# 119-s-4211: Consumer Data Privacy and Security Act of 2026

119-s-4211, Consumer Data Privacy and Security Act of 2026, is a 119th Congress bill sponsored by Sen. Moran, Jerry [R-KS] (R-KS); status introduced; PRIA reads it as touching household money (as of 2026-09-10).

- Canonical: https://policyrisk.com/legislation/119-s-4211
- As of: 2026-09-10
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Bill: 119-s-4211
- Congress: 119
- Title: Consumer Data Privacy and Security Act of 2026
- Status: introduced
- Introduced: 2026-03-25
- Sponsor: Sen. Moran, Jerry [R-KS] (R-KS)
- Cosponsors: 0
- Policy area: Commerce
- Touches household money: yes
- Last recorded action: 2026-09-10

## Summary

**A national privacy law that gives people real control over their personal data.** This bill would set rules for notice and consent, create access and deletion rights, require security programs, and empower the Federal Trade Commission to enforce them.

## Provisions PRIA read

- New contracts and rules for service providers: cost, medium. If enacted, covered entities would have to use written contracts that limit a service provider to process data only as directed and that require the provider to delete, de-identify, or return data when the job is done. Service providers would have to help covered entities comply with verified right…
- Enforcement, penalties, and federal preemption: mixed, high. If enacted, the Federal Trade Commission would enforce the law and could treat violations as unfair or deceptive acts. For knowing violations, the Commission could seek a civil penalty of up to $42,530 for each person affected. State attorneys general could sue in federal court but must notify the…
- Rules on consent, notice, and sensitive data: mixed, high. If enacted, the bill would define what counts as personal and sensitive data and treat device IDs (like cookie numbers and device serials) as personal data. Covered entities would have to post clear privacy policies with data types, purposes, retention, and third-party sharing and must notify peopl…
- Stronger privacy rules for large data firms: mixed, high. If enacted, firms that process personal data for more than 20,000,000 people or sensitive data for more than 1,000,000 would need to name a privacy officer, run a written privacy program, and document privacy impact assessments for new sensitive-data uses. All covered entities and service providers…
- New consumer data rights and requests: mixed, medium. If enacted, you would be able to ask a covered company whether it has your personal data and get a copy. You would be able to correct wrong data and ask it to be erased, except for data kept for a permitted legal purpose. Companies would have to comply with at least two verified requests in any 12-…

## Related bills

- 119-s-4744: Take Care of America’s Veterans Act
- 119-s-3923: Weather Research and Forecasting Innovation Reauthorization Act of 2026
- 119-s-2354: Commerce, Justice, Science, and Related Agencies Appropriations Act, 2026
- 119-s-4498: ABLE Tomorrow Act
- 119-s-933: NASA Transition Authorization Act of 2025
- 119-s-1748: Kids Online Safety Act

## Sources
- [119-s-4211 on Congress.gov](https://www.congress.gov/bill/119th-congress/senate-bill/4211)

## Related
- [119-s-4744: Take Care of America’s Veterans Act](https://policyrisk.com/legislation/119-s-4744)
- [119-s-3923: Weather Research and Forecasting Innovation Reauthorization Act of 2026](https://policyrisk.com/legislation/119-s-3923)
- [119-s-2354: Commerce, Justice, Science, and Related Agencies Appropriations Act, 2026](https://policyrisk.com/legislation/119-s-2354)
- [119-s-4498: ABLE Tomorrow Act](https://policyrisk.com/legislation/119-s-4498)
- [119-s-933: NASA Transition Authorization Act of 2025](https://policyrisk.com/legislation/119-s-933)
- [119-s-1748: Kids Online Safety Act](https://policyrisk.com/legislation/119-s-1748)
- [All bills in Congress](https://policyrisk.com/legislation)

Source: PRIA, https://policyrisk.com/legislation/119-s-4211 (as of 2026-09-10).