Data Care Act of 2023

The Data Care Act of 2023 requires online service providers (like social media apps, streaming platforms, and websites) to protect users' personal data. It mandates that companies securely store data, promptly notify users of breaches involving sensitive information, and avoid using data in ways that harm users or cause financial/physical harm. The law also restricts selling or sharing user data without strict contracts ensuring third parties follow the same security and privacy rules. These requirements apply to most major digital services collecting personal data, with enforcement by the Federal Trade Commission and state attorneys general. The law does not override existing privacy laws but adds new standards for data handling.