The TAKE IT DOWN Act makes it a crime to intentionally share intimate images or digital forgeries of people without their consent, with penalties of up to 2 years in prison for adults and 3 years for minors. It requires major online platforms to establish a 48-hour process for victims to request removal of such content, with platforms protected from liability when acting in good faith. The bill defines "digital forgery" as AI-generated content that appears authentic and applies to websites and apps primarily hosting user-generated content, excluding email services and broadband providers. The Federal Trade Commission will enforce these notice and takedown requirements. This legislation directly affects victims of nonconsensual intimate content, the platforms hosting such material, and individuals who distribute it.
S 3097, the Health Information Privacy Reform Act, updates privacy rules for health data by requiring new federal regulations that harmonize with existing HIPAA and HITECH standards. It directly affects healthcare providers, insurers, and technology companies handling health information by mandating clearer privacy rules, stricter breach notifications, and new requirements for patient access to records. Key provisions include requiring written consent for selling health data, banning HIPAA protections for wellness app data (like step counts), and clarifying when health data can be shared without patient permission. The bill also establishes standardized rules for de-identifying health data and requires companies to notify patients if their health data is no longer protected under HIPAA. These changes aim to strengthen patient control over health information while aligning with modern data practices.
This bill requires manufacturers to clearly disclose before purchase whether internet-connected consumer devices (like smart speakers or thermostats) contain a camera or microphone. It excludes devices consumers would expect to have such features, such as smartphones, laptops, or dedicated cameras. The Federal Trade Commission (FTC) will enforce this by treating violations as deceptive practices, allowing penalties under existing FTC rules. The law aims to give consumers transparent information about device capabilities at the point of sale.
The Consumer Safety Technology Act (S 2766) creates three key initiatives to enhance consumer safety through emerging technologies. Title I requires the Consumer Product Safety Commission to run a pilot program using artificial intelligence for tracking product injuries, identifying hazards, and monitoring online markets for recalled items, with a mandatory report to Congress afterward. Title II directs the Commerce Secretary to study how blockchain technology can prevent fraud in consumer transactions, including public input and a report on regulatory improvements. Title III mandates the Federal Trade Commission to report on its enforcement actions against deceptive practices involving digital tokens and recommend legislative changes to strengthen consumer protections in this growing market.
S 2850, the Protecting Legislators and Survivors of Sexual Assault and Domestic Violence from Doxing and Political Violence Act, would protect Members of Congress, their immediate family members, designated legislative employees, and survivors of domestic violence or sexual assault from having sensitive personal information publicly shared. The bill defines "covered information" to include home addresses, phone numbers, email addresses, social security numbers, license plate numbers, and details about children's schools or daily routines. It requires government agencies to remove this information from public records within 72 hours of a request and prohibits data brokers from selling or trading this information. Businesses and websites must also remove covered information upon request, with exceptions for news reporting and information voluntarily shared by the individual.
HR 3218, the Reproductive Data Privacy and Protection Act, requires law enforcement and government agencies to swear under oath that they will not use reproductive or sexual health information in investigations or legal proceedings. It amends federal wiretap laws (18 U.S.C. § 2518) and communication disclosure rules (18 U.S.C. § 2703) to mandate this protection. The bill defines "reproductive or sexual health information" broadly to include details about abortion, contraception, IVF, pregnancy, sexual health conditions, and related medical services. This directly affects law enforcement, courts, and service providers by legally restricting how sensitive health data can be used in investigations. The law aims to prevent government use of such data to target individuals seeking or providing reproductive care.
The SCAM Act requires online platforms that accept payment for advertisements to verify advertiser identities (including government ID and business documentation) and implement systems to detect and remove scam ads within 72 hours of reporting. It mandates platforms to conduct investigations, remove verified fraudulent ads within 24 hours, and maintain active impersonation detection programs. The law directly affects major social media and digital advertising platforms by imposing new verification and monitoring obligations to prevent deceptive ads targeting consumers. Enforcement falls to the Federal Trade Commission, treating violations as unfair or deceptive practices under existing law.
This bill would protect Members of Congress, their immediate family members, designated congressional employees, and candidates for Congress from having their personal information publicly disclosed. It requires government agencies to remove protected information - including home addresses, phone numbers, school schedules, and geolocation data - from public records within 72 hours of a request. The bill also prohibits data brokers and businesses from selling or displaying this protected information online without consent, with exceptions for news reporting and information voluntarily shared by the individual. Individuals affected by violations would have the right to seek legal action to enforce the law.
The SCREEN Act requires online platforms that create, host, or make available pornographic content for profit to implement age verification technology that prevents minors from accessing such content. Covered platforms must use technology to verify users' age and block access to content defined as "harmful to minors" - material that appeals to prurient interest, depicts sexual acts in a patently offensive way, and lacks serious value for minors. The Federal Trade Commission will enforce the law, requiring platforms to conduct regular audits, maintain reasonable data security for age verification information, and make their verification processes public. Platforms must comply with these requirements within one year of the bill's enactment, with the goal of protecting minors from exposure to online pornography.
The TLDR Act requires major online platforms (excluding small businesses) to provide simplified, accessible summaries of their terms of service. These summaries must appear at the top of terms pages and include key details like categories of user data processed, legal liabilities (e.g., arbitration clauses), historical terms changes, recent data breaches, and estimated reading time. Platforms must also display interactive data flow diagrams showing how user data is shared with third parties and provide full terms in an interactive format. Enforcement will be handled by the Federal Trade Commission under existing FTC Act provisions, with states allowed to pursue cases affecting 1,000+ residents.
