The Email Privacy Act amends federal law to clarify how electronic communication providers must handle user data disclosures and government requests. It changes the definition of when a provider can share information, ensuring that voluntary disclosures are limited to the people involved in the communication or their agents, and it updates the terminology used to describe how data is stored. The bill also modifies the rules for government access, requiring warrants for obtaining the contents of stored communications and allowing providers to notify users about certain warrants and legal requests. Additionally, the legislation includes specific exceptions for communications related to public advertisements and ensures that the act does not restrict Congress's power to issue subpoenas.
The NO FAKES Act of 2026 grants individuals and their heirs a new property right to control the creation and use of digital replicas of their voice or visual likeness, preventing unauthorized use in computer-generated media. This right lasts for the individual's lifetime plus 10 years after death, with potential extensions for continued commercial use, and applies to both living and deceased people. Online platforms and companies distributing such content must register with the Copyright Office, remove unauthorized replicas upon receiving valid notices, and face civil penalties of up to $750,000 per work if they fail to comply or knowingly distribute unauthorized replicas. The law also preempts most existing state laws protecting voice and likeness rights, though it preserves protections for sexually explicit content and election-related uses.
This bill instructs Congress to reject a specific rule issued by the Bureau of Consumer Financial Protection that sought to cancel an earlier regulation on how credit reporting agencies match names. By disapproving this withdrawal, the legislation effectively keeps the original "Name-Only Matching Procedures" rule in place, requiring agencies to continue using those specific methods for verifying consumer identities. The measure directly impacts credit reporting companies and financial institutions that rely on these identity verification standards. If passed, the rule attempting to change the matching process will have no legal effect, maintaining the status quo for name-based identity checks.
The NO FAKES Act of 2026 establishes a new property right for individuals to control the creation and use of their digital voice and visual likeness replicas, extending protection to both living people and their heirs for up to 70 years after death. The bill requires companies and platforms that distribute these digital replicas or sell tools to create them to obtain explicit authorization from the right holder, while also setting up a notification system for online services to remove unauthorized content. Additionally, the law preempts existing state laws regarding digital likeness rights and includes specific penalties and safe harbor protections for platforms that comply with the new requirements.
The You Own the Data Act (YODA) establishes new federal rules requiring major online platforms and data brokers to give users greater control over their personal information. Covered entities, defined as large websites with over 100 million users or data brokers generating significant revenue from user data, must obtain written consent before sharing contact lists and allow users to access, correct, delete, or export their data within 90 days. The bill also mandates that these companies stop tracking cookies without permission, limit data retention to 60 days for browsing and biometric data, and provide clear privacy notices in under 1,000 words. Enforcement is handled by the Federal Trade Commission and state attorneys general, while individuals can sue companies for violations and receive damages of up to $750 per incident.
The GUIDANCE Act of 2026 restores 23 specific rules and policies previously withdrawn by the Bureau of Consumer Financial Protection. These provisions directly affect consumers, financial institutions, and debt collectors by reinstating protections related to credit reporting, debt collection practices, lending discrimination, and data security. The bill effectively reverses recent administrative actions, ensuring that regulations covering medical debt, overdraft fees, and whistleblower protections remain in force.
The PROTECT Act requires the Department of Homeland Security to share safety and data protection guidelines with government agencies and private organizations within a year of passing. These guidelines focus on how to securely handle personal information for law enforcement officers and employees, as well as steps they can take to stay safe. The law defines personal information broadly to include any data that can identify an individual, regardless of their citizenship status. This initiative aims to improve security practices across federal, state, local, and private sectors without changing existing legal requirements for data handling.
This bill directs the National Institute of Standards and Technology to create task forces that develop technical standards for labeling content created by artificial intelligence. These groups will work with technology companies, social media platforms, and privacy experts to establish methods for watermarking images and videos, as well as tagging text, to help users distinguish AI-generated material from human-made content. The legislation requires these task forces to include representatives from various sectors, including developers, media organizations, and labor groups, and mandates regular reporting to Congress on their progress. Additionally, the bill emphasizes the need to protect user privacy when implementing these new tracking and labeling systems.
This bill requires federal crime control grants to include a certification that applicants have not improperly shared personal details about individuals involved in firearm transactions or background checks. It directly affects public agencies, private organizations, and local governments receiving funding from the Department of Justice, mandating they confirm they have protected sensitive data from accidental or intentional leaks. The law specifically defines "personally identifiable information" to include names, social security numbers, and biometric records to clarify what must be safeguarded. By adding these certification requirements to existing grant programs, the legislation aims to enforce stricter data privacy standards for those handling firearm-related records.
The Postal Data Privacy Act of 2026 restricts the use of mail covers by requiring governmental entities to obtain a court order before accessing postal records for criminal investigations. To qualify for such an order, authorities must provide specific facts demonstrating that the requested data is relevant and material to an ongoing case, while state laws prohibiting mail covers would override federal requirements. Additionally, the bill mandates that postal officials preserve relevant records for up to 180 days while a court order is being sought or renewed. These provisions directly affect federal and state law enforcement agencies as well as the United States Postal Inspection Service by establishing new procedural safeguards for accessing mail data.
