The Surface Transportation Research and Development Act of 2026 updates federal programs to extend their funding periods through fiscal year 2031 and establishes a new Transportation Statistics Coordination Council to oversee data collection across the Department of Transportation. The bill also creates a study on the safety impacts of new headlamp technologies and requires a strategy to increase the use of reclaimed asphalt in road construction. Additionally, it expands rail research to address safety challenges in modern commuter and freight systems while ensuring data standards remain consistent.
The Guidelines for Use, Access, and Responsible Disclosure of Financial Data Act strengthens privacy protections for consumers by amending the Gramm-Leach-Bliley Act to require financial institutions to limit data collection to what is necessary, provide clearer privacy notices, and offer new rights for customers to access or delete their personal information. Key provisions include requiring explicit opt-in consent for sensitive data like biometric information, restricting how third parties can use consumer login credentials, and mandating that institutions disclose how they use artificial intelligence in processing financial data. The bill also establishes a right for former customers to request deletion of their data within 45 days and requires regulators to consider the impact of rules on smaller financial institutions with $15 billion or less in assets.
The "No ICE in Schools Act" proposes to prevent educational agencies and institutions from releasing student records or other personal information for immigration enforcement purposes. It directly affects schools and colleges receiving federal funds, as well as students whose data might be sought by immigration enforcement. The bill amends existing law to prohibit federal funds from being provided to any educational entity that releases such information without specific written consent from the student's parents. This parental consent must detail the records, reasons for release, and recipient, with a copy provided to the parents.
This bill requires large AI companies and organizations to disclose detailed information about their foundation models, including training data sources, model performance, and potential risks, before and during the model's use. The Federal Trade Commission will create specific rules outlining what information must be submitted to the agency and made publicly available, with exemptions for fully open-source models and special provisions for small businesses. Covered entities are defined as AI providers with over 10 million monthly users, significant computing power usage, or models that could pose security or safety risks, while the FTC will enforce compliance as unfair business practices.
This bill prohibits businesses from using automated systems to set different prices for food and groceries based on surveillance data about individual consumers, such as their browsing history or personal information. It allows exceptions for discounts based on reasonable costs, membership programs, or broad group categories like students and seniors, provided the rules are clearly disclosed and applied uniformly. The Federal Trade Commission would enforce these rules, while states and individuals can also sue for violations, seeking damages of at least $3,000 per violation.
This bill requires data centers with a peak demand of at least 25 megawatts to submit annual reports on their energy and water consumption to state agencies or federal officials if states lack such programs. The reports must include monthly usage data, efficiency metrics, and five-year projections for future energy and water use, along with plans for improving efficiency. States can charge fees to cover data collection costs, and the federal government will publish annual aggregated reports on national data center impacts on energy and water resources.
The Online Privacy Act of 2026 establishes a new Digital Privacy Agency to enforce comprehensive privacy protections for individuals in the United States. The bill requires companies that collect personal information to provide consumers with rights to access, correct, delete, and port their data, while also prohibiting discriminatory processing and requiring explicit consent for behavioral personalization. Covered entities must implement data minimization practices, maintain detailed access records for employees, and notify individuals of data breaches within 14 days. The legislation creates a new federal agency with enforcement powers, including the ability to issue cease-and-desist orders, impose civil penalties, and conduct investigations, while also transferring certain Federal Trade Commission privacy enforcement authorities to this new agency.
This joint resolution seeks to disapprove a rule from the Bureau of Consumer Financial Protection that would have removed a previous requirement about protecting sensitive consumer data. If passed, the resolution would keep in place the earlier rule that mandated stricter data security measures for financial institutions. The measure directly affects banks and other financial companies that handle sensitive consumer information. It uses a congressional veto process to block the agency's attempt to withdraw the data protection rule.
This bill establishes a new research program within NOAA to improve global ocean monitoring and observing systems. It directs the agency to develop sustained data collection capabilities, including the One-Argo system, while supporting research on ocean health, climate, and extreme weather forecasting. The legislation also mandates the integration of artificial intelligence and cloud technologies to optimize data use, requires annual reviews of program activities, and allows for competitive grants to academic and private institutions for ocean research projects.
The Security And Freedom Enhancement Act of 2026, known as the SAFE Act, introduces new rules for how U.S. intelligence agencies collect and use information about Americans and people in the United States. The bill requires the FBI to conduct regular audits of its data queries, obtain additional approvals before searching for information about elected officials and judges, and create detailed records of all searches. It also limits when government agencies can access Americans' communications without a warrant and restricts intelligence agencies from purchasing personal data from private companies about people in the United States. The law increases transparency by requiring more detailed reports to Congress and the public about surveillance activities, and it expands the role of independent reviewers in court proceedings related to intelligence gathering.
