The My Body, My Data Act of 2025 establishes comprehensive privacy protections for personal reproductive and sexual health information. The law prohibits companies and other regulated entities from collecting, retaining, using, or disclosing this sensitive data unless strictly necessary to provide a service the individual explicitly requested. Individuals gain rights to access, correct, and delete their reproductive or sexual health information within 15 days of request, at no cost, and companies cannot retaliate against people who exercise these rights by denying services or charging higher prices. Companies must publish clear privacy policies explaining what data they collect, from whom, and with whom they share it. The Federal Trade Commission will enforce violations as unfair or deceptive practices, and individuals can also sue companies directly for breaches, potentially recovering $100 to $1,000 per violation per day, plus actual damages, punitive damages, and attorney's fees. The law applies broadly to most businesses, online platforms, and organizations but exempts healthcare providers and entities already covered under existing healthcare privacy laws like HIPAA.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.