Consumer Data Privacy and Security Act of 2026

This bill establishes a comprehensive federal framework for consumer data privacy and security, creating a uniform set of rules that would preempt most state privacy laws. It requires businesses that collect personal data to obtain consent from individuals before gathering or processing their information, with stricter requirements for sensitive data like health records and financial details. Covered entities must provide clear privacy policies, allow individuals to access, correct, or delete their data, and implement security programs to protect information from unauthorized access. The Federal Trade Commission would enforce these rules and has authority to impose civil penalties on violators, while also receiving additional funding to carry out enforcement duties.