The My Body, My Data Act of 2025 protects personal information related to reproductive and sexual health by restricting how companies and organizations can collect, use, and share this data. The law applies to most businesses and online platforms (with exceptions for healthcare providers already regulated under HIPAA), and requires them to collect only data strictly necessary to provide requested services, establish clear privacy policies, and grant individuals the right to access, correct, and delete their information within 15 days at no cost. Companies are prohibited from retaliating against people who exercise these rights through price discrimination, service denial, or other penalties. Enforcement is handled by the Federal Trade Commission with civil penalties ranging from $100 to $1,000 per violation per day (or actual damages, whichever is greater), plus punitive damages and attorney fees, and the law allows individuals to sue directly in court without being bound by pre-dispute arbitration agreements.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.