US Codex
Bill
Notes

H.R. 847 — what changed

Promoting Digital Privacy Technologies Act

From Introduced in House to Reported in House. 5 sections amended and 1 added between Introduced in House and Reported in House.

Sec. 2 Definition of privacy enhancing technology

changed In this Act:Act, the term “privacy enhancing technology”—

(1)
changed Personal data— The term personal data means information that identifies, is linked to, any software or is reasonably linkable to, an individual hardware solution, technical process, or a consumer device, including derived data.other technological means of mitigating individuals’ privacy risks arising from data processing by enhancing predictability, manageability, disassociability, and confidentiality; and
(2)
changed Privacy enhancing technology— The term privacy enhancing technology—may include—
(A)
added cryptographic techniques for facilitating computation or analysis on data while mitigating privacy risks;
(B)
changed means any software solution, technical processes, or other technological means of enhancing the privacy and confidentiality of an individual’s personal data in techniques for publicly sharing data or sets of data; andwithout enabling inferences to be made about specific individuals;
(C)
changed includes anonymization and pseudonymization techniques, filtering tools, anti-tracking technology, differential privacy tools, synthetic data, techniques for giving individuals’ control over the dissemination, sharing, and secure multi-party computation.use of their data;
(D)
added techniques for generating synthetic data; and
(E)
added any other technology or approach that reduces the risk of re-identification, including when combined with other information.

Sec. 3 National Science Foundation support of research on privacy enhancing technology

The Director of the National Science Foundation, in consultation with other relevant Federal agencies (as determined by the Director), shall support merit-reviewed and competitively awarded research on privacy enhancing technologies, which may include—

(1)
changed fundamental research on technologies for de-identification, pseudonymization, anonymization, or obfuscation of personal data to mitigate individuals’ privacy risks in data sets while maintaining fairness, accuracy, and efficiency;
(2)
changed fundamental research on algorithms and other similar mathematical tools used to protect individual privacy when collecting, storing, sharing, analyzing, or aggregating data;
(3)
changed fundamental research on technologies that promote data minimization principles in data collection, sharing, and analytics; andanalytics that takes into account the trade-offs between the data minimization goals and the informational goals of data collection;
(4)
changed research awards on privacy enhancing technologies coordinated with other relevant Federal agencies and programs.programs;
(5)
added supporting education and workforce training research and development activities, including re-training and upskilling of the existing workforce, to grow the number of privacy enhancing technology researchers and practitioners;
(6)
added multidisciplinary socio-technical research that fosters broader understanding of privacy preferences, requirements, and human behavior to inform the design and adoption of effective privacy solutions;
(7)
added development of freely available privacy enhancing technology software libraries, platforms, and applications; and
(8)
added fundamental research on techniques that may undermine the protections provided by privacy enhancing technologies, the limitations of the protections provided by privacy enhancing technologies, and the trade-offs between privacy and utility required for their deployment.

Sec. 4 Integration into the computer and network security program

Subparagraph (D) of section 4(a)(1) of the Cyber Security Research and Development Act (15 U.S.C. 7403(a)(1)(D)) is amended to read as follows:

changed “(D) privacy enhancing technologies and confidentiality;”confidentiality, including privacy enhancing technologies;”

Sec. 5 Coordination with the National Institute of Standards and Technology and other stakeholders

(a)
changed In general— The Director of the Office of Science and Technology Policy, acting through the Networking and Information Technology Research and Development Program, shall coordinate with the Director of the National Science Foundation, the Director of the National Institute of Standards and Technology, and the Federal Trade Commission Commission, and the heads of other Federal agencies, as appropriate, to accelerate the development development, deployment, and use adoption of privacy enhancing technologies.
(b)
Outreach— The Director of the National Institute of Standards and Technology shall conduct outreach to—
(1)
changed receive input from private, public, and academic stakeholders, including the National Institutes of Health and the Centers for Disease Control and Prevention, for the purpose of facilitating public health research, stakeholders on the development of privacy enhancing technologies; and
(2)
changed develop facilitate and support ongoing public and private sector engagement to create inform the development and disseminate dissemination of voluntary, consensus-based resources technical standards, guidelines, methodologies, procedures, and processes to cost-effectively increase the integration of privacy enhancing technologies in data collection, sharing, and analytics performed by the public and private sectors.

Sec. 6 Report on privacy enhancing technology research

changed Not later than 2 3 years after the date of enactment of this Act, the Director of the Office of Science and Technology Policy, acting through the Networking and Information Technology Research and Development Program, shall, in coordination with the Director of the National Science Foundation and Foundation, the Director of the National Institute of Standards and Technology, and the heads of other Federal agencies, as appropriate, submit to the Committee on Commerce, Science, and Transportation of the Senate, the Subcommittee on Commerce, Justice, Science, and Related Agencies of the Committee on Appropriations of the Senate, the Committee on Science, Space, and Technology of the House of Representatives, and the Subcommittee on Commerce, Justice, Science, and Related Agencies of the Committee on Appropriations of the House of Representatives, a report containing—

(1)
the progress of research on privacy enhancing technologies;
(2)
the progress of the development of voluntary resources described under section 5(b)(2); and
(3)
changed any policy recommendations of the Directors that could facilitate and improve communication and coordination between the private sector, the National Science Foundation, sector and relevant Federal agencies through for the implementation and adoption of privacy enhancing technologies.

Sec. 7 Protecting personal identifying information

added

added Any personal identifying information collected or stored through the activities authorized in this Act shall be done in accordance with section 690 of title 45, Code of Federal Regulations (relating to the protection of human subjects), or any successor regulation.