This bill prohibits data brokers from selling or sharing health data and location data about individuals, treating such sales as unfair and deceptive practices under federal law. The restrictions apply to data brokers selling this information to others and to anyone selling health or location data to data brokers, with limited exceptions for HIPAA-compliant healthcare activities, legitimate news reporting, and cases where individuals provide valid authorization. The Federal Trade Commission must issue final regulations implementing the law within 180 days of enactment, with the prohibition taking effect on whichever comes first—the FTC's final rule or 180 days after the law passes. The FTC, state attorneys general, and private citizens can all enforce the law through civil actions, with violations subject to penalties up to 15 percent of the violator's parent company's annual revenues, and the bill appropriates $1 billion to the FTC through 2035 to carry out enforcement work.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.