The Health Equity and Accountability Act of 2026 is a comprehensive legislative proposal designed to reduce health disparities by mandating standardized data collection on race, ethnicity, gender identity, and socioeconomic status across federal health programs. The bill requires the Department of Health and Human Services to establish new commissions and task forces focused on preventing bias in artificial intelligence and ensuring equitable data reporting during public health emergencies. It also expands access to care for underserved populations by removing citizenship barriers to Medicaid, increasing funding for minority-serving institutions, and requiring culturally and linguistically appropriate services from federally assisted health providers. Additionally, the legislation addresses specific disease disparities through targeted research grants and mandates that drug manufacturers investigate and report on racial or ethnic differences in drug safety and effectiveness.
The People-First Chatbot Act imposes strict privacy and safety regulations on companies that create or distribute AI chatbots, requiring them to obtain explicit user consent before using personal data for training or advertising purposes. The bill mandates that providers clearly disclose when users are interacting with an AI rather than a human, prohibit the sale of chat logs, and limit data retention to five years unless required by law. Additionally, companies must conduct monthly risk assessments for potential harms such as emotional dependence or compulsive usage, with specific safeguards required to protect minors from features that could cause significant injury. Enforcement is handled by the Federal Trade Commission, while state attorneys general and private individuals are granted the right to file lawsuits against providers who violate these provisions.
The Protecting Americans from Doxing and Political Violence Act requires government agencies to remove the personal contact details, home addresses, and financial information of Members of Congress, their family members, and designated staff from public records within 72 hours of a written request. The bill also prohibits data brokers from knowingly selling or trading this private information for any individual in the United States and mandates that other online platforms take down such data if the affected person submits a takedown notice. While these protections apply broadly to prevent doxing, the law includes exceptions that allow the continued publication of information related to news stories, matters of public concern, or records required by federal election laws.
The Smart Meter Data Privacy Protection Act prohibits state-regulated electric utilities that are not wholly owned by U.S. persons from selling or commercially monetizing personal consumption data collected via smart meters, restricting such use to specific operational needs like billing and grid reliability. The bill requires these utilities to submit annual reports to the Federal Trade Commission detailing what data was collected, how it was used, and with whom it was shared. If a utility violates these privacy rules, the FTC can order the company to credit affected customers an amount equal to three times the revenue generated from that unauthorized use. State attorneys general are also granted the authority to sue on behalf of residents to enforce compliance or seek damages, while the FTC is tasked with establishing security standards for data retention.
The Halt Abusive Internet Lawsuits Act of 2026 prohibits federal and state legal claims related to wiretapping or eavesdropping when information is collected for commercial digital activities. This applies to practices such as using cookies, pixels, chatbots, and analytics tools to facilitate sales, marketing, or customer interactions. The bill directly affects businesses and service providers that use these standard digital commerce tools by shielding them from specific privacy-related lawsuits. Additionally, any existing legal actions based on these grounds would be required to stop once the law is enacted.
The RECOVER PII Act expands identity protection coverage for individuals affected by federal data breaches, extending the duration of such coverage to the remainder of their lives and increasing insurance limits to at least $5 million. It also allows federal agencies to use appropriated funds to fully reimburse employees or contractors for costs associated with privacy-enhancing services, such as software or hardware that reduces personal data risks. These changes aim to provide long-term security support and financial assistance to victims of government data incidents without specifying which agencies or individuals are directly impacted.
This bill directs the Attorney General to create guidance for local and state governments on establishing voluntary registries for individuals at risk of receiving false emergency calls, commonly known as swatting. The guidance will outline best practices for data privacy, secure technology integration, and training law enforcement to use registry information to de-escalate dangerous situations without mandating a federal registry. Additionally, the bill allows the Justice Department to provide technical assistance and funding to help communities implement these safety measures while ensuring that participation remains optional and that officer safety is not compromised.
The Fourth Amendment Restoration and Protection Act of 2026 restricts how U.S. intelligence agencies can surveil and use information about American citizens. It prohibits officials from conducting electronic surveillance, physical searches, or data collection specifically targeting United States persons under the Foreign Intelligence Surveillance Act and Executive Order 12333. Additionally, the bill bans government agencies from using search terms related to Americans to query intelligence databases and generally forbids using such collected information as evidence against those individuals in legal proceedings. The only exception allows an American citizen who was surveilled to use that same information in their own defense during a criminal, civil, or administrative case.
The TOTAL Screen Time Act directs the National Institute of Standards and Technology to create a voluntary technical standard that allows parents and guardians to set screen time limits across various devices like phones, tablets, and computers. This standard must protect the privacy of minors by avoiding centralized data collection and unnecessary data sharing between devices while maintaining device cybersecurity. The bill requires the NIST Director to consult with government agencies, device developers, medical professionals, and advocacy groups before establishing the standard. Additionally, the Director must submit regular reports to Congress and the public detailing the progress of developing and adopting this standard until 2032.
The Health and Location Data Protection Act of 2026 prohibits data brokers from buying, selling, or sharing personal location and health information, while allowing exceptions for authorized disclosures, HIPAA-compliant activities, and newsworthy public interest reporting. The Federal Trade Commission is tasked with defining specific data categories and enforcing these rules, with penalties including civil fines up to 15 percent of a company's revenue and the ability for the FTC, state attorneys general, and private individuals to sue for violations. This legislation applies to entities that trade data collected from others rather than directly from individuals, and it preempts only state laws that require the disclosure of data this bill forbids.
