An outline of various bills and proposals in US Congress related to data privacy and protection that have emerged after the Cambridge Analytica scandal
In April, Mark Zuckerberg was called before the Senate Commerce and Judiciary committees to take responsibility for Cambridge Analytica.
Context & Ripple Effects
This roundup lands at the end of an eight-month arc that began when two former FTC officials argued Facebook may have violated its 2011 privacy consent decree, putting the company's existing legal obligations — not just its reputation — on the table. Bipartisan pressure followed quickly, with lawmakers on both sides of the aisle demanding Zuckerberg testify while he and Sheryl Sandberg stayed silent (the public standoff), and the UK Parliament's DCMS committee issuing its own summons.
The pivot from scandal to legislation is what makes this piece matter: after Zuckerberg's April appearance before the Senate Commerce and Judiciary committees (the second hearing) and the policy questions Wired flagged for Congress — off-Facebook tracking, growth-over-privacy incentives, anti-competitive behavior — the article catalogs how those hearing themes are being converted into actual bills and proposals.
First-order effects
- Facebook now faces a legislative pipeline rather than a single hearing: multiple concurrent bills mean its data practices could be governed by new statutory rules layered on top of the consent-decree enforcement question already raised by former FTC officials.
- Lawmakers who pressed Zuckerberg on off-Facebook tracking and growth-over-privacy incentives in April now have a concrete vehicle — drafted proposals — to turn those hearing lines into enforceable requirements.
Second-order effects
- A patchwork of competing bills forces platform companies to lobby for whichever proposal is narrowest, shifting spending from compliance teams to Washington influence operations while the FTC's consent-decree case looms as leverage.
- Bipartisan agreement on the problem but not the remedy means advertisers and data brokers face regulatory uncertainty over what user data they can legally receive from platforms, pricing risk into every data-sharing contract signed before a bill passes.
Third-order effects
- If even one of these proposals becomes law, the US moves from consent-decree-by-consent-decree enforcement toward a general federal privacy statute, ending the era where Facebook's obligations were defined by a 2011 settlement rather than legislation.
- The pattern — scandal, CEO testimony, bill drafts — establishes a repeatable playbook for how Congress responds to platform data abuses, raising the baseline cost of any future incident for every major consumer-data company.
The trend: The Cambridge Analytica scandal is converting US platform oversight from ad hoc FTC consent decrees toward comprehensive federal data-privacy legislation.