Technology (Consumer Data Protection) in United States

in committee · United States · Senate May 7, 2025

S 1666: Improving Social Security’s Service to Victims of Identity Theft Act

This bill creates a dedicated single point of contact within the Social Security Administration for individuals affected by identity theft involving their Social Security number. It directly affects victims whose SSN was misused to fraudulently claim benefits (under Titles II, VIII, or XVI of the Social Security Act) or whose physical card was lost during delivery. The key provision requires the SSA to assign a specially trained team to coordinate all aspects of the victim's case, track it to resolution, and maintain continuity even if team members change. The team must be accountable for the case until fully resolved, with procedures ensuring case history continuity and victim notification during transitions. The requirement takes effect 180 days after the bill becomes law.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Jul 2, 2025

HR 4282: Contact Lens Prescription Verification Modernization Act

This bill requires online contact lens sellers to provide a secure electronic method for customers to transmit their contact lens prescriptions, directly affecting online retailers. It mandates that such electronic transmissions comply with HIPAA privacy rules and that any protected health information sent via email must be encrypted. The law updates existing rules to modernize prescription verification for online sales while maintaining privacy protections.

Topics ✓ Healthcare ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Apr 15, 2026

HR 7280: Veteran DATA Act

HR 7280, the Veteran DATA Act, prohibits Department of Veterans Affairs (VA) contractors from selling or misusing veterans' sensitive personal data. The bill requires all VA contracts to include clauses banning the monetization, sale, or misuse of covered information - such as health records and personally identifiable data - and mandates VA to issue compliance guidance within one year. It also requires the VA to submit a report to Congress detailing the new contract clauses, compliance guidance, and other implementation steps. This law directly affects veterans whose data is handled by VA contractors and aims to strengthen privacy protections for their personal information.

Topics ✓ Healthcare ✓ Technology ✓ Veterans

Sub-Topics Consumer Data Protection Data Privacy Veteran Employment Veteran Healthcare Veteran Mental Health

in committee · United States · House Jun 30, 2026

HR 5775: FCRA Liability Harmonization Act

This bill sets clear limits on class action lawsuits against credit reporting companies for violations of the Fair Credit Reporting Act (FCRA). For intentional failures to follow FCRA rules, it caps individual damages at $100,000 or 40% of total damages, and total class recovery at $500,000 or 1% of the company’s net worth. For negligent failures, it similarly limits total class recovery to $500,000, 1% of net worth, or 40% of actual damages. These changes directly affect credit bureaus (like Equifax or TransUnion) and creditors handling consumer credit data, preventing excessive damages in class actions. The bill harmonizes existing liability rules by adding specific, predictable financial limits to court awards.

Topics ✗ Technology

Sub-Topics Consumer Data Protection

in committee · United States · Senate Sep 15, 2025

S 2798: Equal Employment for All Act of 2025

S 2798, the Equal Employment for All Act of 2025, prohibits most employers from using credit reports for hiring decisions or employment-related adverse actions. The bill amends the Fair Credit Reporting Act to ban employers from accessing or using credit history information (like credit scores or debt records) when making job offers, promotions, or other employment decisions, except for roles requiring national security clearances or when legally required. It also states that even if a job applicant consents to a credit check, employers cannot use it for hiring purposes. This directly affects most employers across all industries and job seekers who would otherwise face employment barriers due to credit history.

Topics ✓ Labor & Employment ✓ Technology

Sub-Topics Consumer Data Protection

in committee · United States · House Nov 19, 2025

HR 6161: SEC Data Protection Act

HR 6161, the SEC Data Protection Act, requires the Securities and Exchange Commission (SEC) to establish policies protecting sensitive nonpublic data provided by investment advisers. The bill mandates that within one year of enactment, the SEC create rules addressing when it requests such data, safeguarding it based on sensitivity, restricting access to authorized staff, and preventing unauthorized use or disclosure. These policies must be developed through a notice-and-comment rulemaking process. The law directly affects investment advisers who share proprietary information with the SEC, ensuring their data is handled securely under new federal standards.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy

in committee · United States · House Sep 1, 2026

HR 2713: MAIN Event Ticketing Act

HR 2713, the MAIN Event Ticketing Act, requires ticket-issuing websites to implement stronger security measures to prevent automated bots from bypassing purchase limits and circumventing online ticketing rules. It directly affects ticket sellers (like major platforms) and their third-party service providers, mandating they establish technical safeguards, report security breaches within 30 days, and address circumvention incidents. Key provisions include requiring access controls to enforce purchase limits, creating a public complaint website for consumers, and imposing civil penalties of up to $10,000 per day for violations. The bill strengthens enforcement by the Federal Trade Commission, which will issue compliance guidance and oversee civil actions for non-compliance.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Digital Government

in committee · United States · Senate May 22, 2025

S 1916: Don’t Sell My DNA Act

This bill amends bankruptcy law to prevent the sale or sharing of genetic information (such as DNA data) in bankruptcy cases without explicit written consent. It requires bankruptcy trustees to delete genetic data from estate records unless it's sold with consent from every affected person, including those not involved in the case. The law applies to all bankruptcy cases pending or filed after enactment, directly affecting bankruptcy trustees and estate managers handling genetic data. It does not create new privacy protections outside bankruptcy proceedings.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Data Privacy

in committee · United States · House Apr 10, 2025

HR 2889: Online Consumer Protection Act

This bill requires social media platforms and online marketplaces to create clear, machine-readable terms of service in plain language that explain content moderation policies, user rights, and reporting procedures. It mandates specific consumer protection policies covering content removal, user appeals, notifications, and seller protections, along with annual reports to the Federal Trade Commission detailing these practices. The FTC will develop standardized short-form disclosures (like icons) to help consumers understand platform policies. Companies must establish consumer protection programs with dedicated officers, conduct risk assessments, and implement safeguards for consumer protection. The bill also establishes enforcement mechanisms through the FTC and allows individuals to sue for violations while prohibiting pre-dispute arbitration agreements for such claims.

Topics ✓ Technology

Sub-Topics Consumer Data Protection Social Media Tags Consumer Protection

passed · United States · Senate Jun 17, 2025

S 1467: Homebuyers Privacy Protection Act

This bill restricts how credit bureaus share consumer credit reports during mortgage applications. It limits sharing with third parties unless the request is for a firm mortgage offer or the recipient is the loan originator, servicer, or a bank holding the consumer's account. The law directly affects consumers (by limiting data sharing), credit bureaus (requiring new compliance), and mortgage lenders/banks (with restricted access). Key provisions require explicit consumer authorization for sharing and prevent broad data use during prescreening for home loans.

Topics ✓ Technology

Sub-Topics Consumer Data Protection

All technology bills