With Republicans set to take over the House in 2023, a look at the odds of passing the bipartisan American Data Privacy and Protection Act in a divided Congress
Context & Ripple Effects
Federal privacy legislation has now been assessed under two opposite political configurations. When Democrats won Georgia's Senate seats in early 2021, analysts sized up tech bills including a federal privacy law under unified Democratic government; by mid-2022, the bipartisan American Data Privacy and Protection Act was being framed as the strongest shot yet at a real US data protection law (Wired's July explainer).
Today's piece closes that arc: with Republicans taking the House in 2023, the same bill is being re-scored against divided government. The throughline matters because the bill's core pitch — one federal standard replacing a growing state patchwork — depends entirely on whether a split Congress can move it at all.
First-order effects
- The bill's path now runs through Republican-controlled committees and a new House agenda, so its bipartisan co-sponsors must re-sell preemption and enforcement provisions to leadership that did not set the current markup.
- Companies banking on a single federal standard to replace state privacy regimes stay in limbo for at least another session, keeping compliance costs tied to the state-by-state map.
Second-order effects
- Absent federal movement, state legislatures and attorneys general remain the de facto regulators, raising the cost divergence between multistate operators and regional ones.
- Divided-government gridlock on ADPPA raises the premium on any narrower, bipartisan carve-out that can pass — making targeted provisions more attractive to negotiators than the comprehensive bill.
Third-order effects
- If the pattern holds — privacy legislation viable under unified government, stalled under divided government — the US converges on a durable structure where states and sectoral regulators set the rules and a comprehensive federal law stays perpetually one election away, as later successor drafts in the coverage suggest.
The trend: Comprehensive US federal privacy law keeps getting rescored with each shift in congressional control, leaving state regulation as the default while Congress restarts the effort every cycle.