This bill requires social media platforms and online marketplaces to create clear, machine-readable terms of service in plain language that explain content moderation policies, user rights, and reporting procedures. It mandates specific consumer protection policies covering content removal, user appeals, notifications, and seller protections, along with annual reports to the Federal Trade Commission detailing these practices. The FTC will develop standardized short-form disclosures (like icons) to help consumers understand platform policies. Companies must establish consumer protection programs with dedicated officers, conduct risk assessments, and implement safeguards for consumer protection. The bill also establishes enforcement mechanisms through the FTC and allows individuals to sue for violations while prohibiting pre-dispute arbitration agreements for such claims.
This bill restricts how credit bureaus share consumer credit reports during mortgage applications. It limits sharing with third parties unless the request is for a firm mortgage offer or the recipient is the loan originator, servicer, or a bank holding the consumer's account. The law directly affects consumers (by limiting data sharing), credit bureaus (requiring new compliance), and mortgage lenders/banks (with restricted access). Key provisions require explicit consumer authorization for sharing and prevent broad data use during prescreening for home loans.
HR 5028, the SAFE Act of 2025, amends the Privacy Act to increase accountability for certain federal employees who intentionally or willfully violate privacy rules. It defines "covered special Government employees" as senior-level federal workers (in roles equivalent to GS-13 or higher, excluding advisory committee members or interns) who mishandle personal data. The bill allows individuals harmed by such violations to sue the employee directly, removing immunity and requiring personal liability for damages. It also permits state attorneys general to file lawsuits on behalf of residents affected by intentional privacy breaches by federal personnel.
This bill prohibits the Securities and Exchange Commission (SEC) from requiring national securities exchanges, associations, or their members to report investors' personally identifiable information (PII) for consolidated audit trail purposes. It directly affects financial market participants whose personal details - like names, addresses, Social Security numbers, email addresses, or IP addresses - would otherwise be shared under SEC rules. The law specifically blocks the SEC from mandating this PII for order or reportable event reporting under existing regulations. This is a policy change to limit the types of data collected and shared in market transparency systems.
The Facial Recognition Act of 2025 regulates law enforcement use of facial recognition technology by requiring court orders for most searches of reference photo databases, with limited exceptions for emergencies or specific situations like identifying victims or those in AMBER alerts. The bill mandates annual accuracy and bias testing of facial recognition systems by the National Institute of Standards and Technology, requires removal of photos from arrest databases for certain individuals (like minors or those not charged), and establishes detailed reporting requirements for all facial recognition use. It prohibits using facial recognition for immigration enforcement or to track people's constitutional rights, and creates civil remedies for violations. The bill applies to federal, state, and local law enforcement agencies, with potential funding reductions for states that fail to comply with its requirements.
This bill prohibits the Securities and Exchange Commission (SEC) from requiring national securities exchanges, associations, or their members to share investors' personally identifiable information (PII) - like names, addresses, or Social Security numbers - for routine consolidated audit trail reporting. It allows the SEC to request PII *only* during investigations into securities law violations or related enforcement actions, and requires exchanges to provide it within 24 hours (or a reasonable extension). The SEC must destroy any such PII within 24 hours after the investigation concludes. The bill directly affects securities exchanges and their members by restricting how they handle investor data under federal reporting rules.
S 863, the Genomic Data Protection Act, gives consumers greater control over their genetic information collected by direct-to-consumer genetic testing companies (like 23andMe or AncestryDNA). It requires these companies to provide simple tools for consumers to access their genomic data, delete their accounts (including associated data), and request destruction of biological samples (such as saliva swabs). Companies must also clearly disclose how deidentified data may be used for research and notify consumers 30 days before a company acquisition, detailing how consumer rights will be honored under new ownership. The Federal Trade Commission will enforce these requirements as unfair or deceptive practices under existing law, with companies required to fulfill deletion requests within 30 days. This bill directly affects consumers who use genetic testing services and the companies that collect their genomic data, excluding healthcare providers using genetic data for medical diagnosis.
This bill requires states to develop voluntary systems allowing drivers to add emergency contact information to their license records. States would receive federal grants or technical assistance to create these systems, which must include strong data security, limit access to emergency personnel during crises, and ensure no physical display on licenses. Drivers would not be required to provide contact details, and the information would only be accessible during emergencies. States must report on implementation to Congress within one year.
The TAKE IT DOWN Act requires major social media platforms and websites hosting user-generated content to establish a 48-hour removal process for nonconsensual intimate visual depictions (including deepfakes) upon verified request. It defines "nonconsensual intimate visual depictions" as images or videos of identifiable people shared without consent, with criminal penalties for sharing such content with intent to cause harm. The law exempts law enforcement activities, medical purposes, and content shared for legitimate educational reasons. Platforms must remove these materials quickly but are protected from liability if they act in good faith. This law directly affects social media companies and individuals whose intimate images are shared without consent.
S 414, the ADS for Mental Health Services Act, requires major social media platforms and search engines (with over 100 million monthly users) to annually report to the Federal Trade Commission (FTC) on public service advertisements promoting mental, behavioral, or physical health resources. The reports must detail the number and value of such ads, including those highlighting free local services or addressing issues like suicide prevention, addiction, or social isolation. The FTC must then summarize this data for Congress annually, without altering existing privacy or data security laws. This bill directly affects large digital platforms by mandating transparency about health-focused public service advertising.
