My Body, My Data Act of 2025

The My Body, My Data Act of 2025 requires companies and services handling personal reproductive or sexual health information - such as health apps, clinics, or digital platforms - to only collect, retain, or share this data when strictly necessary for a service a person has requested. It gives individuals the right to access, correct, or delete their data easily (within 15 days, without fees), and mandates clear privacy policies explaining how data is used. The bill also prohibits companies from retaliating against people who exercise these rights, such as by charging higher prices or denying services. Enforcement will be handled by the Federal Trade Commission, with individuals able to sue for violations and seek penalties of up to $1,000 per violation per day.