S. 2367 (119th)Bill Overview

AI Accountability and Personal Data Protection Act

Crime and Law Enforcement|Crime and Law Enforcement
Cosponsors
Support
Lean Democratic
Introduced
Jul 21, 2025
Discussions
Bill Text
Current stageCommittee

Read twice and referred to the Committee on the Judiciary.

Introduced
Committee
Floor
President
Law
Congressional Activities
01 · The brief
Plain-English summaryWhat this bill actually does

The AI Accountability and Personal Data Protection Act creates a federal tort making it unlawful, in or affecting interstate or foreign commerce, for any person to appropriate, use, collect, process, sell, or otherwise exploit an individual’s "covered data" without the individual’s express, prior consent. "Covered data" is broadly defined to include personally identifiable information, device identifiers, geolocation, biometric data, behavioral and inferred data, and content an individual generated that is protected by copyright; the definition explicitly covers use of such data to train generative AI and output by generative AI that imitates or is substantially derived from an individual’s data. The Act provides a private right of action with remedies including compensatory damages (the greater of actual damages, treble profits from the misuse, or $1,000), punitive damages, injunctive relief, and attorney’s fees; it makes lack of valid express, prior consent an element defendants must disprove as an affirmative defense and invalidates consent obtained through coercion or as a condition of service when data use exceeds what is necessary.

Why people may split

Scope and definitions: Liberals emphasize broad protection of individuals and AI-specific coverage; conservatives worry the definitions are overbroad and legally uncertain.

Watch point

Relative to its intended legislative type, this bill is a well-focused substantive statute that clearly creates a federal tort, defines core terms, and specifies remedies and certain consent/disclosure rules.

The AI Accountability and Personal Data Protection Act creates a federal tort making it unlawful, in or affecting interstate or foreign commerce, for any person to appropriate, use, collect, process, sell, or otherwise exploit an individual’s "covered data" without the individual’s express, prior consent. "Covered data" is broadly defined to include personally identifiable information, device identifiers, geolocation, biometric data, behavioral and inferred data, and content an individual generated that is protected by copyright; the definition explicitly covers use of such data to train generative AI and output by generative AI that imitates or is substantially derived from an individual’s data.

The Act provides a private right of action with remedies including compensatory damages (the greater of actual damages, treble profits from the misuse, or $1,000), punitive damages, injunctive relief, and attorney’s fees; it makes lack of valid express, prior consent an element defendants must disprove as an affirmative defense and invalidates consent obtained through coercion or as a condition of service when data use exceeds what is necessary.

The bill bars enforcement of predispute arbitration clauses and class-action waivers for claims under the Act, requires clear, separate, affirmative disclosures of third parties at the time consent is sought, and states it does not preempt state laws and establishes a federal minimum standard.

Passage25/100

Content indicates a high-impact, pro-consumer privacy approach with strong private remedies and industry-facing restrictions (no arbitration/class-waiver), which historically provokes concentrated opposition from affected sectors and generates complex legal and economic questions. The bill lacks compromise features (sunset, pilot, narrow carve-outs) that typically help broad, novel liability regimes clear both chambers, so—judged on content and usual legislative patterns—its chance of enactment is limited unless substantially amended or folded into a larger, negotiated package.

CredibilityMisaligned

Relative to its intended legislative type, this bill is a well-focused substantive statute that clearly creates a federal tort, defines core terms, and specifies remedies and certain consent/disclosure rules. It explicitly integrates with existing law (state law, FAA). However, while the operative prohibitions and remedies are specified, many operational and boundary details expected for a sweeping data-related tort are missing.

Contention70/100

Scope and definitions: Liberals emphasize broad protection of individuals and AI-specific coverage; conservatives worry the definitions are overbroad and legally uncertain.

02 · What it does

Who stands to gain, and who may push back.

Likely benefits vs burdens50% / 50%
ConsumersDevelopers

These are examples from the analysis, not a ranked list of the most-affected groups.

