This bill prohibits data brokers from selling, trading, or sharing health data and location data about individuals, with limited exceptions for activities that comply with existing health privacy laws, newsworthy publications, and disclosures made with valid individual authorization. The law takes effect either when the Federal Trade Commission issues final regulations or 180 days after enactment, whichever comes first, and requires the FTC to issue those rules within 180 days. Enforcement is handled by the FTC, state attorneys general, and private individuals through civil lawsuits, with violations carrying civil penalties up to 15 percent of a company's revenues and a six-year statute of limitations. The bill provides $1 billion in funding to the FTC through fiscal year 2034 to implement and enforce these protections.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.