The NO FAKES Act of 2026 establishes a new property right for individuals to control the creation and use of their digital voice and visual likeness replicas, extending protection to both living people and their heirs for up to 70 years after death. The bill requires companies and platforms that distribute these digital replicas or sell tools to create them to obtain explicit authorization from the right holder, while also setting up a notification system for online services to remove unauthorized content. Additionally, the law preempts existing state laws regarding digital likeness rights and includes specific penalties and safe harbor protections for platforms that comply with the new requirements.
The You Own the Data Act (YODA) establishes new federal rules requiring major online platforms and data brokers to give users greater control over their personal information. Covered entities, defined as large websites with over 100 million users or data brokers generating significant revenue from user data, must obtain written consent before sharing contact lists and allow users to access, correct, delete, or export their data within 90 days. The bill also mandates that these companies stop tracking cookies without permission, limit data retention to 60 days for browsing and biometric data, and provide clear privacy notices in under 1,000 words. Enforcement is handled by the Federal Trade Commission and state attorneys general, while individuals can sue companies for violations and receive damages of up to $750 per incident.
The GUIDANCE Act of 2026 restores 23 specific rules and policies previously withdrawn by the Bureau of Consumer Financial Protection. These provisions directly affect consumers, financial institutions, and debt collectors by reinstating protections related to credit reporting, debt collection practices, lending discrimination, and data security. The bill effectively reverses recent administrative actions, ensuring that regulations covering medical debt, overdraft fees, and whistleblower protections remain in force.
The PROTECT Act requires the Department of Homeland Security to share safety and data protection guidelines with government agencies and private organizations within a year of passing. These guidelines focus on how to securely handle personal information for law enforcement officers and employees, as well as steps they can take to stay safe. The law defines personal information broadly to include any data that can identify an individual, regardless of their citizenship status. This initiative aims to improve security practices across federal, state, local, and private sectors without changing existing legal requirements for data handling.
This bill directs the National Institute of Standards and Technology to create task forces that develop technical standards for labeling content created by artificial intelligence. These groups will work with technology companies, social media platforms, and privacy experts to establish methods for watermarking images and videos, as well as tagging text, to help users distinguish AI-generated material from human-made content. The legislation requires these task forces to include representatives from various sectors, including developers, media organizations, and labor groups, and mandates regular reporting to Congress on their progress. Additionally, the bill emphasizes the need to protect user privacy when implementing these new tracking and labeling systems.
This bill requires federal crime control grants to include a certification that applicants have not improperly shared personal details about individuals involved in firearm transactions or background checks. It directly affects public agencies, private organizations, and local governments receiving funding from the Department of Justice, mandating they confirm they have protected sensitive data from accidental or intentional leaks. The law specifically defines "personally identifiable information" to include names, social security numbers, and biometric records to clarify what must be safeguarded. By adding these certification requirements to existing grant programs, the legislation aims to enforce stricter data privacy standards for those handling firearm-related records.
The Postal Data Privacy Act of 2026 restricts the use of mail covers by requiring governmental entities to obtain a court order before accessing postal records for criminal investigations. To qualify for such an order, authorities must provide specific facts demonstrating that the requested data is relevant and material to an ongoing case, while state laws prohibiting mail covers would override federal requirements. Additionally, the bill mandates that postal officials preserve relevant records for up to 180 days while a court order is being sought or renewed. These provisions directly affect federal and state law enforcement agencies as well as the United States Postal Inspection Service by establishing new procedural safeguards for accessing mail data.
This joint resolution seeks to formally disapprove a rule from the Bureau of Consumer Financial Protection that would have removed an earlier regulation about data security. The bill directly affects financial institutions by aiming to keep in place the 2022 requirement for stronger protection of sensitive consumer information. If passed, the rule attempting to withdraw the data security standards would have no legal effect, meaning the original data protection rules would remain active.
This bill, known as the Protecting Consumers from Deceptive AI Act, aims to combat the spread of misleading deepfakes by requiring clear labeling for content created or significantly altered by artificial intelligence. It mandates that developers of AI applications embed machine-readable watermarks and metadata into audio and visual files to identify their AI origins, while also requiring online platforms to display this information to users. To support these efforts, the legislation directs the National Institute of Standards and Technology to form task forces that will develop technical standards for content verification and establish guidelines for privacy and interoperability. Enforcement of these labeling requirements will be handled by the Federal Trade Commission, which can penalize violations as unfair or deceptive practices and may approve self-regulatory guidelines to help companies achieve compliance.
This bill, known as the HUD Data Privacy Act of 2026, restricts how the Department of Housing and Urban Development can share personal information with other agencies or third parties. It mandates that data collected from individuals receiving federal housing assistance be used solely to verify their eligibility for benefits or to determine the amount of aid they receive. The law includes specific exceptions for sharing deidentified data for research, ongoing criminal investigations, or preventing immediate threats to life, while explicitly prohibiting the use of this information for immigration enforcement purposes.
