The PROTECT Act requires the Department of Homeland Security to share safety and data protection guidelines with government agencies and private organizations within a year of passing. These guidelines focus on how to securely handle personal information for law enforcement officers and employees, as well as steps they can take to stay safe. The law defines personal information broadly to include any data that can identify an individual, regardless of their citizenship status. This initiative aims to improve security practices across federal, state, local, and private sectors without changing existing legal requirements for data handling.
This bill requires federal crime control grants to include a certification that applicants have not improperly shared personal details about individuals involved in firearm transactions or background checks. It directly affects public agencies, private organizations, and local governments receiving funding from the Department of Justice, mandating they confirm they have protected sensitive data from accidental or intentional leaks. The law specifically defines "personally identifiable information" to include names, social security numbers, and biometric records to clarify what must be safeguarded. By adding these certification requirements to existing grant programs, the legislation aims to enforce stricter data privacy standards for those handling firearm-related records.
The Public Safety UAS Readiness Act establishes a grant program to help fire departments, law enforcement agencies, and emergency medical services train their personnel on operating drones for public safety missions. Funded by up to $10 million annually from 2026 to 2029, these grants can be used to develop training curriculums, purchase compliant drones, and cover administrative costs related to the programs. Recipients must submit detailed plans outlining their safety protocols, risk management strategies, and data privacy measures, with a priority given to agencies in high-risk areas or underserved regions that currently lack drone training capacity. To ensure quality, the act requires that training materials be maintained by recognized nonprofit organizations and mandates annual reporting on the number of trained personnel and drone deployments to Congress.
The Postal Data Privacy Act of 2026 restricts the use of mail covers by requiring governmental entities to obtain a court order before accessing postal records for criminal investigations. To qualify for such an order, authorities must provide specific facts demonstrating that the requested data is relevant and material to an ongoing case, while state laws prohibiting mail covers would override federal requirements. Additionally, the bill mandates that postal officials preserve relevant records for up to 180 days while a court order is being sought or renewed. These provisions directly affect federal and state law enforcement agencies as well as the United States Postal Inspection Service by establishing new procedural safeguards for accessing mail data.
The Subpoena Abuse Prevention Act restricts how federal government agencies can use administrative subpoenas to obtain phone and app records from service providers. It requires agencies to identify a specific individual by name or account details before requesting data and explicitly bans using these subpoenas to investigate or retaliate against constitutionally protected activities like free speech or religious exercise. The law also mandates that agencies certify the subpoena's legitimate purpose and allows service providers to notify customers about the request unless a court orders otherwise. Finally, the bill requires federal agencies to publicly report annually on the number of subpoenas issued and the total accounts affected.
This bill requires the Department of Defense to review and eventually ban contracts with retailers that use payment processing systems from specific countries deemed a national security risk, such as China, Russia, Iran, and North Korea. Effective January 1, 2027, the Defense Department will be prohibited from entering into agreements for payment equipment or services if those tools rely on technology developed, owned, or controlled by entities in these nations. The law defines covered systems broadly to include hardware, software, and firmware linked to these countries, aiming to prevent potential foreign access to sensitive military financial data. Retailers wishing to continue working with the Department of Defense must replace their payment processing infrastructure with systems that do not involve these restricted technologies.
This joint resolution seeks to formally disapprove a rule from the Bureau of Consumer Financial Protection that would have removed an earlier regulation about data security. The bill directly affects financial institutions by aiming to keep in place the 2022 requirement for stronger protection of sensitive consumer information. If passed, the rule attempting to withdraw the data security standards would have no legal effect, meaning the original data protection rules would remain active.
This bill, known as the HUD Data Privacy Act of 2026, restricts how the Department of Housing and Urban Development can share personal information with other agencies or third parties. It mandates that data collected from individuals receiving federal housing assistance be used solely to verify their eligibility for benefits or to determine the amount of aid they receive. The law includes specific exceptions for sharing deidentified data for research, ongoing criminal investigations, or preventing immediate threats to life, while explicitly prohibiting the use of this information for immigration enforcement purposes.
The SECURE Data Act establishes a comprehensive federal privacy framework that grants consumers specific rights to access, correct, delete, and opt out of the sale of their personal data, while requiring companies to provide clear privacy notices and implement reasonable data security measures. It directly affects large businesses and data brokers that process significant amounts of consumer information, mandating that these entities obtain explicit consent for sensitive data and prohibiting discrimination against individuals who exercise their privacy rights. The legislation creates a registration system for data brokers, allows for enforcement actions by the Federal Trade Commission and state attorneys general, and preempts conflicting state laws to ensure a uniform national standard.
The No Rigged Grocery Prices Act prohibits grocery stores and third-party delivery services from using a customer's personal data to raise prices for specific individuals. While the law allows for standard promotions, loyalty rewards, and objective cost differences like shipping fees, it bans dynamic pricing that targets consumers based on their personal information. Retailers must also inform customers if item availability changes or if prices are calculated by weight, and delivery services need explicit permission before swapping out grocery items. Violations of these rules would be treated as unfair business practices enforceable by the Federal Trade Commission. Additionally, the bill requires the Department of Labor to report on how the adoption of electronic shelf labels affects employment at grocery stores.
