The My Body, My Data Act of 2023 would create federal privacy protections for reproductive and sexual health information collected by companies, apps, websites, and other businesses. The bill prohibits companies from collecting, keeping, or sharing this sensitive information unless strictly necessary to provide a service the person requested, and it gives individuals the right to access, correct, and delete their data within 15 days at no cost. Companies would be required to publish clear privacy policies explaining what data they collect and how they use it, and the bill bars companies from punishing people who exercise these privacy rights through denial of service or price discrimination. The Federal Trade Commission would enforce the law as an unfair or deceptive business practice, and individuals could also sue companies directly for violations, potentially recovering between $100 and $1,000 per violation per day plus attorney fees and damages. The law does not apply to health providers already regulated under existing privacy laws like HIPAA.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.