Protecting Americans from Doxing and Political Violence Act

Bill Number: S. 2851
Origin Chamber: Senate
Congress: 119th Congress, Session 1
Policy Area: Congress
Status: Introduced
Latest Action: 2025-09-17: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Last Updated: 2025-12-17T15:34:01Z

AI-Generated Summary

Purpose

The legislation, titled the "Protecting Americans from Doxing and Political Violence Act," aims to enhance the safety and security of Members of Congress, their immediate family members, and congressional staff by restricting the public disclosure, sale, or transfer of sensitive personal information (known as "covered information"). This is intended to prevent doxing—publicly releasing private details to harass or threaten individuals—and reduce risks of political violence.

Key Provisions

Definitions:
"At-risk individual" includes current and former Members of Congress, their spouses, parents, siblings, children (or those standing in place of parents), household members, and designated congressional employees (e.g., staff selected by members or officers).
"Covered information" encompasses sensitive details like home addresses, personal phone numbers or emails, Social Security numbers, driver's license numbers, bank or card details, vehicle identifiers, children's identities or school information, travel routes to work or school, and precise location data tied to an individual's device. It excludes info in required election filings.
"Data broker" refers to businesses that collect and sell personal data for profit, with exclusions for journalists, telecom directories, financial institutions, health entities, and similar regulated operations.
Other terms cover candidates, government agencies (across branches), transfers (selling or licensing data), and immediate family.

Protections for Government Agencies:
At-risk individuals can submit written notices to agencies to mark their (and family members') covered information as private.
Agencies must not publicly post such information and must remove it from public view within 72 hours of a request.
Exceptions allow access with the individual's signed release, court order, or confidentiality agreements (e.g., for financial or legal compliance).

Delegation and Assistance:
Individuals can use agents to submit requests.
Legislative officers (e.g., Sergeants at Arms) can act on behalf of members or staff, including providing lists of protected individuals to agencies or businesses to streamline compliance.

Restrictions on Data Brokers and Businesses:
Data brokers are prohibited from selling, licensing, trading, or buying covered information of U.S. persons or those in the U.S.
Enforcement is by the U.S. Attorney General or state attorneys general, seeking court orders to stop violations.
Other persons, businesses, or associations must remove covered information from public internet display within 72 hours of a written request and refrain from transferring it, with exceptions for news reporting on public concerns, voluntarily published info by the individual, or data from federal sources.
Businesses cannot repost or share the information on controlled websites after removal.

Redress and Enforcement:
At-risk individuals can sue in court for orders to stop (injunctive) or declare violations (declaratory) if their information is wrongly publicized.

Rules of Construction and Severability:
The law does not restrict press investigations, public-interest reporting, or legally required disclosures; it allows consented sharing and government info exchanges.
It is to be interpreted broadly to protect privacy.
If any part is ruled unconstitutional, the rest remains in effect.

Significant Changes to Existing Law

Introduces specific federal prohibitions on data brokers selling sensitive personal data of congressional figures, which were not previously banned outright (though some privacy laws like the Fair Credit Reporting Act regulate related areas).
Mandates rapid removal (72 hours) of covered information from government records and online platforms upon request, expanding beyond general privacy protections (e.g., under the Privacy Act of 1974) to target doxing risks.
Authorizes legislative officers to batch-process protection requests, creating a new streamlined mechanism not present in prior laws.
Provides private right of action for injunctive relief, differing from enforcement-limited statutes, while carving out exceptions to avoid overriding election disclosure rules or free speech protections.

Potential Impacts

Government Agencies: Will face administrative burdens to process notices, mark records as private, and remove data quickly, potentially requiring updates to public databases and training for compliance across executive, legislative, and judicial branches.
Citizens: Enhances privacy for at-risk individuals and families by limiting doxing exposure, but may reduce public access to certain personal details in records (e.g., voter rolls or property info), affecting transparency in non-sensitive areas. Broader citizens (U.S. persons) gain indirect protection from data broker sales of their info.
International Relations: Minimal direct impact, though it applies to U.S. persons abroad and could influence how foreign entities handle data on U.S. officials, potentially deterring foreign interference via doxing.

Main Stakeholders Affected

Primary Beneficiaries: Members of Congress (current and former), their immediate family members, and designated congressional staff (e.g., aides or officers).
Government Entities: Federal, state, and local agencies holding public records; legislative support offices (e.g., Sergeants at Arms) tasked with coordination.
Private Sector: Data brokers, websites, and businesses that collect or display personal data, who must comply with removal and non-transfer rules.
Enforcers and Litigants: U.S. and state attorneys general for public enforcement; at-risk individuals for private lawsuits.
Others: Journalists and news outlets (protected by exceptions but potentially affected in sourcing info); the public, with altered access to some records.

Notable Legal, Constitutional, or Political Implications

Legal: Strengthens privacy enforcement against doxing but relies on self-requests, which may limit reach; state attorneys general gain new authority, potentially leading to varied enforcement. The private right to sue could increase litigation over online content moderation.
Constitutional: Balances privacy rights (under the Fourth Amendment's implied protections) against First Amendment free speech, with explicit exceptions for journalism and public discourse to mitigate challenges. Broad construction favoring protection may invite court tests on vagueness or overbreadth.
Political: Addresses rising threats to elected officials amid polarized environments, potentially improving retention of public servants by reducing personal risks. Could spark debates on elite privileges versus general privacy needs, influencing future bipartisan security measures.

This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.

Sponsor

Sen. Wyden, Ron [D-OR]

Recent Actions

2025-09-17: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
2025-09-17: Introduced in Senate

Bill Versions

Protecting Americans from Doxing and Political Violence Act — issued 2025-09-17 — PDF (18 pages)