Overview
- The Republican-led bill, introduced by Rep. John Joyce with House Energy and Commerce Chair Brett Guthrie, would replace state privacy rules with one national framework.
- Broad preemption language would block states from enforcing stronger protections, a move critics say could undercut laws in places like California and Maryland.
- The proposal creates no private right of action, so individuals could not sue companies over violations, with the FTC and state attorneys general handling enforcement instead.
- The bill lists consumer rights such as data minimization, access and deletion, and opt-in for sensitive data, plus parental consent for ages 13 to 15, but it excludes some categories like pseudonymous data and narrows the definition of biometric data.
- It draws sharp lines of support and opposition, with major business groups backing a single standard to cut compliance costs and privacy advocates warning it weakens existing safeguards and faces a partisan path in committee.