Privacy Act Modernization Act of 2025

This bill strengthens privacy protections that apply to personal data held or maintained by government agencies. These protections restrict the storage, access, use, and disclosure of personal data, such as an individual’s name or Social Security number.

Currently, these protections apply to U.S. citizens and permanent residents. The bill expands this to include natural persons in the United States and certain associations and corporations.

The bill places additional limits on the use and disclosure of such data, including by limiting the use of records to a legally authorized purpose and requiring disclosures to be minimal and consistent with a previously stated use.

The bill also increases existing penalties and creates additional criminal penalties for violations. For example, under the bill, an agency employee who willfully discloses individually identifiable information with the intent to sell, transfer, use, or disclose such information for commercial advantage, personal gain, or malicious harm shall be guilty of a felony and fined not more than $250,000, imprisoned for not more than 10 years, or both.

Summary by the Congressional Research Service.