The Stop Spying Bosses Act establishes new federal rules to limit how employers collect, use, and share data about their employees and job applicants. This legislation directly affects private businesses with 11 or more workers, government agencies, and their employees by prohibiting the gathering of sensitive information such as biometric data, political views, or off-duty activities without a specific, disclosed business need. Key provisions require employers to clearly inform workers about what data is being collected and how it is used, grant employees the right to access and correct their personal records, and ban the sale of employee data to third parties. The bill also creates a new Worker Protection and Technology Division within the Department of Labor to oversee compliance and provides legal protections for workers who report violations, including the right to sue for damages and prohibiting forced arbitration for such disputes.
The Health and Location Data Protection Act of 2026 prohibits data brokers from buying, selling, or sharing specific types of personal information, including an individual's health data and location history. This ban applies to any entity that resells data it did not collect directly from the person, though it allows exceptions for actions compliant with existing HIPAA rules, newsworthy reporting, and disclosures where the individual has given valid consent. The Federal Trade Commission is tasked with defining exactly what counts as "data" and issuing final rules within 180 days of the law's enactment. Violations of these restrictions can lead to enforcement actions by the FTC, state attorneys general, or private individuals, potentially resulting in civil penalties of up to 15 percent of the violator's annual revenue. The legislation also includes a funding provision that appropriates $1 billion to the FTC for fiscal year 2027 to support its work under this act.
This bill strengthens privacy protections for U.S. citizens and residents by restricting how federal intelligence agencies can use warrantless data collection tools. It specifically limits the ability of government officers to search or access communications unless there is a significant foreign intelligence purpose or an immediate emergency involving threats to life. The legislation also requires agencies to create detailed electronic records for every search and access, ensuring these activities are documented and reviewed by oversight bodies. Additionally, the bill extends the expiration date for a key section of the Foreign Intelligence Surveillance Act by nine months to March 12, 2027.
The Open Courts Act of 2026 creates a single, modernized online system to store and display public records for most federal courts in the United States. This centralized platform will automatically make court documents, audio recordings, and opinions available to the public immediately upon filing, while also offering features like searchable databases, email notifications for case updates, and permanent links for easy access. To help fund the development and maintenance of this new system, the bill introduces a fee structure that charges higher rates for high-volume users and government agencies while keeping basic access free for everyone. Additionally, the law sets strict standards for digital accessibility, cybersecurity, and data privacy, and requires regular audits to ensure the system meets user needs and remains secure.
The Subpoena Abuse Prevention Act restricts how federal agencies can use administrative subpoenas to obtain phone and app records from service providers. It requires agencies to identify a specific person or account before requesting data, bans subpoenas aimed at investigating or retaliating against constitutionally protected activities like free speech, and mandates that agencies certify the subpoena's legitimate purpose. The law also allows service providers to notify customers about the subpoena and consult with lawyers, unless a court order specifically prevents such notification. Additionally, federal agencies must publicly report annually on the number of subpoenas issued and the total accounts affected.
This bill directs the Federal Aviation Administration to upgrade its system for submitting Form 337, which is used to record major aircraft repairs and alterations. The key changes allow authorized users to voluntarily submit these forms digitally and enable third-party software to connect securely to the FAA's filing system. To protect privacy and security, the law mandates strict data controls, prohibits the use of personal information for commercial purposes, and ensures that no new reporting requirements are added for aircraft owners or mechanics.
The Email Privacy Act amends federal law to clarify how electronic communication providers must handle user data disclosures and government requests. It changes the definition of when a provider can share information, ensuring that voluntary disclosures are limited to the people involved in the communication or their agents, and it updates the terminology used to describe how data is stored. The bill also modifies the rules for government access, requiring warrants for obtaining the contents of stored communications and allowing providers to notify users about certain warrants and legal requests. Additionally, the legislation includes specific exceptions for communications related to public advertisements and ensures that the act does not restrict Congress's power to issue subpoenas.
The You Own the Data Act (YODA) establishes new federal rules requiring major online platforms and data brokers to give users greater control over their personal information. Covered entities, defined as large websites with over 100 million users or data brokers generating significant revenue from user data, must obtain written consent before sharing contact lists and allow users to access, correct, delete, or export their data within 90 days. The bill also mandates that these companies stop tracking cookies without permission, limit data retention to 60 days for browsing and biometric data, and provide clear privacy notices in under 1,000 words. Enforcement is handled by the Federal Trade Commission and state attorneys general, while individuals can sue companies for violations and receive damages of up to $750 per incident.
The CHATBOT Act establishes new federal rules requiring companies that provide open-ended artificial intelligence chatbots to implement strict privacy protections and parental controls for users under the age of 18. Under this legislation, platforms must create "family accounts" for children under 13 and obtain verifiable parental consent before allowing teens to create their own accounts, while also mandating the deletion of personal data if these requirements are not met. The bill further requires that default settings on these accounts prioritize child safety by limiting screen time, disabling financial transactions, and preventing the chatbot from generating unsolicited outputs. Companies are prohibited from using the personal data of children and teens for targeted advertising, and the Federal Trade Commission is authorized to enforce these provisions as unfair or deceptive practices. Additionally, the Act mandates a study by the National Science Foundation on the social impacts of AI chatbots on young people and requires a report from the Government Accountability Office to evaluate the law's effectiveness.
This bill establishes a new Office of Urban Agriculture and Innovative Production within the Department of Agriculture to support farming methods like hydroponics and controlled-environment agriculture. It creates a competitive grant program that provides funding to nonprofits, local governments, Tribal organizations, and schools to help urban farmers navigate regulations, access land, and improve food availability in underserved areas. Additionally, the legislation updates federal data collection requirements to include modern farming technologies and allocates specific funding amounts to support these initiatives from 2026 through 2030.
