The PRIVACY Act restricts Federal law enforcement agencies from accessing surveillance data collected by State or local agencies without a warrant issued by a Federal judge. It establishes a "Jurisdictional Wall List" maintained by the Attorney General that includes technologies like automated license plate readers and long-range microphones, prohibiting the use of Federal funds to purchase these specific devices. While the bill allows for limited exceptions in emergencies or with consent, it mandates strict rules on data retention, requiring agencies to delete most collected information within 30 days unless it becomes evidence in an active prosecution. Additionally, the legislation bans the use of this data to monitor individuals exercising First Amendment rights and requires regular reporting to Congress on how these surveillance tools are utilized.
The Language Access for All Act of 2026 requires all federal agencies to ensure individuals with limited English proficiency can meaningfully access government programs and services. To achieve this, agencies must translate vital documents into frequently encountered languages, add multilingual features to digital systems, and provide oral interpretation services, while also establishing a dedicated Language Access Coordinator in each agency. The bill mandates the creation of detailed language access plans and technical standards that cover both traditional communication methods and artificial intelligence tools, ensuring that AI is used only to assist rather than replace human interpreters. A new public complaint system will be established to track barriers to access, and agencies will be required to submit their plans and annual compliance reports to the Attorney General and Congress. Noncompliance with these requirements will be treated as discrimination under Title VI of the Civil Rights Act, allowing the Department of Justice to investigate and enforce the law.
The Conversational AI Services Act establishes new safety and transparency rules specifically for companies offering chatbot services to users under 18. It requires operators to clearly inform minors that they are interacting with artificial intelligence and prohibits the use of unpredictable rewards to encourage excessive engagement. The bill also mandates that these services cannot generate sexually explicit content, falsely claim to be human or sentient, or simulate romantic relationships with minors, while also requiring tools for parents to manage screen time. Additionally, the law compels chatbots to provide crisis resources when users discuss self-harm and forbids them from pretending to offer professional mental health advice. The Federal Trade Commission is designated to enforce these provisions, with the rules taking effect one year after the bill is enacted.
This bill, known as the Cyber Letters of Marque and Reprisal Act, authorizes the President to issue official commissions to private individuals or companies, allowing them to conduct specific cyber operations against foreign entities identified as cyberthreats. Under these commissions, private actors could perform tasks such as collecting intelligence, seizing stolen digital assets, and disrupting malicious infrastructure outside U.S. borders, provided they do not target American citizens or organizations. To participate, recipients must post a security bond, maintain detailed activity logs for at least five years, and may be required to forfeit a portion of recovered funds to support a bounty program for future operations. The legislation also grants holders immunity from lawsuits for actions explicitly authorized by their commission and establishes a framework for awarding bounties to both commissioned agents and private informants who assist in recovering funds from cybercriminals.
The RESILIENCE Act of 2026 directs the Cybersecurity and Infrastructure Security Agency to launch a one-year pilot program that trains local government officials on assessing security risks at critical infrastructure facilities. The bill also requires the agency to create clearinghouses where owners and operators of critical infrastructure can access security guidance and best practices developed by the agency or trusted sources. Additionally, the legislation mandates that the agency produce annual public reports detailing its outreach efforts to these infrastructure owners across various regions and sectors. The act clarifies that these new requirements do not exempt the agency from existing federal civil rights laws.
The REDACT Act allows individuals whose private information was improperly disclosed in documents released under the Epstein Files Transparency Act to sue the federal government. This law creates a private right of action that lets victims file civil lawsuits against federal officers or agencies if they fail to redact personally identifiable information or medical files that would constitute an unwarranted invasion of privacy. If a victim wins the lawsuit, they can receive damages of at least $50,000 for each violation, plus reimbursement for legal fees and court costs. The act also waives the United States' sovereign immunity for these specific cases and sets a five-year deadline for filing such claims, with the provisions taking effect on November 19, 2025.
The Stop TNR Act of 2026 establishes a formal definition for transnational repression, which covers foreign government efforts to harass, threaten, or harm individuals in the United States, including the use of cyberattacks and artificial intelligence. This legislation mandates that crimes involving such activities face a mandatory sentencing enhancement of up to 10 years in prison and fines of up to $100,000. To enforce these rules, the bill requires the Attorney General to centralize the oversight of related investigations and prosecutions within the FBI and the National Security Division of the Department of Justice. Additionally, the act directs federal agencies to produce annual public reports detailing incidents of repression and outlines a strategy for using artificial intelligence to investigate and counter these threats.
This bill creates a new administrative account for the Railroad Retirement Board to manage funds specifically for its operations and technology upgrades. It establishes strict limits on how much money can be moved into this account between 2027 and 2031, based on a percentage of benefits paid or investment trust amounts, while also setting aside millions of dollars annually for modernizing outdated computer systems. Additionally, the bill requires the Government Accountability Office to produce reports reviewing the Board's efforts to update its legacy IT systems and consult with various stakeholders, including railroads and unions.
The UNLOCK AUKUS Act modifies existing export control rules to allow the transfer of specific defense articles and services under the AUKUS partnership. By amending the Arms Export Control Act, the bill removes certain restrictions that previously limited what can be shared between partner nations. This change directly affects the U.S. government's ability to share advanced military technology with allies in the AUKUS alliance. The legislation aims to facilitate collaboration without altering the core legal framework governing defense exports.
The STOP Child Care Fraud Act aims to reduce fraud and improve oversight within the federal child care subsidy program by requiring stricter verification processes for parents and providers. States must now verify family income and assets without relying on self-certification, limit payment exceptions for absent children to six days per month, and use electronic tools to confirm attendance. The bill also mandates that states integrate data from various systems to detect suspicious patterns and requires the federal government to review state compliance at least every three years. Additionally, the law establishes a national database of disqualified providers, imposes stricter penalties for audit failures, and sets specific asset and income limits for eligible families.
