Technology (Consumer Data Protection)

This bill establishes a framework to protect American-owned closed-source AI models from unauthorized extraction by foreign entities, particularly those from China and Russia. It requires the Secretary of State to conduct assessments identifying which foreign entities are conducting model extraction attacks or facilitating them through fraudulent account networks, then publish a public list of these actors for up to five years. The legislation authorizes the President to impose economic sanctions on identified entities and their affiliates, while also creating mechanisms for industry coordination and sharing information about threats. Importantly, the bill distinguishes between legitimate AI research conducted under contractual terms and unauthorized extraction attempts that bypass access controls or violate usage agreements.

This joint resolution seeks to disapprove a rule from the Bureau of Consumer Financial Protection that would have removed a previous requirement about protecting sensitive consumer data. If passed, the resolution would keep in place the earlier rule that mandated stricter data security measures for financial institutions. The measure directly affects banks and other financial companies that handle sensitive consumer information. It uses a congressional veto process to block the agency's attempt to withdraw the data protection rule.

This bill establishes a comprehensive federal framework for consumer data privacy and security, creating a uniform set of rules that would preempt most state privacy laws. It requires businesses that collect personal data to obtain consent from individuals before gathering or processing their information, with stricter requirements for sensitive data like health records and financial details. Covered entities must provide clear privacy policies, allow individuals to access, correct, or delete their data, and implement security programs to protect information from unauthorized access. The Federal Trade Commission would enforce these rules and has authority to impose civil penalties on violators, while also receiving additional funding to carry out enforcement duties.

The Access to Consumer Energy Information Act requires electric and gas utilities to provide customers with easy access to their energy usage data and billing information in a standardized, machine-readable format. The bill directs the Department of Energy and Federal Energy Regulatory Commission to create guidelines ensuring consumers can securely share this data with third-party apps and services to help manage energy consumption and costs. Utilities must allow customers to install software on their energy meters and cannot discriminate against third-party developers seeking access to this data. The legislation also authorizes funding to help states implement these data-sharing programs and requires a report on using meter data for wholesale electricity market settlements.

This bill, titled the Protect Liberty and End Warrantless Surveillance Act of 2026, reforms the Foreign Intelligence Surveillance Act and adds protections for data brokers to limit how law enforcement and intelligence agencies can access personal information. The legislation prohibits warrantless queries of communications belonging to U.S. persons, requires court orders before accessing certain data from third-party providers, and mandates greater transparency in surveillance directives. It also expands the role of independent advocates in surveillance court proceedings and restricts the use of illegally obtained data from data brokers in legal proceedings.

This bill, the Prediction Markets Security and Integrity Act of 2026, establishes federal safeguards for online prediction markets while returning regulatory oversight to individual States. It requires platforms to prevent fraud and manipulation, verify user identities, and prohibit underage access by restricting registration to individuals aged 21 and older. The legislation mandates that States must apply for approval from the Attorney General to operate wagering programs, with the federal government setting baseline standards for consumer protection, data security, and responsible gaming practices. Operators must comply with State regulations, report suspicious transactions, and implement measures to prevent gambling addiction through self-exclusion lists and restrictions on predatory marketing tactics.

This joint resolution seeks to overturn a Bureau of Consumer Financial Protection rule that would remove protections for digital marketing providers. The bill directly affects companies that market financial products online by restoring previous restrictions on how they can target consumers. If passed, the resolution would nullify the agency's decision to withdraw the "time or space" exception, which previously limited how long and where digital marketers could display certain financial advertisements. The measure uses Congress's legislative veto power to block the regulatory change without requiring new legislation.

Protecting Americans’ Social Security Data Act This bill prohibits political appointees and special government employees from accessing Social Security data systems that contain personally identifiable information about Social Security beneficiaries. Specifically, political appointees and special government employees may not access systems maintained by the Social Security Administration (SSA) that issue or record Social Security account numbers, that are used to determine eligibility for or to pay Social Security benefits, or that otherwise contain personally identifiable information about individuals receiving or applying for benefits.  The bill also establishes a civil right of action for an individual whose information was negligently accessed or disclosed in violation of these provisions. The individual may bring suit against the United States if the violator was a U.S. employee or officer, or against the violator if they were not a U.S. employee or officer. Such a claim must be brought within two years of the affected individual’s discovery of the violation. Upon a finding of liability, defendants are liable for specified monetary damages.  If an individual is criminally charged or subject to proposed disciplinary or adverse action by a federal or state agency for having accessed or disclosed information in violation of these provisions, SSA must notify the individual whose information was accessed or disclosed of the violation as soon as practicable.  Finally, the bill requires the SSA Office of the Inspector General to investigate and report to Congress on any unauthorized access to or disclosure of information in a beneficiary data system.

The SAFE Lending Act of 2025 strengthens consumer protections in electronic and small-dollar lending. It prohibits third parties from creating checks drawn from a consumer’s account without explicit written authorization (e.g., stopping unauthorized "remote" checks), requires small-dollar lenders (transactions under $5,000) to register with the Consumer Financial Protection Bureau, and bans fees for overdrafts on prepaid accounts. The bill also restricts lead generation for small-dollar loans by requiring lenders to directly provide credit, not just collect consumer data. A separate provision mandates a study on small-dollar lending impacts for Native American tribal communities within 180 days of enactment.

HR 2808, the Homebuyers Privacy Protection Act, restricts how consumer reporting agencies share credit reports during mortgage applications. It prevents agencies from sending these reports to third parties unless the request is tied to a firm credit offer and the recipient has either the homebuyer’s explicit written consent or is directly involved in the mortgage (like the lender, loan servicer, or the homebuyer’s bank holding an active account). This directly affects homebuyers applying for residential mortgages by limiting unsolicited sharing of their credit information. The law amends the Fair Credit Reporting Act to strengthen privacy protections around mortgage-related credit data.