitive Personal Data Act

On 2 November 2021, the Protecting Sensitive Personal Data Act (S.3130) is introduced in the U.S. Senate by Senators Rubio (R-FL) and Warnock (D-GA). The bill aims to give new regulatory powers to the U.S. Department of the Treasury’s Committee on Foreign Investment (CFIUS), expanding the department's authority to oversee transactions concerning U.S.-based “sensitive personal data”. Such data includes, but is not limited to data concerning health, genetics, insurance, security clearance, geolocation, private emails and credit reports. The law would give CFIUS the power to require mandatory declarations from foreign entities that want to invest in companies based in the U.S. processing "sensitive personal data".