Contact Congress about H.R. 4108: Protecting Americans' Data From Foreign Surveillance Act of 2023

Companies could need U.S. approval before sending large amounts of Americans’ sensitive data overseas. The strictest rules would apply to countries the Commerce Department treats as higher risk.

Modern Action explains what the legislation does, helps you choose whether to support, oppose, or ask for changes, and drafts a message tied to the bill, your stance, and the elected officials who can act on it.

Protecting Americans' Data From Foreign Surveillance Act of 2023 is a House bill in Congress.

Who this affects: This bill mainly affects organizations that hold or move large amounts of personal data about people in the United States. That includes tech companies, data brokers, cloud services, app developers, health platforms, financial platforms, researchers, and international service providers. It could also affect people in the United States, and U.S. citizens and permanent residents abroad, by changing how their sensitive data may be sent overseas in bulk.

Why this matters: Large data sets can help foreign governments track, target, or study people in ways that may harm U.S. security. This bill tries to reduce that risk by adding government review before covered data moves abroad in bulk. Its real effect would depend on the rules Commerce writes, including the data categories, size limits, country lists, and license decisions.

Key provisions in H.R. 4108

• The Commerce Secretary, working with other federal agencies, must name the types of personal data that could create national security risks in bulk. This means data that foreign governments or foreign adversaries could use against the United States.
• Commerce must publish the first list of covered data types within 1 year after the bill becomes law. It must review and update that list at least every 5 years.
• Commerce must set yearly size limits for covered data exports. The limits must cover between 10,000 and 1,000,000 people per person per year, with stricter rules for very large data holders.
• Starting 18 months after the bill becomes law, Commerce must apply export-control rules to covered data transfers above the limits. Those rules include license requirements.
• Commerce must create two country lists within 1 year and review them at least every 5 years. One list is for higher-risk countries where licenses are usually denied, and one is for trusted countries where licenses cannot be required for covered data.

How Modern Action helps you take action on H.R. 4108

You do not have to start with a blank letter. Modern Action turns the bill, your position, and the relevant congressional context into a message you can edit and send. The goal is to make contacting Congress clear, specific, and useful without forcing you to parse bill text or figure out the right office on your own.

Questions people ask about H.R. 4108

What is H.R. 4108?

Companies could need U.S. approval before sending large amounts of Americans’ sensitive data overseas. The strictest rules would apply to countries the Commerce Department treats as higher risk.

How do I support or oppose H.R. 4108?

Choose support, oppose, or ask for changes on Modern Action. The action flow drafts the message for you and keeps the wording tied to this bill.

Who should I contact about H.R. 4108?

Modern Action uses your location to route the action to the congressional offices relevant to the bill and your representation.

How does Modern Action help me act on H.R. 4108?

Modern Action gives you bill-specific context, lets you choose support, opposition, or changes, and drafts a message from your position and reasons.