Technology (Consumer Data Protection) in United States

in committee · United States · Senate Feb 18, 2025

S 619: Credit Freeze for Kids Act

This bill allows parents or guardians to place free credit freezes on their minor children's credit reports. It requires credit bureaus to act within 3 business days when receiving verified requests from a child's representative, including proof of identity and authority. The law mandates that bureaus notify other credit bureaus about the freeze request to ensure full coverage. The provisions take effect 18 months after the bill becomes law. This directly affects minors and their representatives seeking to prevent identity theft or fraudulent credit accounts in a child's name.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Mar 24, 2025

HR 2286: American Genetic Privacy Act of 2025

HR 2286, the American Genetic Privacy Act of 2025, prohibits commercial DNA testing services (like ancestry companies) from selling or disclosing genetic data collected from users to the People’s Republic of China or any entity controlled by China. It directly affects individuals who use these services, as their genetic information - defined as data obtained through such testing - cannot be shared with Chinese entities. The bill empowers the Federal Trade Commission (FTC) to enforce these restrictions as violations of unfair or deceptive trade practices under existing law. This creates a clear legal barrier to prevent U.S. genetic data from being accessed by Chinese entities through commercial DNA testing platforms.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Jul 14, 2025

HR 4365: Consumer Online Payment Transparency and Integrity Act

HR 4365, the Consumer Online Payment Transparency and Integrity Act, requires businesses to clearly disclose automatic renewal terms and cancellation procedures when selling goods or services with free trials or automatic renewal features. It mandates 7-day advance notice before charging consumers for renewals, requires express consent for each renewal (not just initial sign-up), and ensures cancellation is as easy as signing up (via online tools or toll-free numbers). The bill also prohibits "dark patterns" (manipulative design) from tricking consumers into unintended charges and voids automatic renewals if businesses violate these rules, requiring refunds for affected consumers. This directly affects consumers who encounter surprise charges from subscriptions or free trials that convert to paid services without clear consent.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · Senate May 7, 2025

S 1666: Improving Social Security’s Service to Victims of Identity Theft Act

This bill creates a dedicated single point of contact within the Social Security Administration for individuals affected by identity theft involving their Social Security number. It directly affects victims whose SSN was misused to fraudulently claim benefits (under Titles II, VIII, or XVI of the Social Security Act) or whose physical card was lost during delivery. The key provision requires the SSA to assign a specially trained team to coordinate all aspects of the victim's case, track it to resolution, and maintain continuity even if team members change. The team must be accountable for the case until fully resolved, with procedures ensuring case history continuity and victim notification during transitions. The requirement takes effect 180 days after the bill becomes law.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Jul 2, 2025

HR 4282: Contact Lens Prescription Verification Modernization Act

This bill requires online contact lens sellers to provide a secure electronic method for customers to transmit their contact lens prescriptions, directly affecting online retailers. It mandates that such electronic transmissions comply with HIPAA privacy rules and that any protected health information sent via email must be encrypted. The law updates existing rules to modernize prescription verification for online sales while maintaining privacy protections.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Apr 15, 2026

HR 7280: Veteran DATA Act

HR 7280, the Veteran DATA Act, prohibits Department of Veterans Affairs (VA) contractors from selling or misusing veterans' sensitive personal data. The bill requires all VA contracts to include clauses banning the monetization, sale, or misuse of covered information - such as health records and personally identifiable data - and mandates VA to issue compliance guidance within one year. It also requires the VA to submit a report to Congress detailing the new contract clauses, compliance guidance, and other implementation steps. This law directly affects veterans whose data is handled by VA contractors and aims to strengthen privacy protections for their personal information.

Topics ✓ Healthcare ✓ Technology ✓ Veterans

Sub-Topics Consumer Data Protection Data Privacy Veteran Employment Veteran Healthcare Veteran Mental Health

in committee · United States · Senate Sep 15, 2025

S 2798: Equal Employment for All Act of 2025

S 2798, the Equal Employment for All Act of 2025, prohibits most employers from using credit reports for hiring decisions or employment-related adverse actions. The bill amends the Fair Credit Reporting Act to ban employers from accessing or using credit history information (like credit scores or debt records) when making job offers, promotions, or other employment decisions, except for roles requiring national security clearances or when legally required. It also states that even if a job applicant consents to a credit check, employers cannot use it for hiring purposes. This directly affects most employers across all industries and job seekers who would otherwise face employment barriers due to credit history.

Topics ✓ Labor & Employment ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Nov 19, 2025

HR 6161: SEC Data Protection Act

HR 6161, the SEC Data Protection Act, requires the Securities and Exchange Commission (SEC) to establish policies protecting sensitive nonpublic data provided by investment advisers. The bill mandates that within one year of enactment, the SEC create rules addressing when it requests such data, safeguarding it based on sensitivity, restricting access to authorized staff, and preventing unauthorized use or disclosure. These policies must be developed through a notice-and-comment rulemaking process. The law directly affects investment advisers who share proprietary information with the SEC, ensuring their data is handled securely under new federal standards.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy

in committee · United States · House Sep 1, 2026

HR 2713: MAIN Event Ticketing Act

HR 2713, the MAIN Event Ticketing Act, requires ticket-issuing websites to implement stronger security measures to prevent automated bots from bypassing purchase limits and circumventing online ticketing rules. It directly affects ticket sellers (like major platforms) and their third-party service providers, mandating they establish technical safeguards, report security breaches within 30 days, and address circumvention incidents. Key provisions include requiring access controls to enforce purchase limits, creating a public complaint website for consumers, and imposing civil penalties of up to $10,000 per day for violations. The bill strengthens enforcement by the Federal Trade Commission, which will issue compliance guidance and oversee civil actions for non-compliance.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Digital Government

in committee · United States · Senate May 22, 2025

S 1916: Don’t Sell My DNA Act

This bill amends bankruptcy law to prevent the sale or sharing of genetic information (such as DNA data) in bankruptcy cases without explicit written consent. It requires bankruptcy trustees to delete genetic data from estate records unless it's sold with consent from every affected person, including those not involved in the case. The law applies to all bankruptcy cases pending or filed after enactment, directly affecting bankruptcy trustees and estate managers handling genetic data. It does not create new privacy protections outside bankruptcy proceedings.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy

All technology bills