This joint resolution seeks to formally disapprove a rule from the Bureau of Consumer Financial Protection that would have removed an earlier regulation about data security. The bill directly affects financial institutions by aiming to keep in place the 2022 requirement for stronger protection of sensitive consumer information. If passed, the rule attempting to withdraw the data security standards would have no legal effect, meaning the original data protection rules would remain active.
This bill, known as the Protecting Consumers from Deceptive AI Act, aims to combat the spread of misleading deepfakes by requiring clear labeling for content created or significantly altered by artificial intelligence. It mandates that developers of AI applications embed machine-readable watermarks and metadata into audio and visual files to identify their AI origins, while also requiring online platforms to display this information to users. To support these efforts, the legislation directs the National Institute of Standards and Technology to form task forces that will develop technical standards for content verification and establish guidelines for privacy and interoperability. Enforcement of these labeling requirements will be handled by the Federal Trade Commission, which can penalize violations as unfair or deceptive practices and may approve self-regulatory guidelines to help companies achieve compliance.
This bill, known as the HUD Data Privacy Act of 2026, restricts how the Department of Housing and Urban Development can share personal information with other agencies or third parties. It mandates that data collected from individuals receiving federal housing assistance be used solely to verify their eligibility for benefits or to determine the amount of aid they receive. The law includes specific exceptions for sharing deidentified data for research, ongoing criminal investigations, or preventing immediate threats to life, while explicitly prohibiting the use of this information for immigration enforcement purposes.
The SECURE Data Act establishes a comprehensive federal privacy framework that grants consumers specific rights to access, correct, delete, and opt out of the sale of their personal data, while requiring companies to provide clear privacy notices and implement reasonable data security measures. It directly affects large businesses and data brokers that process significant amounts of consumer information, mandating that these entities obtain explicit consent for sensitive data and prohibiting discrimination against individuals who exercise their privacy rights. The legislation creates a registration system for data brokers, allows for enforcement actions by the Federal Trade Commission and state attorneys general, and preempts conflicting state laws to ensure a uniform national standard.
This bill, known as the Email Privacy Act, amends existing federal laws to clarify how information about stored emails can be shared and how government agencies can access email content. It requires internet service providers to use the term "disclose" rather than "divulge" when sharing subscriber data and expands the definition of who can receive this information to include agents of the customer. The legislation also changes rules for government warrants by allowing providers to notify customers about the receipt of a warrant unless the government requests otherwise, while maintaining exceptions for communications made public by the sender. Additionally, the bill removes a specific time limit that previously required a warrant for emails stored for less than 180 days, ensuring consistent warrant requirements for all stored communications.
The No Rigged Grocery Prices Act prohibits grocery stores and third-party delivery services from using a customer's personal data to raise prices for specific individuals. While the law allows for standard promotions, loyalty rewards, and objective cost differences like shipping fees, it bans dynamic pricing that targets consumers based on their personal information. Retailers must also inform customers if item availability changes or if prices are calculated by weight, and delivery services need explicit permission before swapping out grocery items. Violations of these rules would be treated as unfair business practices enforceable by the Federal Trade Commission. Additionally, the bill requires the Department of Labor to report on how the adoption of electronic shelf labels affects employment at grocery stores.
The Kids Off Social Media Act prohibits social media platforms from allowing children under 13 to create accounts and requires them to delete the personal data of any existing accounts belonging to children. It also bans platforms from using personalized recommendation systems to show content to children and teens, except when the system relies only on basic information like device type, language, and location. The Eyes on the Board Act of 2026 requires schools that receive discounted internet subsidies to certify that they block students from accessing social media platforms and monitor their online activities. Together, these measures aim to limit children's access to social media and restrict how platforms use data from young users.
The Guidelines for Use, Access, and Responsible Disclosure of Financial Data Act strengthens privacy protections for consumers by amending the Gramm-Leach-Bliley Act to require financial institutions to limit data collection to what is necessary, provide clearer privacy notices, and offer new rights for customers to access or delete their personal information. Key provisions include requiring explicit opt-in consent for sensitive data like biometric information, restricting how third parties can use consumer login credentials, and mandating that institutions disclose how they use artificial intelligence in processing financial data. The bill also establishes a right for former customers to request deletion of their data within 45 days and requires regulators to consider the impact of rules on smaller financial institutions with $15 billion or less in assets.
The Surveillance Accountability Act aims to strengthen Fourth Amendment protections against warrantless government searches, directly affecting federal employees involved in surveillance and individuals whose data or privacy is subject to government access. It generally mandates that government entities obtain a warrant based on probable cause for most searches, explicitly requiring one to access data held by third-party companies like internet providers or financial institutions. While outlining exceptions for situations like plain view or publicly available information, the bill specifically prohibits the warrantless collection or analysis of biometric data (e.g., facial recognition) or license plate reader data from public places without informed consent. Additionally, it creates a new legal avenue for individuals to sue federal employees who violate their Fourth Amendment rights, allowing for redress and attorney's fees.
The SOUL Act of 2026 establishes a new federal intellectual property right for U.S. citizens over their "unique likeness," broadly defined to include their name, image, voice, biometric data, and AI-generated digital replicas. This bill grants individuals exclusive control over the reproduction, distribution, and creation of derivative works based on their likeness for their lifetime plus 50 years after death. Owners can seek civil remedies in federal court, including injunctions, content takedown orders, and statutory damages, with harm presumed, while platforms can be held liable for failing to remove unauthorized content after notification. The act includes exceptions for fair use, government activities, and First Amendment protections, and it preempts similar state laws to create a uniform national standard.