Likely helped
  • Potential benefitStrengthens individual privacy and control by creating a clear private right of action and higher remedies (treble prof…
  • ConsumersRequires explicit, separate third‑party disclosure and affirmative consent, likely increasing transparency about data f…
  • Potential benefitCould spur demand for privacy-compliance services, audit and governance tools, and legal services (compliance officers,…
Likely burdened
  • DevelopersBroad definitions (including inferred/derived data and generative AI outputs) and high statutory remedies (treble profi…
  • Potential burdenProhibition on enforcing predispute arbitration agreements and class‑action waivers for these claims may lead to more c…
  • Potential burdenOperational requirements for express, prior consent and distinct third‑party disclosures (not satisfied by links or gen…
03 · Why people split

Why the argument around this bill splits.

Scope and definitions: Liberals emphasize broad protection of individuals and AI-specific coverage; conservatives worry the definitions are overbroad and legally uncertain.
Progressive90%

This persona would likely view the bill favorably as a strong, enforceable privacy and civil-rights measure that returns control over personal data to individuals and constrains exploitative practices by powerful companies and data brokers.

The explicit coverage of generative AI training and AI-generated content that imitates individuals aligns with concerns about unauthorized exploitation and harms from synthetic content.

The private right of action, treble-profits remedy, ban on arbitration clauses for these claims, and strict disclosure requirements are seen as necessary enforcement tools to make consent meaningful.

Leans supportive
Centrist60%

A centrist would likely view the bill as a serious effort to strengthen consumer privacy and address real problems with AI, but would also have concerns about clarity, implementation costs, and economic effects.

They would appreciate the emphasis on clear consent and transparency while worrying that broad definitions and strong remedies could generate a wave of litigation and compliance burdens that might slow innovation or impose costs on consumers or small businesses.

They would look for clearer statutory definitions, safe harbors for good-faith actors and researchers, and mechanisms to limit frivolous suits or manage litigation volume.

Split reaction
Conservative20%

This persona would likely be skeptical or opposed, viewing the bill as an expansive federal tort that risks imposing heavy litigation and compliance costs on businesses, chilling innovation in AI, and undermining contractual freedom by invalidating predispute arbitration and class-waiver provisions.

While some conservatives might welcome stronger property-like protections for individuals’ copyrighted content, many would be concerned about federal overreach into commercial data practices and the potential for a proliferation of lawsuits.

They would emphasize narrower, technology‑neutral rules, preservation of arbitration, and clear limits to liability.

Likely resistant
04 · Can it pass?

The path through Congress.

Introduced

Reached or meaningfully advanced

Committee

Reached or meaningfully advanced

Floor

Still ahead

President

Still ahead

Law

Still ahead

Passage likelihood25/100

Content indicates a high-impact, pro-consumer privacy approach with strong private remedies and industry-facing restrictions (no arbitration/class-waiver), which historically provokes concentrated opposition from affected sectors and generates complex legal and economic questions. The bill lacks compromise features (sunset, pilot, narrow carve-outs) that typically help broad, novel liability regimes clear both chambers, so—judged on content and usual legislative patterns—its chance of enactment is limited unless substantially amended or folded into a larger, negotiated package.

Scope and complexity
52%
Scopemoderate
52%
Complexitymedium
Why this could stall
  • How stakeholder lobbying (tech industry, consumer groups, state attorneys general, copyright owners) will shape revisions or build coalitions for or against the bill.
  • Whether Congress would prefer statutory private causes of action (as here) versus agency-driven rulemaking or a federal preemption model to address AI/data issues; the choice of enforcement mechanism materially affects passage dynamics.
05 · Recent votes

Recent votes on the bill.

No vote history yet

The bill has not accumulated any surfaced votes yet.

06 · Go deeper

Go deeper than the headline read.

Included on this page

Scope and definitions: Liberals emphasize broad protection of individuals and AI-specific coverage; conservatives worry the definitions are…

Content indicates a high-impact, pro-consumer privacy approach with strong private remedies and industry-facing restrictions (no arbitratio…

Unlocked analysis

Relative to its intended legislative type, this bill is a well-focused substantive statute that clearly creates a federal tort, defines core terms, and specifies remedies and certain consent/disclosure rules. It explici…

Go beyond the headline summary with full stakeholder mapping, legislative design analysis, passage barriers, and lens-by-lens tradeoff breakdowns.

Perspective breakdownsPassage barriersLegislative design reviewStakeholder impact map
Open full analysis