This bill amends Pennsylvania's Unfair Trade Practices and Consumer Protection Law to explicitly ban "surveillance pricing," which is defined as setting customized prices for goods or services based on personal data gathered through technology like cameras, sensors, or third-party purchases. The legislation prohibits businesses from using such data to charge different prices to specific consumers unless they can prove the price difference is due to varying costs, public discounts available to broad groups like seniors or students, loyalty program rewards, or credit decisions based on standard credit reports. In addition to banning this practice, the bill increases civil penalties for violations to up to $3,000 per incident and allows individual consumers who suffer financial loss from these pricing tactics to file private lawsuits for damages.
This bill, known as the Shielding Information for Lawful and Ethical Disclosure Act, prevents Michigan government agencies from sharing large amounts of personal data with federal immigration officials without specific authorization. It defines "bulk disclosure" as transferring data on multiple people without reviewing each case individually and allows such sharing only if a court order exists, the transfer serves a specific law enforcement purpose, or it is immediately necessary to protect health and safety. The law applies to all state, county, and municipal departments and officers, while giving the state attorney general the power to seek court orders to stop illegal data sharing.
HB 6187 amends Michigan's Identity Theft Protection Act to update and clarify the definitions of key terms used throughout the law. The bill specifically revises how the statute defines "financial institutions" to ensure consistency with other state licensing laws and explicitly includes mortgage brokers and lenders under its protections. Additionally, it clarifies what constitutes a "security breach" by specifying that accidental access by employees acting in good faith does not count as a breach, and it expands the definition of "child or spousal support" to include various expenses like medical care and education. These changes aim to provide clearer guidance for businesses and individuals regarding data privacy and identity theft reporting requirements.
The Fourth Amendment Restoration and Protection Act of 2026 restricts how U.S. intelligence agencies can surveil and use information about American citizens. It prohibits officials from conducting electronic surveillance, physical searches, or data collection specifically targeting United States persons under the Foreign Intelligence Surveillance Act and Executive Order 12333. Additionally, the bill bans government agencies from using search terms related to Americans to query intelligence databases and generally forbids using such collected information as evidence against those individuals in legal proceedings. The only exception allows an American citizen who was surveilled to use that same information in their own defense during a criminal, civil, or administrative case.
The TOTAL Screen Time Act directs the National Institute of Standards and Technology to create a voluntary technical standard that allows parents and guardians to set screen time limits across various devices like phones, tablets, and computers. This standard must protect the privacy of minors by avoiding centralized data collection and unnecessary data sharing between devices while maintaining device cybersecurity. The bill requires the NIST Director to consult with government agencies, device developers, medical professionals, and advocacy groups before establishing the standard. Additionally, the Director must submit regular reports to Congress and the public detailing the progress of developing and adopting this standard until 2032.
The Health and Location Data Protection Act of 2026 prohibits data brokers from buying, selling, or sharing personal location and health information, while allowing exceptions for authorized disclosures, HIPAA-compliant activities, and newsworthy public interest reporting. The Federal Trade Commission is tasked with defining specific data categories and enforcing these rules, with penalties including civil fines up to 15 percent of a company's revenue and the ability for the FTC, state attorneys general, and private individuals to sue for violations. This legislation applies to entities that trade data collected from others rather than directly from individuals, and it preempts only state laws that require the disclosure of data this bill forbids.
