HR 7363, the ICE Out of Our Faces Act, prohibits U.S. Customs and Border Protection (CBP) and U.S. Immigration and Customs Enforcement (ICE) officers from using facial recognition, voice recognition, or other biometric surveillance technology for immigration enforcement. It directly affects CBP and ICE officers, including those deputized under Section 287(g), by banning the acquisition, possession, or use of such technology within the U.S. The bill requires immediate deletion of all existing biometric data collected by these agencies within 30 days of enactment and makes illegally obtained data inadmissible in court. Individuals harmed by violations can sue the federal government for damages, while officers violating the law face retraining, suspension, or termination.
HR 1188 establishes a federal grant program to help state and local law enforcement agencies purchase body-worn cameras and implement camera programs. To qualify for funding, agencies must adopt public policies on camera use, secure data storage, privacy protections, and strict limits on facial recognition technology (requiring judicial authorization for its use). The bill mandates collecting and reporting demographic data on use-of-force incidents (by race, gender, etc.) and prohibits sharing footage without legal justification. It allocates $30 million annually for fiscal years 2026-2028, with requirements for public policy access, data security, and annual reporting to the federal government.
S 2117, the Preventing Deep Fake Scams Act, establishes a federal Task Force to study deep fake threats in financial services. The Task Force, made up of key financial regulators (Treasury, Federal Reserve, FDIC, CFPB, and others), will report to Congress within one year on how banks and credit unions protect consumers from AI-driven fraud, define AI terms, identify risks, and recommend best practices and regulations. It does not create new laws but requires a detailed study of deep fake scams targeting voice banking and consumer data. The bill directly affects financial institutions, consumers, and regulators by mandating a formal review of AI security risks and solutions.
The App Store Accountability Act requires major app stores (those with over 5 million U.S. users) to verify the age of new users and obtain parental consent for minors before they can download apps or make in-app purchases. App stores must clearly display age ratings, protect age verification data, and notify parents of significant changes to apps used by minors. App developers must verify user age through the app store's system, cannot enforce contracts against minors without parental consent, and must display age ratings in plain language. The Federal Trade Commission will enforce these requirements, with states also having authority to take action in certain cases.
HR 6292, the Don’t Sell Kids’ Data Act of 2025, prohibits data brokers from collecting, using, selling, or sharing the personal information of children (under 13) and teens (13-18). It requires data brokers to delete such data upon request from the teen, parent, or guardian and establish a clear process for these requests within 10 days. The law empowers the Federal Trade Commission (FTC) to enforce the ban as a deceptive practice, allows states to sue on behalf of residents, and lets individuals file lawsuits for violations - awarding at least $1,000 per violation. The bill directly affects data brokers and aims to protect minors’ privacy by restricting how their personal information is handled online.
The LIFE with AI Act establishes a "Golden Seal of Excellence in Student Data Privacy" for schools that implement robust parental notification systems for educational technology. It requires schools to use real-time consent systems ("instant verification technology") for parental approval of student data use, simplifies opt-out processes for directory information, and prohibits using student photos for facial recognition without consent. The bill also creates new requirements for schools to review third-party educational technology contracts for privacy compliance and establishes a Privacy Technical Assistance Center to help schools navigate data privacy rules. These changes primarily affect elementary and secondary schools, local educational agencies, and educational technology providers, with the goal of strengthening student data privacy protections while enabling responsible AI use in education.
The Unsubscribe Act of 2025 protects consumers from unexpected charges by regulating "negative option" contracts, where services automatically renew unless the consumer actively cancels (e.g., free trials turning into paid subscriptions). It requires merchants to clearly disclose all terms before charging, obtain explicit consent (like a checkbox), and provide a simple cancellation method - such as a direct online link - before the first payment. For free-to-paid contracts, merchants must detail introductory pricing, future recurring costs, and total estimated charges before the first billing. The Federal Trade Commission and state attorneys general will enforce these rules, with penalties for violations, ensuring consumers have transparent choices and easy cancellation options.
The RESET Act prohibits social media platforms from allowing users under 16 to create or maintain accounts. Platforms must identify existing minor accounts within 60 days of enactment, notify users within 180 days, and terminate accounts within 30 days of notification. Upon termination, platforms must delete all personal data collected from minors and provide a readable, portable copy of that data for 90 days after termination. Enforcement is handled by the Federal Trade Commission and allows states to pursue legal action for violations.
HR 4819, the Click to Cancel Act of 2025, makes the Federal Trade Commission's November 2024 "Negative Option Rule" permanent law. This rule directly affects businesses that use automatic renewal subscriptions (like streaming services or software) and their consumers, requiring clear, easy cancellation options. The bill codifies the FTC's existing rule, treating violations as unfair or deceptive practices under the FTC Act, and grants the FTC full authority to enforce it using existing powers and penalties. The key change is that businesses must now explicitly obtain consumer consent for recurring charges and provide straightforward cancellation methods, moving beyond the previous rule-based guidance.
This bill prohibits the Department of Veterans Affairs (VA) from sharing veterans' personal data - including health, financial, and identifying information - with the U.S. DOGE Service (Department of Government Efficiency). It bans any special government employee from accessing or using veteran data for commercial purposes or non-governmental reasons, requiring them to return all data upon termination. The law specifically protects sensitive information like medical records, Social Security numbers, and biometric data from unauthorized use or retention. It directly affects VA data-sharing practices and ensures veteran privacy by restricting access to their personal information.
