S 1208
Privacy Act Modernization Act of 2025
TL;DR
Senator Ron Wyden's bill updates the 1974 Privacy Act to cover how federal agencies (and their contractors) use AI and automated decision-making systems on Americans' personal data. It would require agencies to disclose algorithmic tools, give citizens rights to challenge AI-driven decisions, and expand oversight of data-sharing with private vendors.
How This Might Impact Your Business
Federal contractors handling citizen data (cloud providers, AI vendors, data brokers, IT services firms) would face stricter recordkeeping, transparency, and audit obligations tied to any algorithmic tools used on government contracts.
Companies selling automated decision-making systems to federal agencies (fraud detection, benefits eligibility, identity verification, risk scoring) would need to document how models work and support citizen appeal rights.
Financial services firms sharing data with federal agencies (banks, credit bureaus, fintech, payment processors) could see new limits on secondary uses and AI-driven profiling of customers.
Data brokers and analytics firms selling personal data into the federal market would face expanded 'system of records' disclosure requirements and potential civil penalties.
Small vendors are not exempted in current draft language, so any startup with a federal contract touching personal data should assume the rules apply.
Penalties include expanded civil damages and could trigger contract termination or debarment for non-compliant vendors.
Bill sits in the Senate Homeland Security and Governmental Affairs Committee; no markup scheduled yet, so timeline for passage is uncertain but Wyden has reintroduced privacy legislation multiple sessions.
What Should You Do
Inventory any federal contracts or subcontracts where your company processes personal data or deploys automated decision-making, and flag them for legal review.
Ask your compliance team to map current AI documentation practices against likely new requirements (model cards, impact assessments, appeal workflows).
If you sell AI tools to federal agencies, brief your product team now on building explainability and human-review features into the roadmap.
Have government affairs monitor the Senate Homeland Security Committee for hearing announcements and be ready to submit industry comments.
Review vendor contracts with data brokers and analytics providers to confirm they can meet expanded federal disclosure standards if you resell data into government channels.
Who It Affects
Sponsors
Status Timeline
committee
Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
March 31, 2025