The My Body, My Data Act of 2023 is a comprehensive privacy protection bill that restricts how companies can collect, use, and share personal information about individuals' reproductive and sexual health. The bill applies to most businesses and online platforms, requiring them to collect only the minimum information necessary to provide requested services, and giving individuals the right to access, correct, and delete their reproductive health data within 15 days at no cost. Companies must also publish clear privacy policies explaining what data they collect, how they use it, and which third parties receive it, while the legislation prohibits retaliation against individuals who exercise these privacy rights. The Federal Trade Commission will enforce the law as an unfair or deceptive practice, and individuals harmed by violations can sue for damages between $100 and $1,000 per violation per day plus attorney's fees. Notably, the bill excludes covered entities and business associates already regulated under HIPAA (healthcare privacy law) and allows individuals to pursue class action lawsuits rather than being forced into arbitration.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.